Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
File: Us7uLW16UMkkmdoaIfKrt6KndMg.mft (raw, json)
Hash identifier: 1H+ZoCtshZcpXnrvtxReBMpx3ckVT3ZFAnrptac3FNI=
Subject key identifier: 37:E0:F1:B6:53:7C:BA:CC:F5:38:A3:19:85:CF:CF:25:1F:1F:BE:0A
Authority key identifier: 52:CE:EE:2D:6D:7A:50:C9:24:99:DA:1A:21:F2:AB:B7:A2:A7:74:C8
Certificate issuer: /CN=52ceee2d6d7a50c92499da1a21f2abb7a2a774c8
Certificate serial: 019E1E6C923A37824FEC491C337481D67370
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
Manifest number: 0DA4
Signing time: Tue 12 May 2026 23:01:32 +0000
Manifest this update: Tue 12 May 2026 23:01:32 +0000
Manifest next update: Wed 13 May 2026 23:01:32 +0000
Files and hashes: 1: 00K95uzAVC-As-Iyho8vnUOQDZ8.roa (hash: kfLM/YtWZzFLfCP3ajHs0k6ce1lVF3pDxYNFKvjlQcg=)
2: Us7uLW16UMkkmdoaIfKrt6KndMg.crl (hash: fafWnh1yuEp1vjzuzDrbOwjCI0nXOY+fulqf9xB4dpY=)
3: ei8OTREn63voSBE5nxK-2OquN1c.roa (hash: rtdm6RL7c+SJK/SooK4jKjSilqnAkSqbJlBiuodfm0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:92:3a:37:82:4f:ec:49:1c:33:74:81:d6:73:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52ceee2d6d7a50c92499da1a21f2abb7a2a774c8
Validity
Not Before: May 12 23:01:32 2026 GMT
Not After : May 13 23:01:32 2026 GMT
Subject: CN=37e0f1b6537cbaccf538a31985cfcf251f1fbe0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:58:4f:de:07:f0:88:1c:18:a8:d2:9f:8f:11:
f0:58:87:c1:a6:05:95:ef:63:58:1f:8a:c4:2f:45:
e4:b9:84:91:f1:23:66:f4:51:47:e8:fa:46:eb:7c:
ca:08:dc:41:f4:46:f9:71:ae:46:48:9a:bd:13:81:
58:67:4d:29:31:8a:8a:37:19:0d:cb:70:71:3f:0c:
ed:80:0b:67:6d:c7:21:2c:6e:ec:aa:98:32:dd:9a:
8a:bf:6b:a8:7e:8e:c2:5d:f5:44:87:08:2a:d7:87:
9a:51:9c:00:8d:7d:59:86:b2:5c:27:ff:49:1b:e5:
7f:2a:bf:93:48:59:af:e6:13:22:42:1f:71:b3:d1:
50:29:42:28:d5:8c:3b:82:99:24:a2:e7:bb:2c:c0:
74:4d:51:68:5e:88:d7:31:64:51:a2:5c:af:5e:d0:
93:9d:75:ed:ec:42:3b:1a:02:59:9d:38:74:18:25:
1a:c2:17:59:ca:67:49:73:45:20:c5:4b:f4:9d:24:
af:27:8c:f0:7f:77:54:c3:da:b1:da:ee:da:ae:6f:
76:61:b9:d8:ef:aa:5c:64:5c:e0:e0:c6:a2:42:88:
01:b7:87:33:f7:55:ac:0a:bc:42:be:e1:ba:c9:c6:
72:43:a5:84:e5:08:88:1a:64:28:c7:b6:39:9c:06:
98:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E0:F1:B6:53:7C:BA:CC:F5:38:A3:19:85:CF:CF:25:1F:1F:BE:0A
X509v3 Authority Key Identifier:
keyid:52:CE:EE:2D:6D:7A:50:C9:24:99:DA:1A:21:F2:AB:B7:A2:A7:74:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ab:e7:50:36:a9:97:27:9a:56:46:98:85:e5:10:dc:a3:c9:
