Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a5e94c-08be-4fce-8ec9-18ece368266f/1/UsSOG7ZyzaaEZADov41taWg1178.mft
File: UsSOG7ZyzaaEZADov41taWg1178.mft (raw, json)
Hash identifier: jtU7B56VTnP9ZOp3w2yG5ZdDPj2TijQyTIayD33PUYs=
Subject key identifier: FD:08:2B:E2:DF:B8:8B:9E:E6:49:CB:4A:A8:4C:DD:5E:6D:97:2E:5E
Authority key identifier: 52:C4:8E:1B:B6:72:CD:A6:84:64:00:E8:BF:8D:6D:69:68:35:D7:BF
Certificate issuer: /CN=52c48e1bb672cda6846400e8bf8d6d696835d7bf
Certificate serial: 019F91DA15843C1E17B72DC11B58B55CC59F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UsSOG7ZyzaaEZADov41taWg1178.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a5e94c-08be-4fce-8ec9-18ece368266f/1/UsSOG7ZyzaaEZADov41taWg1178.mft
Manifest number: 0BFE
Signing time: Fri 24 Jul 2026 02:00:16 +0000
Manifest this update: Fri 24 Jul 2026 02:00:16 +0000
Manifest next update: Sat 25 Jul 2026 02:00:16 +0000
Files and hashes: 1: Pxtr7Gbm8FoWkqDWUIVtrs362Ec.roa (hash: Hjsu0JAwI6gJ3DPtZLzsxv8mvLUzo+rKbsqMaxC3bYY=)
2: UsSOG7ZyzaaEZADov41taWg1178.crl (hash: VrAKnu1LEBsJxGvetHoS1tr9qH0udO2q6SKV7enRke4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/a5e94c-08be-4fce-8ec9-18ece368266f/1/UsSOG7ZyzaaEZADov41taWg1178.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/a5e94c-08be-4fce-8ec9-18ece368266f/1/UsSOG7ZyzaaEZADov41taWg1178.mft
rsync://rpki.ripe.net/repository/DEFAULT/UsSOG7ZyzaaEZADov41taWg1178.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:15:84:3c:1e:17:b7:2d:c1:1b:58:b5:5c:c5:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52c48e1bb672cda6846400e8bf8d6d696835d7bf
Validity
Not Before: Jul 24 02:00:16 2026 GMT
Not After : Jul 25 02:00:16 2026 GMT
Subject: CN=fd082be2dfb88b9ee649cb4aa84cdd5e6d972e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:18:b2:00:9e:0a:fb:f6:40:6d:e6:4d:bc:0e:
c4:07:7b:e3:da:b8:c0:a5:13:74:27:58:2e:4f:53:
cd:6c:29:c9:f3:2e:04:9f:e2:66:48:5c:c9:bd:de:
78:af:c2:1b:fd:f4:86:b3:ec:05:e4:97:ce:9d:33:
4b:b3:18:26:2d:5a:1e:d7:34:5e:b4:b3:fc:b3:91:
f0:1a:f6:8c:a3:e5:df:87:48:00:dc:e3:70:a2:d8:
a0:5f:5c:28:f5:65:dd:c6:c8:33:9d:74:2d:93:96:
a2:79:a1:30:f1:87:b3:3a:bd:be:e1:0f:1b:97:49:
38:1e:27:bc:81:e8:36:50:ba:a8:f4:ad:ec:3a:60:
46:cc:84:00:83:64:5d:bd:34:6d:9f:55:72:f7:13:
18:49:69:99:01:a7:a4:2f:b1:58:e9:b7:95:c5:e3:
3f:70:c3:10:68:25:dc:d5:83:e8:d6:7a:36:29:15:
88:33:a9:4c:08:38:6e:04:be:50:54:1a:d3:4e:9f:
c5:ab:0c:43:b7:97:78:3d:3a:a3:aa:fd:50:17:31:
34:61:e1:67:e5:8c:df:a5:04:4c:e1:eb:81:66:5f:
0f:46:63:f8:3e:60:0b:33:3b:3a:c2:89:ef:d5:4b:
4e:d9:dd:4a:28:ff:66:41:a3:28:1c:d0:a2:65:41:
c1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:08:2B:E2:DF:B8:8B:9E:E6:49:CB:4A:A8:4C:DD:5E:6D:97:2E:5E
X509v3 Authority Key Identifier:
