Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/a5e94c-08be-4fce-8ec9-18ece368266f/1/UsSOG7ZyzaaEZADov41taWg1178.mft
File: UsSOG7ZyzaaEZADov41taWg1178.mft (raw, json)
Hash identifier: rcJ/EebUKckp6+jFfEiZtuE9F9wo0mX4kTTH4Lj7qmA=
Subject key identifier: 82:9E:B7:C9:C5:54:29:C1:C6:C2:E5:22:F4:A1:EA:12:7A:81:F0:63
Authority key identifier: 52:C4:8E:1B:B6:72:CD:A6:84:64:00:E8:BF:8D:6D:69:68:35:D7:BF
Certificate issuer: /CN=52c48e1bb672cda6846400e8bf8d6d696835d7bf
Certificate serial: 01A0E1E1E659064BEF971A6822D586908235
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UsSOG7ZyzaaEZADov41taWg1178.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a5e94c-08be-4fce-8ec9-18ece368266f/1/UsSOG7ZyzaaEZADov41taWg1178.mft
Manifest number: 0CAC
Signing time: Sun 27 Sep 2026 08:01:13 +0000
Manifest this update: Sun 27 Sep 2026 08:01:13 +0000
Manifest next update: Mon 28 Sep 2026 08:01:13 +0000
Files and hashes: 1: Pxtr7Gbm8FoWkqDWUIVtrs362Ec.roa (hash: Hjsu0JAwI6gJ3DPtZLzsxv8mvLUzo+rKbsqMaxC3bYY=)
2: UsSOG7ZyzaaEZADov41taWg1178.crl (hash: ojCAI3GjdVGwQ/h6ZuDIq3ZWEeZaRVNpLXUzvkaTU3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/a5e94c-08be-4fce-8ec9-18ece368266f/1/UsSOG7ZyzaaEZADov41taWg1178.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/a5e94c-08be-4fce-8ec9-18ece368266f/1/UsSOG7ZyzaaEZADov41taWg1178.mft
rsync://rpki.ripe.net/repository/DEFAULT/UsSOG7ZyzaaEZADov41taWg1178.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:e1:e6:59:06:4b:ef:97:1a:68:22:d5:86:90:82:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52c48e1bb672cda6846400e8bf8d6d696835d7bf
Validity
Not Before: Sep 27 08:01:13 2026 GMT
Not After : Sep 28 08:01:13 2026 GMT
Subject: CN=829eb7c9c55429c1c6c2e522f4a1ea127a81f063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:69:70:48:4d:5f:c9:b2:2c:82:3b:e2:89:b1:
2f:fe:0f:40:dd:e9:00:72:91:73:e4:14:94:f9:b3:
b8:13:da:52:ba:9e:82:96:8c:2e:5a:d2:78:4e:19:
31:5b:40:76:58:a4:8a:b7:44:d0:91:b3:07:62:b6:
f5:a2:46:d8:0e:aa:43:9a:a7:5f:fe:f9:e5:13:ca:
72:03:ec:cf:91:2e:d1:51:16:13:25:b4:4b:af:9b:
99:ea:b9:76:b6:9a:bd:f3:84:73:14:64:3f:7d:04:
d3:fa:f9:76:33:dd:a1:fa:a4:33:f3:4f:e7:d7:ab:
35:b0:fc:80:b7:8e:e7:7b:38:19:6c:c3:b5:62:bf:
f3:7d:af:db:bd:1e:15:60:d3:ba:91:10:11:c5:7e:
87:f1:9c:9a:7d:d3:25:52:cc:01:71:66:e4:32:ef:
de:dd:d3:ea:95:a6:f8:f8:1f:4b:f9:9a:8e:a1:6e:
00:39:4c:0b:32:6a:cd:5d:45:7f:d1:ca:35:68:e3:
86:7d:dc:91:f1:ab:1b:12:85:92:9b:df:fe:96:77:
42:26:6a:ce:37:df:b5:18:0f:2d:1b:ce:7f:45:11:
f2:04:e7:77:d5:28:8e:df:40:64:57:a0:d6:eb:9b:
20:ed:9c:8b:99:c3:d8:78:c8:26:cd:ea:ee:08:00:
a3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:9E:B7:C9:C5:54:29:C1:C6:C2:E5:22:F4:A1:EA:12:7A:81:F0:63
X509v3 Authority Key Identifier:
keyid:52:C4:8E:1B:B6:72:CD:A6:84:64:00:E8:BF:8D:6D:69:68:35:D7:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UsSOG7ZyzaaEZADov41taWg1178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a5e94c-08be-4fce-8ec9-18ece368266f/1/UsSOG7ZyzaaEZADov41taWg1178.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a5e94c-08be-4fce-8ec9-18ece368266f/1/UsSOG7ZyzaaEZADov41taWg1178.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:5b:cf:6f:b3:9a:66:fa:61:3d:5b:e8:ec:fa:ce:3d:11:07:
ca:96:62:ef:85:4a:09:2b:b7:f6:c2:da:2e:b5:01:f0:04:4f:
c6:33:ec:9d:1e:f9:e5:ed:4d:01:ae:72:cc:94:0c:41:02:00:
a4:83:28:7f:07:58:d1:2f:cb:4f:0f:44:45:3e:04:f2:90:24:
dc:0e:9d:2d:cd:6d:80:12:ad:f8:eb:51:ef:fa:25:92:49:82:
25:2a:20:c4:21:a1:d6:e4:f1:c2:dc:74:26:9b:3a:f0:73:db:
fa:20:c1:b9:00:1a:d7:9e:29:87:02:e9:ac:76:6d:05:23:78:
50:05:ad:84:f3:e5:bf:e1:bb:61:2f:db:df:7f:2f:f7:78:b1:
21:07:01:52:fb:cc:76:a8:5e:95:52:10:ab:06:2b:5d:a3:1c:
c6:e9:34:c1:99:a8:2f:aa:e4:16:5d:d1:67:b8:48:4b:6a:8f:
45:00:78:70:4c:51:8d:f1:05:79:a6:00:d0:b3:f8:75:39:56:
df:66:f4:ad:52:83:a3:cb:97:86:cc:20:60:30:38:b8:0d:a6:
29:57:6a:da:9f:38:02:30:13:15:e4:e0:3b:25:7f:5a:1a:f7:
df:6e:f0:22:0a:45:a1:73:88:9f:93:2b:4c:9a:99:6b:d3:fc:
ac:f8:55:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:17:19 2026 by rpki-client