Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/UsaDhcAgvlgfWdY0dXbrewXIa80.mft
File: UsaDhcAgvlgfWdY0dXbrewXIa80.mft (raw, json)
Hash identifier: fUkIImC5nKleP7hvPISkU6QNtghqK+0Lo1hWvoLRo40=
Subject key identifier: 9E:17:72:6E:7D:E2:F3:6D:CC:27:45:E6:CB:CD:D7:4F:78:0E:5A:CE
Authority key identifier: 52:C6:83:85:C0:20:BE:58:1F:59:D6:34:75:76:EB:7B:05:C8:6B:CD
Certificate issuer: /CN=52c68385c020be581f59d6347576eb7b05c86bcd
Certificate serial: 01A0D012BC886A4F6FC2C440922C563682F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UsaDhcAgvlgfWdY0dXbrewXIa80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/UsaDhcAgvlgfWdY0dXbrewXIa80.mft
Manifest number: E5
Signing time: Wed 23 Sep 2026 21:01:23 +0000
Manifest this update: Wed 23 Sep 2026 21:01:23 +0000
Manifest next update: Thu 24 Sep 2026 21:01:23 +0000
Files and hashes: 1: UsaDhcAgvlgfWdY0dXbrewXIa80.crl (hash: rxC85s2WFrkHEFkj/2hNZKEB65tITreg+mIWUxedO74=)
2: sgtD8UYF9aRy2hvLvMZeq_DL8yA.roa (hash: 7+WO1NdpHvda7ZiRwxhmc9q1DRZhsi2qaxRrJ7/628M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/UsaDhcAgvlgfWdY0dXbrewXIa80.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/UsaDhcAgvlgfWdY0dXbrewXIa80.mft
rsync://rpki.ripe.net/repository/DEFAULT/UsaDhcAgvlgfWdY0dXbrewXIa80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 21:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:bc:88:6a:4f:6f:c2:c4:40:92:2c:56:36:82:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52c68385c020be581f59d6347576eb7b05c86bcd
Validity
Not Before: Sep 23 21:01:23 2026 GMT
Not After : Sep 24 21:01:23 2026 GMT
Subject: CN=9e17726e7de2f36dcc2745e6cbcdd74f780e5ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:71:4e:1c:72:94:0f:a0:5e:73:3c:09:b6:ef:
54:8a:70:00:45:83:9a:11:1b:f9:2a:5c:b5:30:38:
8b:3d:97:94:7e:79:71:b3:19:a2:5b:97:a7:54:71:
5b:56:07:c7:90:98:3c:b8:b1:5d:2e:ca:c5:48:fe:
6f:0e:2d:53:18:f3:0f:2f:51:ab:fb:01:80:16:2f:
c2:b9:eb:6d:89:5c:91:db:f2:0c:b5:41:4b:c6:16:
12:7b:1e:9e:10:df:8e:cb:82:e1:90:c2:6d:a9:fe:
c6:63:a0:43:74:aa:30:01:16:99:ca:b1:3a:b8:5a:
62:03:fd:af:f8:ee:20:cf:27:01:0e:48:36:26:b7:
7f:b0:9e:32:53:91:8f:ee:ca:98:0b:29:96:30:f1:
82:41:d3:bd:59:03:82:0d:f1:dd:e3:f0:7a:83:e2:
25:2b:41:88:15:87:f8:bd:88:58:30:4a:8d:1e:38:
33:cd:18:27:cf:ce:17:f6:49:35:c4:ca:81:2c:4a:
64:ff:16:eb:e8:25:97:74:18:ff:89:52:a0:52:c2:
57:54:23:04:06:38:9f:48:1c:3f:59:a4:7c:b3:fa:
7d:c7:4f:74:65:67:89:87:3a:4a:82:4a:15:e4:83:
3f:6b:ae:a6:d8:c8:15:bc:98:b9:1d:1a:ab:ed:c7:
64:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:17:72:6E:7D:E2:F3:6D:CC:27:45:E6:CB:CD:D7:4F:78:0E:5A:CE
X509v3 Authority Key Identifier:
keyid:52:C6:83:85:C0:20:BE:58:1F:59:D6:34:75:76:EB:7B:05:C8:6B:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UsaDhcAgvlgfWdY0dXbrewXIa80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/UsaDhcAgvlgfWdY0dXbrewXIa80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/UsaDhcAgvlgfWdY0dXbrewXIa80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:77:fd:c8:51:07:72:56:10:dc:d6:c2:59:a9:5e:20:95:2a:
88:ff:b7:9e:73:47:1c:f6:72:39:ed:b3:7f:16:ed:2f:49:1b:
e8:3d:78:d7:9f:24:54:82:cc:32:97:61:ac:7a:ca:d0:ce:01:
52:82:1a:64:4d:e1:19:8e:df:be:e1:2e:c1:2c:7b:06:f7:d7:
22:92:ab:d5:57:a8:43:8c:bd:27:67:6b:e4:08:b2:ec:2e:0a:
8a:8d:75:21:55:12:1d:77:a8:d9:f8:a5:06:f4:70:d9:74:ba:
35:5d:cb:3b:ca:04:42:ab:a4:2a:c1:30:93:7b:87:18:69:7b:
b3:8c:be:97:90:1a:ff:a6:d1:e9:29:d8:f9:7e:b8:0c:82:c6:
c6:27:5a:50:1f:49:2e:16:41:b4:e5:56:b2:89:58:93:61:2f:
3d:67:c2:ee:26:15:c8:a4:8f:d8:9c:43:fb:c1:87:47:04:a4:
54:41:ff:c3:00:58:15:7a:50:4e:e3:a1:1e:f5:82:1b:0f:26:
41:a6:09:eb:b4:18:0a:79:c9:9b:6e:1a:51:10:ac:59:74:ee:
74:45:eb:6c:e1:dc:d1:2d:59:90:03:fd:ad:e4:5b:71:87:4a:
db:c5:a9:b9:c8:4d:87:86:db:d5:68:76:d6:b7:db:fa:dc:ed:
93:fd:d2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:17:04 2026 by rpki-client