Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/a5e94c-08be-4fce-8ec9-18ece368266f/1/UsSOG7ZyzaaEZADov41taWg1178.mft
File: UsSOG7ZyzaaEZADov41taWg1178.mft (raw, json)
Hash identifier: s7C50MBVNl7n2kZRe0GDzl2lnEsw3o0ZJPLPcP+s0ok=
Subject key identifier: B4:C6:E5:8E:42:E9:3C:86:AE:D0:BA:09:59:E3:FC:E3:3A:02:13:B9
Authority key identifier: 52:C4:8E:1B:B6:72:CD:A6:84:64:00:E8:BF:8D:6D:69:68:35:D7:BF
Certificate issuer: /CN=52c48e1bb672cda6846400e8bf8d6d696835d7bf
Certificate serial: 01A1DEDE5068CE47F4D9BAFE698596436F22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UsSOG7ZyzaaEZADov41taWg1178.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a5e94c-08be-4fce-8ec9-18ece368266f/1/UsSOG7ZyzaaEZADov41taWg1178.mft
Manifest number: 0D2F
Signing time: Sun 15 Nov 2026 11:01:13 +0000
Manifest this update: Sun 15 Nov 2026 11:01:13 +0000
Manifest next update: Mon 16 Nov 2026 11:01:13 +0000
Files and hashes: 1: Pxtr7Gbm8FoWkqDWUIVtrs362Ec.roa (hash: Hjsu0JAwI6gJ3DPtZLzsxv8mvLUzo+rKbsqMaxC3bYY=)
2: UsSOG7ZyzaaEZADov41taWg1178.crl (hash: dxCz1h/6jDu9V8bBLhStKQ7TnWFPm86EdeZBwvMV/rM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/a5e94c-08be-4fce-8ec9-18ece368266f/1/UsSOG7ZyzaaEZADov41taWg1178.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/a5e94c-08be-4fce-8ec9-18ece368266f/1/UsSOG7ZyzaaEZADov41taWg1178.mft
rsync://rpki.ripe.net/repository/DEFAULT/UsSOG7ZyzaaEZADov41taWg1178.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:50:68:ce:47:f4:d9:ba:fe:69:85:96:43:6f:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52c48e1bb672cda6846400e8bf8d6d696835d7bf
Validity
Not Before: Nov 15 11:01:13 2026 GMT
Not After : Nov 16 11:01:13 2026 GMT
Subject: CN=b4c6e58e42e93c86aed0ba0959e3fce33a0213b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e8:96:ec:fb:23:61:ca:61:7b:d1:8e:85:37:
0d:16:04:b4:fe:1d:47:08:d8:1c:07:95:0f:7d:71:
76:4c:a9:cd:05:27:ea:9e:bd:20:d1:e4:87:c9:7c:
44:18:4b:8e:52:d7:dd:be:4e:c7:4a:f1:be:a2:79:
f8:c5:cf:e5:28:86:59:d7:9e:ca:f7:e3:44:fa:d4:
f0:75:8f:3b:95:10:c2:7e:cf:9f:5a:a2:89:b6:4f:
72:2e:d6:ee:99:73:30:ed:84:5d:a6:e3:d0:b0:7a:
4d:8a:68:d3:aa:17:5f:d2:9d:66:92:5c:b1:06:22:
ef:a0:2d:7e:8d:b4:13:ca:7b:ec:fb:42:8d:63:78:
54:3f:12:17:2f:a0:84:ab:59:9b:3c:3c:ab:90:c2:
d6:d7:e6:7c:9e:b6:e3:f0:1d:c1:8d:d0:63:ea:45:
7c:3b:42:19:fa:26:68:fc:83:d2:5b:c2:94:c7:66:
9c:6c:5b:f6:b2:9b:5a:de:d1:e8:13:20:9f:83:48:
da:21:e2:73:81:dc:03:1d:6a:b4:4d:6c:34:bd:d3:
73:fd:1f:d2:a1:05:8a:6f:59:d4:fe:0e:25:14:3a:
bb:d3:b8:26:7f:0b:1e:35:fa:9e:d3:b5:34:a1:20:
9f:cb:93:ab:c6:20:9d:bc:d4:c2:4d:74:7e:05:ec:
49:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C6:E5:8E:42:E9:3C:86:AE:D0:BA:09:59:E3:FC:E3:3A:02:13:B9
X509v3 Authority Key Identifier:
keyid:52:C4:8E:1B:B6:72:CD:A6:84:64:00:E8:BF:8D:6D:69:68:35:D7:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UsSOG7ZyzaaEZADov41taWg1178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a5e94c-08be-4fce-8ec9-18ece368266f/1/UsSOG7ZyzaaEZADov41taWg1178.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a5e94c-08be-4fce-8ec9-18ece368266f/1/UsSOG7ZyzaaEZADov41taWg1178.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:c8:30:e8:a1:57:54:b9:b9:ba:79:5f:d5:c1:cf:94:8f:f0:
22:60:c9:00:b5:83:c8:72:52:80:f3:42:5e:4a:e4:56:a9:81:
10:a2:5a:b4:00:28:06:f5:12:16:37:66:92:58:14:3b:de:d1:
68:e3:2d:4d:f7:eb:c2:c3:c4:43:73:49:5b:6b:8a:0a:b4:58:
df:5d:13:64:4a:0d:f2:7f:6e:a3:2d:0c:03:a4:77:14:2f:6b:
64:b1:54:12:8e:30:e6:c8:5c:8d:f1:c2:fe:93:f5:e0:8b:1c:
72:af:ca:b4:85:2b:21:ae:b3:11:ad:b6:85:a6:0c:e4:2b:f8:
79:c0:bf:09:eb:91:95:ae:eb:56:2c:5a:29:d4:0c:bc:43:0c:
75:a5:b9:6f:58:66:a8:69:66:2b:95:dc:f0:28:1b:25:ff:7a:
3c:62:c7:df:99:d9:76:2e:25:02:1c:59:8f:b7:13:50:83:21:
d5:3e:3c:33:69:bb:07:94:dc:3a:92:87:f4:42:6e:81:94:54:
7b:1f:5a:8f:06:47:63:5f:6c:d8:dd:eb:87:a7:84:d5:30:fd:
87:15:2f:cb:ee:bb:0d:ca:93:e6:08:87:46:dd:77:bf:92:d8:
74:88:7a:b8:1c:32:cb:46:cd:c3:37:c0:fa:d1:08:ff:cd:84:
fa:ae:d3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:36:31 2026 by rpki-client