Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.mft
File: usA65sVFitKAdlulUnmAoG_sI6g.mft (raw, json)
Hash identifier: PzsOD7EioDy67tvfbIAdU90lH3ShRaqyaZ8YTOXt4uc=
Subject key identifier: 5A:B7:38:AA:60:84:C6:74:CD:8C:9A:97:29:E2:55:7F:4E:A1:81:10
Authority key identifier: BA:C0:3A:E6:C5:45:8A:D2:80:76:5B:A5:52:79:80:A0:6F:EC:23:A8
Certificate issuer: /CN=bac03ae6c5458ad280765ba5527980a06fec23a8
Certificate serial: 019D2A047B3AD2FB6169BC28C4C30B4C7056
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/usA65sVFitKAdlulUnmAoG_sI6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 12:00:29 +0000
Manifest this update: Thu 26 Mar 2026 12:00:29 +0000
Manifest next update: Fri 27 Mar 2026 12:00:29 +0000
Files and hashes: 1: JGKLr4eYvFyQS44nBzhaqSDqb4M.roa (hash: R8q2g33KJxVN+/8kBrx+AnoKYUUKSwPLQijlXQQHaMQ=)
2: usA65sVFitKAdlulUnmAoG_sI6g.crl (hash: ob/1Ui8afppCy3YHCosOTfDJYpekpXbS53/T4GE1Olg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/usA65sVFitKAdlulUnmAoG_sI6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:7b:3a:d2:fb:61:69:bc:28:c4:c3:0b:4c:70:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bac03ae6c5458ad280765ba5527980a06fec23a8
Validity
Not Before: Mar 26 12:00:29 2026 GMT
Not After : Mar 27 12:00:29 2026 GMT
Subject: CN=5ab738aa6084c674cd8c9a9729e2557f4ea18110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:51:e0:9f:e6:b0:9a:64:3d:59:45:8d:f3:a1:
49:5f:21:f0:ee:2e:9c:bb:1a:29:f3:da:65:d0:fb:
17:c1:8d:47:60:b8:7c:ba:e4:9a:57:3c:99:53:41:
af:d0:bc:46:6c:3d:fe:ce:1a:dc:a0:06:94:6f:26:
36:ab:b9:40:34:59:66:ef:70:ff:30:ee:72:62:7e:
c0:ea:66:7d:af:13:66:0b:8c:63:49:bd:8f:3a:2c:
27:60:38:9f:34:21:5d:b6:8f:19:87:77:6e:b2:e9:
e7:b9:a3:e9:93:39:f6:e5:4a:ff:f8:ed:9a:66:fc:
ca:85:f9:c2:c2:32:b6:42:0c:40:d9:0e:6b:46:f2:
60:c4:77:12:a8:39:08:6d:aa:e5:e9:e9:c5:48:b3:
9e:ee:ac:d1:af:5d:a1:f1:35:7c:49:36:8a:f5:9a:
55:f9:79:9f:c5:81:ea:0b:a4:54:87:9c:44:75:62:
06:c3:6b:90:ea:12:9c:11:48:7f:8b:36:3f:d7:56:
c5:66:4c:29:4f:ba:b9:d6:5a:74:b8:4b:05:6b:8d:
ba:ab:31:b3:d1:b4:28:c8:34:d0:1a:36:88:30:6b:
1c:9d:9c:88:05:f3:90:46:3e:92:5d:c8:57:27:d7:
af:4c:d0:6c:eb:6c:7f:b3:08:71:87:ea:51:06:aa:
82:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B7:38:AA:60:84:C6:74:CD:8C:9A:97:29:E2:55:7F:4E:A1:81:10
X509v3 Authority Key Identifier:
keyid:BA:C0:3A:E6:C5:45:8A:D2:80:76:5B:A5:52:79:80:A0:6F:EC:23:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/usA65sVFitKAdlulUnmAoG_sI6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:fc:65:d5:fa:39:3f:c8:42:bc:ed:ab:62:c3:d3:12:39:9a:
29:43:6b:ad:c4:92:e8:ad:01:12:0b:cc:8e:f4:bf:67:a9:5c:
b5:08:ad:42:33:12:b6:e4:bd:03:5c:bc:52:71:ea:41:f1:44:
74:c5:56:c1:fb:ae:6a:9f:ae:c9:cc:26:6e:03:bc:09:f5:82:
00:bb:d4:a4:31:b4:4f:25:69:c2:10:5d:05:5f:6b:0a:1f:08:
f2:96:27:e5:ac:00:fc:a2:66:3e:e6:72:1c:b4:85:eb:8c:32:
90:96:aa:85:93:5c:e2:3e:08:7d:53:a0:40:e5:eb:85:cc:1f:
56:d5:dc:f5:1d:f2:81:cc:fd:e0:2f:f3:73:d8:ec:7b:ae:53:
9b:ae:c2:f1:14:43:54:ee:b6:ca:48:b8:50:11:73:b9:6c:04:
5e:80:cc:00:e4:ef:1a:ce:ff:76:cb:78:de:4e:64:bd:49:ed:
fe:7f:21:98:55:f5:2f:0b:23:75:0e:0e:b2:34:94:a4:7e:7f:
e6:40:09:ff:80:af:6d:fc:de:a6:7b:97:f9:9f:31:15:f2:ad:
31:0a:ee:aa:3f:25:83:50:05:23:9a:94:4b:e4:37:c5:58:51:
df:d3:79:ad:6f:b3:ff:31:f9:4c:d7:4a:3d:92:3b:e4:23:07:
19:20:7b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:38:52 2026 by rpki-client