Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/5224cc-e743-4a6e-98b5-41d3a84abccb/1/US7HYztuWDv6P6f_eEjxqp8oAIU.mft
File: US7HYztuWDv6P6f_eEjxqp8oAIU.mft (raw, json)
Hash identifier: KSK4dyIzfmm7e+2SSUn4B89GnwBMhCpSB4HFebUjpaM=
Subject key identifier: A6:FF:EA:F9:E6:E5:2B:B3:8D:ED:DD:9F:7C:38:4B:F3:74:72:0E:5B
Authority key identifier: 51:2E:C7:63:3B:6E:58:3B:FA:3F:A7:FF:78:48:F1:AA:9F:28:00:85
Certificate issuer: /CN=512ec7633b6e583bfa3fa7ff7848f1aa9f280085
Certificate serial: 019D2695F98A1C48378A8190CE924F4FF7D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/US7HYztuWDv6P6f_eEjxqp8oAIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/5224cc-e743-4a6e-98b5-41d3a84abccb/1/US7HYztuWDv6P6f_eEjxqp8oAIU.mft
Manifest number: 0145
Signing time: Wed 25 Mar 2026 20:00:56 +0000
Manifest this update: Wed 25 Mar 2026 20:00:56 +0000
Manifest next update: Thu 26 Mar 2026 20:00:56 +0000
Files and hashes: 1: US7HYztuWDv6P6f_eEjxqp8oAIU.crl (hash: nNZggpOHa8SR+IspGwb1fCwek0IDmrgXQ5QkWwACr20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/5224cc-e743-4a6e-98b5-41d3a84abccb/1/US7HYztuWDv6P6f_eEjxqp8oAIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/5224cc-e743-4a6e-98b5-41d3a84abccb/1/US7HYztuWDv6P6f_eEjxqp8oAIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/US7HYztuWDv6P6f_eEjxqp8oAIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:f9:8a:1c:48:37:8a:81:90:ce:92:4f:4f:f7:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=512ec7633b6e583bfa3fa7ff7848f1aa9f280085
Validity
Not Before: Mar 25 20:00:56 2026 GMT
Not After : Mar 26 20:00:56 2026 GMT
Subject: CN=a6ffeaf9e6e52bb38deddd9f7c384bf374720e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:81:1a:7c:43:58:3c:f5:85:68:a5:c2:84:06:
41:bb:1a:a5:5b:4c:de:e0:ce:8d:26:a2:6a:4e:c6:
0b:17:b2:fc:48:a8:44:59:ab:ba:e6:7d:0b:4b:88:
bc:0e:30:0f:31:5f:b6:1b:06:94:d0:7e:99:38:5d:
9c:96:15:22:ef:cc:f7:fa:11:dd:d0:8a:d7:99:e6:
4d:25:8e:24:ca:34:ad:0b:dd:69:c4:f8:d7:c7:8d:
a7:68:6b:61:1d:82:be:52:88:e9:bf:6c:c3:75:ae:
56:a8:07:b0:ec:c0:3d:e8:53:77:32:5e:89:a8:29:
cb:8f:ca:f8:dc:b5:94:86:51:c5:2b:ed:eb:80:b2:
ab:7e:da:94:fc:62:02:dc:a6:bd:e7:be:9a:3e:b7:
7f:48:c1:35:6a:f1:92:20:66:e3:70:7c:e1:0f:9b:
ee:13:0c:00:ce:19:9e:8b:45:dc:3d:50:fe:2d:a1:
c2:0d:86:44:a0:54:93:52:d4:59:ee:18:c6:18:83:
2b:f7:49:b9:ba:28:45:f5:06:10:69:51:24:9a:95:
a5:99:2c:cc:1f:16:60:a3:3b:6b:0c:a2:df:c4:9b:
66:be:5b:3e:c8:ac:13:21:b0:ef:9a:e3:38:3a:3a:
02:44:84:95:5e:34:2b:d4:e4:0e:fb:89:56:16:e3:
0f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:FF:EA:F9:E6:E5:2B:B3:8D:ED:DD:9F:7C:38:4B:F3:74:72:0E:5B
X509v3 Authority Key Identifier:
