Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.mft
File: usSgifjmioMOuYpcH-JWBlHls5s.mft (raw, json)
Hash identifier: Jn+ENlR80CXx5eXpXRMyEXmjuxCZ5FPYFSSfTCCl2MQ=
Subject key identifier: 4E:9F:A4:CB:C0:C9:5D:F7:46:A4:85:DB:CF:CC:79:61:1F:2B:B5:7B
Authority key identifier: BA:C4:A0:89:F8:E6:8A:83:0E:B9:8A:5C:1F:E2:56:06:51:E5:B3:9B
Certificate issuer: /CN=bac4a089f8e68a830eb98a5c1fe2560651e5b39b
Certificate serial: 019E1D5973CD04D4954E9D11B15159676412
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/usSgifjmioMOuYpcH-JWBlHls5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.mft
Manifest number: 01A1
Signing time: Tue 12 May 2026 18:01:02 +0000
Manifest this update: Tue 12 May 2026 18:01:02 +0000
Manifest next update: Wed 13 May 2026 18:01:02 +0000
Files and hashes: 1: 2HMiQuTO6J2fIcF3eHoToEe_Luc.asa (hash: Yt/kPR8GjLco9YHRPCXIo1zG3Dig9SCG1mXTu6u80U0=)
2: lZdeB_zLhBn8Pma8VrIrTZ-DLw0.roa (hash: Ho6P5uHvKiLwzWfjR53vh5bZgXgpl16WZYv0ODwixJI=)
3: usSgifjmioMOuYpcH-JWBlHls5s.crl (hash: jlN3sC1kuMIxgp+hBU27pT5XkQUH9KQjaOZuXCp5F9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/usSgifjmioMOuYpcH-JWBlHls5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:73:cd:04:d4:95:4e:9d:11:b1:51:59:67:64:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bac4a089f8e68a830eb98a5c1fe2560651e5b39b
Validity
Not Before: May 12 18:01:02 2026 GMT
Not After : May 13 18:01:02 2026 GMT
Subject: CN=4e9fa4cbc0c95df746a485dbcfcc79611f2bb57b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:46:90:53:3d:62:13:76:27:f9:cf:b5:a7:41:
95:cb:0c:f8:d6:c5:92:72:42:1b:81:14:33:21:5d:
94:9b:d6:a8:68:b3:98:1f:83:34:53:3f:93:42:55:
88:65:d0:97:4d:45:d7:4b:1e:53:a0:b6:f8:e8:c1:
d3:52:a8:4e:6a:d5:14:2b:16:d6:67:14:4e:dd:a5:
0f:20:cd:26:72:b0:c2:c7:d8:9a:67:ef:c8:36:dd:
ae:ae:f8:b3:49:c8:be:e8:1c:cb:09:4f:3e:e4:12:
c4:c9:c8:32:da:90:b4:5a:dd:4a:ef:0c:94:ef:ee:
90:79:e3:c3:4c:0f:a7:69:45:86:ac:af:6f:ce:ab:
25:4a:fa:6c:c2:8a:3c:be:f8:8a:4a:46:ae:d6:79:
d9:81:90:89:07:e8:2f:31:3f:06:ee:0a:00:2f:dd:
ab:46:10:09:f3:87:fe:dc:f5:ce:36:6b:64:6d:bb:
02:a3:d5:34:f6:cc:54:4c:93:8f:2e:26:ff:35:25:
c8:86:1a:89:75:95:37:c0:84:31:4a:a6:b6:7b:4e:
87:b5:b1:08:41:fc:39:4d:3d:6e:7a:0b:91:34:ad:
aa:7e:d2:e1:5b:ca:7e:64:c6:c8:ed:ee:df:8d:e2:
a6:26:ee:b3:91:0d:df:2b:43:08:74:af:b0:2d:a2:
aa:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:9F:A4:CB:C0:C9:5D:F7:46:A4:85:DB:CF:CC:79:61:1F:2B:B5:7B
X509v3 Authority Key Identifier:
keyid:BA:C4:A0:89:F8:E6:8A:83:0E:B9:8A:5C:1F:E2:56:06:51:E5:B3:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/usSgifjmioMOuYpcH-JWBlHls5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:77:0b:81:31:8c:55:e5:a7:c6:e8:6d:3f:38:ce:2e:00:ba:
0e:15:0a:c8:a9:0e:bc:c0:b1:f3:65:d1:c7:f1:c8:c0:1c:f9:
07:e7:7a:dc:64:3f:6f:d8:ca:97:c2:27:15:db:27:c4:b3:60:
74:a9:b9:18:56:65:61:bf:2f:51:3a:4c:5b:2e:96:ab:82:cd:
c9:f1:8b:dd:03:87:2c:87:89:db:b6:dc:58:86:cf:0f:91:f4:
94:04:db:90:94:26:ee:18:fd:b6:de:05:1c:f2:e7:9b:79:6d:
2f:7d:73:fb:9d:7b:f1:f3:e4:1a:2b:ac:fa:fa:30:65:d6:1e:
65:82:6c:43:ce:e0:55:8d:af:d7:7d:c3:4f:e6:0b:cc:01:70:
3c:ec:95:81:9b:c1:6c:cc:de:34:58:27:0a:bc:c0:ae:a4:bc:
e8:90:21:d2:52:bf:c3:e5:38:d2:aa:8e:62:cc:c9:be:7d:f0:
c5:0f:36:f1:07:e2:c1:67:7f:4f:21:cb:3d:cf:2f:29:ea:9a:
c5:51:7e:d2:1d:30:10:b8:a4:57:19:e8:d6:0b:ee:08:84:ca:
5a:05:e0:5b:ca:67:49:61:06:e0:5b:da:3e:92:5e:3d:c2:c0:
da:07:e5:b0:42:d0:d4:fa:c7:29:f6:29:f0:b7:19:23:8f:bb:
33:6e:c9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:40:28 2026 by rpki-client