Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.mft
File: usSgifjmioMOuYpcH-JWBlHls5s.mft (raw, json)
Hash identifier: 5/jXOWVHEGp4qKbwtV1/ylm+Sb6vvxiWM8hhI3lTTp0=
Subject key identifier: DA:C7:4B:8D:D4:38:D3:49:EA:0B:95:49:4A:32:72:33:02:A6:FB:0B
Authority key identifier: BA:C4:A0:89:F8:E6:8A:83:0E:B9:8A:5C:1F:E2:56:06:51:E5:B3:9B
Certificate issuer: /CN=bac4a089f8e68a830eb98a5c1fe2560651e5b39b
Certificate serial: 019D2816CBF0707A61531ED991BD0AC6B97B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/usSgifjmioMOuYpcH-JWBlHls5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.mft
Manifest number: 0122
Signing time: Thu 26 Mar 2026 03:01:15 +0000
Manifest this update: Thu 26 Mar 2026 03:01:15 +0000
Manifest next update: Fri 27 Mar 2026 03:01:15 +0000
Files and hashes: 1: 2HMiQuTO6J2fIcF3eHoToEe_Luc.asa (hash: Yt/kPR8GjLco9YHRPCXIo1zG3Dig9SCG1mXTu6u80U0=)
2: lZdeB_zLhBn8Pma8VrIrTZ-DLw0.roa (hash: Ho6P5uHvKiLwzWfjR53vh5bZgXgpl16WZYv0ODwixJI=)
3: usSgifjmioMOuYpcH-JWBlHls5s.crl (hash: 7BH1pxzEUR+oSK/IbUQPe3f3tV1/8HvAAy584Pvcldc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/usSgifjmioMOuYpcH-JWBlHls5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:cb:f0:70:7a:61:53:1e:d9:91:bd:0a:c6:b9:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bac4a089f8e68a830eb98a5c1fe2560651e5b39b
Validity
Not Before: Mar 26 03:01:15 2026 GMT
Not After : Mar 27 03:01:15 2026 GMT
Subject: CN=dac74b8dd438d349ea0b95494a32723302a6fb0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:78:a8:4b:79:85:a1:e5:b6:3d:a4:07:a7:4d:
b3:d5:c3:b6:87:89:6e:7a:2a:46:eb:54:52:32:17:
0b:9a:33:c9:59:0c:46:3f:fe:4f:54:59:96:f4:1c:
78:81:61:bb:1c:dd:a1:21:92:20:44:da:9d:6a:0f:
1d:3c:92:18:66:9f:35:2d:02:31:9b:31:36:86:ce:
d4:ec:87:23:fa:76:36:dc:0d:3f:a0:99:ba:76:b6:
f0:8a:94:59:7c:aa:08:16:07:10:07:6d:93:b7:72:
2c:03:58:e4:88:5d:9b:aa:70:ed:ec:6a:14:6e:2b:
cb:13:05:79:bb:87:be:bf:35:aa:b2:c0:b0:61:dd:
12:2b:18:06:11:ab:7c:15:09:3b:54:10:d8:29:37:
c5:2e:d2:1b:31:90:53:77:ac:2a:bf:ff:63:c7:f1:
26:e4:9d:be:bd:79:2d:f8:68:62:4b:e8:81:7a:c0:
94:72:c1:20:b1:a2:c8:4e:47:10:f4:91:02:bd:29:
b0:00:56:f1:aa:55:0b:fd:fd:01:30:d4:3a:e4:b1:
34:9e:05:fd:9d:8e:5a:cb:2e:07:eb:09:4c:07:e1:
79:29:68:e4:b8:93:dd:c5:78:ca:97:30:2b:62:4a:
ef:7f:e5:14:26:dd:4c:bf:21:3c:fb:46:97:07:0a:
be:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C7:4B:8D:D4:38:D3:49:EA:0B:95:49:4A:32:72:33:02:A6:FB:0B
X509v3 Authority Key Identifier:
keyid:BA:C4:A0:89:F8:E6:8A:83:0E:B9:8A:5C:1F:E2:56:06:51:E5:B3:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/usSgifjmioMOuYpcH-JWBlHls5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:92:f6:a4:3b:a0:71:ba:21:ef:ca:1e:6c:8a:92:cb:ed:e8:
b2:10:de:28:51:f1:1e:b3:7c:bc:90:ea:f6:e8:10:db:ed:35:
f1:77:c8:51:75:f1:66:a4:c8:80:20:6d:63:a6:69:95:90:2f:
bc:87:4b:97:8d:72:64:a7:5f:44:1e:f7:32:f7:53:7d:67:46:
f2:a8:d0:7e:58:86:c9:4b:02:a3:54:e0:78:ff:62:ad:31:4f:
be:90:fa:aa:66:9f:5a:18:01:9c:1d:80:e5:87:e7:33:12:4a:
72:4f:a6:6f:58:14:7a:3d:09:e4:8a:32:b9:3f:8f:93:56:d5:
4b:c9:30:b2:2f:da:38:7a:bf:84:f6:22:3c:05:2c:af:4f:7e:
14:ac:5a:c9:68:ae:3f:83:31:cf:43:cd:cd:5f:d6:7f:e0:51:
f2:e7:ad:a7:43:90:44:3c:5e:93:82:e8:9b:8d:53:f0:61:4a:
a4:f4:b3:44:01:9f:e2:13:5c:9e:65:21:33:ae:56:c7:98:46:
d5:ea:6c:46:d3:6f:61:26:8c:c8:69:ce:ea:fe:34:c6:d9:b1:
99:6d:04:67:5f:37:82:3b:51:f5:16:5e:87:9a:fd:a5:f9:8f:
2a:fd:de:00:43:7d:0f:9b:e6:62:36:23:ae:a6:46:9b:11:f1:
69:25:54:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:48:53 2026 by rpki-client