keyid:51:2E:C7:63:3B:6E:58:3B:FA:3F:A7:FF:78:48:F1:AA:9F:28:00:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/US7HYztuWDv6P6f_eEjxqp8oAIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/5224cc-e743-4a6e-98b5-41d3a84abccb/1/US7HYztuWDv6P6f_eEjxqp8oAIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/5224cc-e743-4a6e-98b5-41d3a84abccb/1/US7HYztuWDv6P6f_eEjxqp8oAIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:e4:3a:32:8c:bc:28:d6:e2:c4:f1:1c:3d:12:69:99:8f:c9:
b1:04:fc:db:8d:fd:46:f5:dc:f9:3b:52:2f:cd:57:82:52:55:
72:8e:8e:7a:8c:af:55:b5:c8:7b:a4:8d:0c:e7:40:ed:1b:3d:
7b:13:92:a4:12:d4:89:6b:70:86:3d:14:76:66:c7:63:0b:02:
a1:5a:68:02:59:b2:04:63:3e:be:a5:75:44:b3:1b:0d:46:96:
08:3d:4a:dd:15:96:e8:73:17:3b:01:84:93:7d:1f:8b:ce:af:
0d:e6:e2:26:d2:0d:4f:5a:81:dd:0e:f8:bc:10:82:59:52:b7:
e8:ce:31:45:3b:c2:c0:a4:3e:17:c2:62:9c:3f:c7:6f:14:2e:
2c:a2:1b:90:1c:75:2e:a7:9a:8e:c1:a3:c3:54:e4:e7:7c:95:
f8:9e:cc:20:49:9b:0e:49:84:c3:92:9b:01:19:08:99:9b:13:
3a:25:ed:04:5c:b4:59:58:f9:15:10:6f:0e:de:90:52:4b:14:
35:d2:12:b7:d7:a3:4f:06:9b:07:a2:21:1b:22:17:88:cc:4a:
0c:fc:d3:31:7a:1e:a7:44:97:ce:12:ab:fa:92:5d:dc:ed:27:
23:70:e2:b9:3b:3f:b3:b2:aa:dc:7d:22:25:e3:f3:7a:24:a9:
29:9a:8c:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mlfmKHEg3ioGQzpJPT/fZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMmVjNzYzM2I2ZTU4M2JmYTNmYTdmZjc4NDhmMWFhOWYy
ODAwODUwHhcNMjYwMzI1MjAwMDU2WhcNMjYwMzI2MjAwMDU2WjAzMTEwLwYDVQQD
EyhhNmZmZWFmOWU2ZTUyYmIzOGRlZGRkOWY3YzM4NGJmMzc0NzIwZTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YEafENYPPWFaKXChAZBuxqlW0ze
4M6NJqJqTsYLF7L8SKhEWau65n0LS4i8DjAPMV+2GwaU0H6ZOF2clhUi78z3+hHd
0IrXmeZNJY4kyjStC91pxPjXx42naGthHYK+Uojpv2zDda5WqAew7MA96FN3Ml6J
qCnLj8r43LWUhlHFK+3rgLKrftqU/GIC3Ka9576aPrd/SME1avGSIGbjcHzhD5vu
EwwAzhmei0XcPVD+LaHCDYZEoFSTUtRZ7hjGGIMr90m5uihF9QYQaVEkmpWlmSzM
HxZgoztrDKLfxJtmvls+yKwTIbDvmuM4OjoCRISVXjQr1OQO+4lWFuMPSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKb/6vnm5Suzje3dn3w4S/N0cg5bMB8GA1UdIwQY
MBaAFFEux2M7blg7+j+n/3hI8aqfKACFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVM3SFl6dHVXRHY2UDZmX2VFanhxcDhvQUlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi81MjI0Y2MtZTc0My00YTZlLTk4YjUt
NDFkM2E4NGFiY2NiLzEvVVM3SFl6dHVXRHY2UDZmX2VFanhxcDhvQUlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi81MjI0Y2MtZTc0My00YTZlLTk4YjUtNDFkM2E4NGFiY2Ni
LzEvVVM3SFl6dHVXRHY2UDZmX2VFanhxcDhvQUlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWeQ6Moy8
KNbixPEcPRJpmY/JsQT82439RvXc+TtSL81XglJVco6OeoyvVbXIe6SNDOdA7Rs9
exOSpBLUiWtwhj0UdmbHYwsCoVpoAlmyBGM+vqV1RLMbDUaWCD1K3RWW6HMXOwGE
k30fi86vDebiJtINT1qB3Q74vBCCWVK36M4xRTvCwKQ+F8JinD/HbxQuLKIbkBx1
LqeajsGjw1Tk53yV+J7MIEmbDkmEw5KbARkImZsTOiXtBFy0WVj5FRBvDt6QUksU
NdISt9ejTwabB6IhGyIXiMxKDPzTMXoep0SXzhKr+pJd3O0nI3DiuTs/s7Kq3H0i
JePzeiSpKZqMtA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:22 2026 by rpki-client