keyid:52:C4:8E:1B:B6:72:CD:A6:84:64:00:E8:BF:8D:6D:69:68:35:D7:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UsSOG7ZyzaaEZADov41taWg1178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a5e94c-08be-4fce-8ec9-18ece368266f/1/UsSOG7ZyzaaEZADov41taWg1178.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a5e94c-08be-4fce-8ec9-18ece368266f/1/UsSOG7ZyzaaEZADov41taWg1178.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:bf:1b:f7:3e:c9:1b:e5:75:9f:74:93:0f:8f:28:8e:ff:70:
5b:9b:6c:e7:0b:de:94:67:ac:8a:81:43:2e:38:dc:70:4b:a0:
b8:bc:41:db:9a:aa:ab:f0:82:1f:2c:42:d1:d6:7b:f2:1c:f9:
63:cc:40:fc:8f:09:f9:5c:00:62:1b:f3:24:ec:69:27:5c:90:
17:98:3a:80:2a:60:58:08:60:09:b9:71:0f:8a:f5:8e:f5:e6:
d5:1a:e5:bf:c2:bc:8c:18:44:5a:2e:02:cf:5d:e7:66:84:d4:
e5:e2:d0:a8:8c:01:e7:b7:52:12:43:65:6b:2a:ec:24:11:ba:
b1:99:bf:2f:10:c8:18:5c:54:82:1a:d2:0f:c5:de:e9:d8:99:
58:94:76:00:e5:2a:84:7c:2f:98:44:73:de:47:30:c6:42:ab:
05:f7:b1:57:17:45:ed:26:fa:90:87:52:4e:0e:0d:6f:56:a5:
9f:43:5e:a1:66:d9:2b:28:af:a8:45:fa:e7:c6:bd:eb:da:55:
c6:cb:39:0f:97:ec:f2:7e:20:8b:9e:a0:3b:c0:3c:23:7a:52:
07:6c:cf:42:e9:54:7a:7d:64:fd:01:a6:a8:7a:c3:cf:c3:89:
f4:b1:fd:dd:27:e4:9e:b7:bb:04:84:24:ad:78:91:0e:fc:5f:
5c:67:cc:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+R2hWEPB4Xty3BG1i1XMWfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyYzQ4ZTFiYjY3MmNkYTY4NDY0MDBlOGJmOGQ2ZDY5Njgz
NWQ3YmYwHhcNMjYwNzI0MDIwMDE2WhcNMjYwNzI1MDIwMDE2WjAzMTEwLwYDVQQD
EyhmZDA4MmJlMmRmYjg4YjllZTY0OWNiNGFhODRjZGQ1ZTZkOTcyZTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRiyAJ4K+/ZAbeZNvA7EB3vj2rjA
pRN0J1guT1PNbCnJ8y4En+JmSFzJvd54r8Ib/fSGs+wF5JfOnTNLsxgmLVoe1zRe
tLP8s5HwGvaMo+Xfh0gA3ONwotigX1wo9WXdxsgznXQtk5aieaEw8YezOr2+4Q8b
l0k4Hie8geg2ULqo9K3sOmBGzIQAg2RdvTRtn1Vy9xMYSWmZAaekL7FY6beVxeM/
cMMQaCXc1YPo1no2KRWIM6lMCDhuBL5QVBrTTp/FqwxDt5d4PTqjqv1QFzE0YeFn
5YzfpQRM4euBZl8PRmP4PmALMzs6wonv1UtO2d1KKP9mQaMoHNCiZUHB4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP0IK+LfuIue5knLSqhM3V5tly5eMB8GA1UdIwQY
MBaAFFLEjhu2cs2mhGQA6L+NbWloNde/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXNTT0c3Wnl6YWFFWkFEb3Y0MXRhV2cxMTc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9hNWU5NGMtMDhiZS00ZmNlLThlYzkt
MThlY2UzNjgyNjZmLzEvVXNTT0c3Wnl6YWFFWkFEb3Y0MXRhV2cxMTc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9hNWU5NGMtMDhiZS00ZmNlLThlYzktMThlY2UzNjgyNjZm
LzEvVXNTT0c3Wnl6YWFFWkFEb3Y0MXRhV2cxMTc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsb8b9z7J
G+V1n3STD48ojv9wW5ts5wvelGesioFDLjjccEuguLxB25qqq/CCHyxC0dZ78hz5
Y8xA/I8J+VwAYhvzJOxpJ1yQF5g6gCpgWAhgCblxD4r1jvXm1Rrlv8K8jBhEWi4C
z13nZoTU5eLQqIwB57dSEkNlayrsJBG6sZm/LxDIGFxUghrSD8Xe6diZWJR2AOUq
hHwvmERz3kcwxkKrBfexVxdF7Sb6kIdSTg4Nb1aln0NeoWbZKyivqEX658a969pV
xss5D5fs8n4gi56gO8A8I3pSB2zPQulUen1k/QGmqHrDz8OJ9LH93Sfknre7BIQk
rXiRDvxfXGfMYw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:20:31 2026 by rpki-client