64:ae:61:60:02:36:54:33:62:f2:c1:a7:00:56:c1:ff:3a:ed:
b4:9f:fd:9e:1c:49:ee:47:43:2b:9f:75:a7:55:dd:7a:7e:29:
85:f9:6d:40:17:88:9c:4d:cc:9c:d2:74:91:0c:f5:06:a6:0e:
55:66:08:18:3d:8a:fa:87:25:b7:15:0c:4c:d7:e9:b2:ff:af:
4a:36:7a:95:63:87:b2:52:eb:22:d4:41:4e:7b:ee:99:32:fe:
3c:69:b4:f3:ed:c5:45:37:ff:a6:81:1e:87:ca:71:39:cf:d5:
5d:cc:7a:3d:99:ca:f4:7e:90:84:b9:2e:6f:37:58:94:c8:25:
83:b0:83:d8:9b:18:74:ea:f8:cf:2f:32:55:88:95:4d:78:20:
c0:f6:5d:31:37:40:6f:28:3b:73:7b:e0:16:84:69:04:75:95:
61:73:1c:bc:ce:8a:c6:42:92:19:f8:f4:e5:fa:e4:a7:d6:fa:
1b:7f:7c:c7:bf:7e:4e:5a:5b:6c:ef:8d:3b:3a:ea:ce:73:71:
70:57:eb:92:02:c3:99:e8:13:44:a3:35:9a:fa:89:96:d0:66:
9f:58:48:22:fb:85:82:8b:1a:e2:9a:83:e6:ac:95:91:68:a5:
ac:58:a0:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ebJI6N4JP7EkcM3SB1nNwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyY2VlZTJkNmQ3YTUwYzkyNDk5ZGExYTIxZjJhYmI3YTJh
Nzc0YzgwHhcNMjYwNTEyMjMwMTMyWhcNMjYwNTEzMjMwMTMyWjAzMTEwLwYDVQQD
EygzN2UwZjFiNjUzN2NiYWNjZjUzOGEzMTk4NWNmY2YyNTFmMWZiZTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FhP3gfwiBwYqNKfjxHwWIfBpgWV
72NYH4rEL0XkuYSR8SNm9FFH6PpG63zKCNxB9Eb5ca5GSJq9E4FYZ00pMYqKNxkN
y3BxPwztgAtnbcchLG7sqpgy3ZqKv2uofo7CXfVEhwgq14eaUZwAjX1ZhrJcJ/9J
G+V/Kr+TSFmv5hMiQh9xs9FQKUIo1Yw7gpkkoue7LMB0TVFoXojXMWRRolyvXtCT
nXXt7EI7GgJZnTh0GCUawhdZymdJc0UgxUv0nSSvJ4zwf3dUw9qx2u7arm92YbnY
76pcZFzg4MaiQogBt4cz91WsCrxCvuG6ycZyQ6WE5QiIGmQox7Y5nAaYrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDfg8bZTfLrM9TijGYXPzyUfH74KMB8GA1UdIwQY
MBaAFFLO7i1telDJJJnaGiHyq7eip3TIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXM3dUxXMTZVTWtrbWRvYUlmS3J0NktuZE1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9kZWNhZWItM2Y5NS00ZjJhLWFmNjUt
MGMwMjBhN2U0YTQ0LzEvVXM3dUxXMTZVTWtrbWRvYUlmS3J0NktuZE1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9kZWNhZWItM2Y5NS00ZjJhLWFmNjUtMGMwMjBhN2U0YTQ0
LzEvVXM3dUxXMTZVTWtrbWRvYUlmS3J0NktuZE1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFKvnUDap
lyeaVkaYheUQ3KPJZK5hYAI2VDNi8sGnAFbB/zrttJ/9nhxJ7kdDK591p1Xden4p
hfltQBeInE3MnNJ0kQz1BqYOVWYIGD2K+ocltxUMTNfpsv+vSjZ6lWOHslLrItRB
TnvumTL+PGm08+3FRTf/poEeh8pxOc/VXcx6PZnK9H6QhLkubzdYlMglg7CD2JsY
dOr4zy8yVYiVTXggwPZdMTdAbyg7c3vgFoRpBHWVYXMcvM6KxkKSGfj05frkp9b6
G398x79+TlpbbO+NOzrqznNxcFfrkgLDmegTRKM1mvqJltBmn1hIIvuFgosa4pqD
5qyVkWilrFig0Q==
-----END CERTIFICATE-----
Generated at Wed May 13 06:33:39 2026 by rpki-client