Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.mft
File: usSgifjmioMOuYpcH-JWBlHls5s.mft (raw, json)
Hash identifier: 3TxehHwOO42nKckZHUFqgvBopr3Ch7BZUQad8bl13Bc=
Subject key identifier: 2C:36:2D:2A:4D:42:46:84:1D:48:C3:CB:A6:E1:1E:95:D6:65:63:D3
Authority key identifier: BA:C4:A0:89:F8:E6:8A:83:0E:B9:8A:5C:1F:E2:56:06:51:E5:B3:9B
Certificate issuer: /CN=bac4a089f8e68a830eb98a5c1fe2560651e5b39b
Certificate serial: 01A0D1250C3034B19F363ECFE59DBE445A0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/usSgifjmioMOuYpcH-JWBlHls5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.mft
Manifest number: 0308
Signing time: Thu 24 Sep 2026 02:01:01 +0000
Manifest this update: Thu 24 Sep 2026 02:01:01 +0000
Manifest next update: Fri 25 Sep 2026 02:01:01 +0000
Files and hashes: 1: GmNXmiq5iVl3LlLazdx_LHN3boE.asa (hash: YRVbgQn0SaBqEvSThmW75OyzWKprF8xX5w+6esDiBi4=)
2: lZdeB_zLhBn8Pma8VrIrTZ-DLw0.roa (hash: Ho6P5uHvKiLwzWfjR53vh5bZgXgpl16WZYv0ODwixJI=)
3: usSgifjmioMOuYpcH-JWBlHls5s.crl (hash: 8aqLqoK1CylGj9ZF+jLizMEA053ZZ8kv94d+Z7ulWgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/usSgifjmioMOuYpcH-JWBlHls5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 02:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:25:0c:30:34:b1:9f:36:3e:cf:e5:9d:be:44:5a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bac4a089f8e68a830eb98a5c1fe2560651e5b39b
Validity
Not Before: Sep 24 02:01:01 2026 GMT
Not After : Sep 25 02:01:01 2026 GMT
Subject: CN=2c362d2a4d4246841d48c3cba6e11e95d66563d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:86:e1:cf:3a:d7:ab:9b:d3:91:6b:4f:ca:aa:
30:ce:eb:58:81:20:a0:42:9d:ef:17:b6:90:75:2f:
27:89:29:86:d2:6e:bf:7c:a3:ac:eb:a0:48:a7:20:
5d:cb:d6:4c:d3:a1:4a:06:a3:a8:f3:a5:69:cc:36:
60:03:64:bc:42:b6:e8:5c:8c:0d:f5:32:76:e9:f4:
43:ca:d0:08:6e:cd:28:5d:5b:ee:8d:36:47:da:22:
79:e8:1b:c7:ff:9d:ee:ed:b1:d9:ad:8f:c9:0d:9c:
e4:e3:11:db:de:5d:30:89:ff:dd:c4:29:60:c5:0b:
be:3f:f3:4c:c6:6a:ab:04:34:b0:78:21:ed:4a:f6:
5c:2e:8f:b0:9d:f5:92:34:88:c5:74:84:90:d3:f9:
a9:0e:99:a5:af:5b:33:32:0b:b2:73:ec:7c:ef:25:
74:5c:e4:3e:5c:7a:4c:58:15:e1:d8:ad:28:e8:52:
70:24:18:a2:bb:47:a0:d2:91:4f:84:89:90:b1:f8:
f6:9b:af:67:ce:ff:21:f2:88:a0:23:cd:c5:e2:27:
0f:95:d4:e8:ce:e0:a5:bd:fc:67:8c:be:5c:46:e5:
36:78:f7:72:67:df:02:a3:56:40:a4:a2:c8:f7:31:
a1:01:03:92:dd:8c:cd:db:6b:06:c5:60:bd:45:51:
db:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:36:2D:2A:4D:42:46:84:1D:48:C3:CB:A6:E1:1E:95:D6:65:63:D3
X509v3 Authority Key Identifier:
keyid:BA:C4:A0:89:F8:E6:8A:83:0E:B9:8A:5C:1F:E2:56:06:51:E5:B3:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/usSgifjmioMOuYpcH-JWBlHls5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:84:f4:b2:09:6b:e9:4e:42:70:8e:e1:a2:9c:f1:30:8c:38:
7e:63:47:5a:75:c0:ce:78:b2:10:74:53:1b:9a:93:c9:ac:eb:
06:de:07:59:0e:04:f0:6c:21:e7:4d:46:73:2c:26:4e:27:98:
f3:41:33:4d:38:74:ee:d3:2c:e0:fa:3f:82:61:86:5f:4e:07:
81:d9:9e:a7:b3:61:d7:89:7d:cb:a4:0a:c2:88:ed:ed:84:b3:
07:9b:f5:27:3e:4b:11:c8:0b:01:ce:d5:e5:3e:63:56:fc:ef:
f0:99:68:d4:95:60:de:6d:6a:a8:90:cd:cb:1b:62:16:ff:01:
11:10:83:87:16:c9:c7:ec:59:5e:25:88:6f:bf:40:ca:03:1d:
63:08:27:bd:5b:bd:24:05:a0:c5:ae:41:ed:6c:05:29:65:33:
0a:b7:15:0f:e2:b0:02:03:6a:1a:cc:a8:b6:3d:5a:53:0b:99:
78:39:c5:cb:4d:6e:e1:2d:9e:2e:c6:22:58:a9:bf:a8:31:25:
10:46:e3:21:db:8f:b4:c8:8e:74:a9:27:77:e0:bd:05:cb:53:
b8:fe:a4:bc:43:bf:cd:9e:1b:0f:bd:53:98:24:a6:13:0e:44:
f9:56:30:6c:4b:14:e8:6a:be:fe:bf:0d:4c:84:16:3a:ad:c2:
0d:02:be:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:12:12 2026 by rpki-client