Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
File: Us7uLW16UMkkmdoaIfKrt6KndMg.mft (raw, json)
Hash identifier: XUDnrBjVWdmV+JVE5pyNz2l82ebxniM4dxFE5wMRqNk=
Subject key identifier: F9:AA:00:0E:D5:A9:8B:7D:39:06:DB:17:66:BD:32:54:D4:88:2D:1C
Authority key identifier: 52:CE:EE:2D:6D:7A:50:C9:24:99:DA:1A:21:F2:AB:B7:A2:A7:74:C8
Certificate issuer: /CN=52ceee2d6d7a50c92499da1a21f2abb7a2a774c8
Certificate serial: 019D273B3F129E14ED895EE56CA86C3AB3E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
Manifest number: 0D24
Signing time: Wed 25 Mar 2026 23:01:27 +0000
Manifest this update: Wed 25 Mar 2026 23:01:27 +0000
Manifest next update: Thu 26 Mar 2026 23:01:27 +0000
Files and hashes: 1: 00K95uzAVC-As-Iyho8vnUOQDZ8.roa (hash: kfLM/YtWZzFLfCP3ajHs0k6ce1lVF3pDxYNFKvjlQcg=)
2: Us7uLW16UMkkmdoaIfKrt6KndMg.crl (hash: JisPf4zCePAOMcYol3UOKA8YuAqcvLL1zXNENMuqon0=)
3: ei8OTREn63voSBE5nxK-2OquN1c.roa (hash: rtdm6RL7c+SJK/SooK4jKjSilqnAkSqbJlBiuodfm0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:3f:12:9e:14:ed:89:5e:e5:6c:a8:6c:3a:b3:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52ceee2d6d7a50c92499da1a21f2abb7a2a774c8
Validity
Not Before: Mar 25 23:01:27 2026 GMT
Not After : Mar 26 23:01:27 2026 GMT
Subject: CN=f9aa000ed5a98b7d3906db1766bd3254d4882d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:79:8e:4b:c8:aa:fb:17:66:45:41:20:53:12:
44:29:89:c0:11:fe:c2:dd:ad:16:21:64:57:5b:cc:
da:77:1d:f0:20:01:46:bd:ae:01:74:2c:75:53:c8:
f2:79:25:ba:dd:b2:52:b3:24:22:65:3c:48:07:8a:
c6:31:e1:b3:8c:99:3c:bc:e6:86:c1:d1:94:ce:89:
53:ea:14:0f:f2:ec:26:fc:47:e3:49:84:55:d7:07:
38:ec:ec:31:5d:9e:79:ab:f7:1e:ad:92:80:37:b0:
dc:dd:98:9c:36:c0:29:68:97:66:90:34:96:06:ec:
9e:1b:a6:d1:e9:6b:37:8c:c3:95:16:62:5f:2f:4f:
bb:bb:7c:3d:9c:44:1f:a8:3b:b7:49:36:81:b6:34:
69:ac:ed:1d:86:7d:b5:39:10:4f:4c:40:65:c7:03:
70:f7:d2:5b:47:42:d0:1f:a9:b7:69:ce:74:ba:08:
ee:6c:73:c4:35:d1:8b:b2:48:f7:71:d9:a4:ea:cd:
f5:44:92:48:64:da:b5:cb:c6:96:5e:ad:16:eb:97:
45:c0:e1:de:f0:2f:78:de:86:5c:f2:a3:13:eb:7a:
53:3f:17:27:82:0c:4c:6f:39:d6:11:d5:6a:2e:ec:
1b:8c:0b:2f:78:24:d8:53:e6:e7:85:11:e6:14:e0:
30:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:AA:00:0E:D5:A9:8B:7D:39:06:DB:17:66:BD:32:54:D4:88:2D:1C
X509v3 Authority Key Identifier:
keyid:52:CE:EE:2D:6D:7A:50:C9:24:99:DA:1A:21:F2:AB:B7:A2:A7:74:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:8e:60:b0:c8:de:cc:a8:58:75:97:cf:0f:c3:e4:62:e3:69:
cd:2e:6e:d3:7e:58:87:ed:58:ae:72:75:5c:8c:8f:14:3b:70:
05:78:65:1e:70:7c:fd:b9:13:44:ff:92:a8:b9:90:09:1e:09:
a8:bf:62:eb:54:da:c9:fd:50:9a:ce:d3:8f:c5:57:25:75:fa:
d1:45:45:28:ed:73:a3:44:ab:0a:d6:43:3e:d2:7e:14:b5:40:
0c:13:ce:54:18:eb:0b:8e:9d:e8:14:92:a4:d5:b0:a9:0a:09:
2c:38:58:a8:59:03:c8:0c:ec:b6:a1:1b:5c:02:84:40:b1:ac:
1a:96:dc:64:57:b3:bd:c4:e8:77:b2:de:95:29:a0:ae:83:90:
e4:c2:4c:b5:b5:f8:59:c1:0d:e4:d2:80:15:8f:ee:00:9a:67:
31:23:2b:e8:fc:f9:4a:0d:c1:a6:53:e2:d4:6f:75:c1:a6:9a:
02:35:c9:fd:d0:8d:88:d6:a2:59:01:15:04:1f:6c:1c:3e:52:
2f:71:2a:06:59:39:08:59:3a:34:e4:b3:24:ea:3b:72:1b:2c:
34:a4:53:96:13:06:28:48:44:2e:11:66:67:fd:52:0f:ea:0f:
1e:9d:62:bd:62:a1:ee:95:fe:08:76:8c:7c:d9:50:29:c0:6a:
81:ad:7c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:19 2026 by rpki-client