Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
File: UsbdFxnihP9ccH-BIujtDYeVrz0.mft (raw, json)
Hash identifier: 15o3e4xt52pXjs5XNh/KV2OQZyycOyqWN38pnFOzRS0=
Subject key identifier: F1:0D:9E:DA:71:DE:F3:FE:6C:BE:6E:EC:69:3D:16:03:D1:0A:60:7C
Authority key identifier: 52:C6:DD:17:19:E2:84:FF:5C:70:7F:81:22:E8:ED:0D:87:95:AF:3D
Certificate issuer: /CN=52c6dd1719e284ff5c707f8122e8ed0d8795af3d
Certificate serial: 019D2884253C62FD4DB914E7F2B2EEECAAB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
Manifest number: 0FEE
Signing time: Thu 26 Mar 2026 05:00:42 +0000
Manifest this update: Thu 26 Mar 2026 05:00:42 +0000
Manifest next update: Fri 27 Mar 2026 05:00:42 +0000
Files and hashes: 1: 8xjA0vijBm1diaizodp3mG75LDI.roa (hash: 4AjzFUfgs+M+NN2IgWhMj7sovV6HcoEwZY/R0BtNoC0=)
2: 9zqsNEeSAsd4KPkjQphjUUcz4Fk.roa (hash: bkExPcU8J676GVwwzpIBRh1+JT4P+zvjVqg3r38ok4Q=)
3: UsbdFxnihP9ccH-BIujtDYeVrz0.crl (hash: TMU5xICKYboU6Dp7Z1yKIawzZ8Rc6j58CydRQPI+2XI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:25:3c:62:fd:4d:b9:14:e7:f2:b2:ee:ec:aa:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52c6dd1719e284ff5c707f8122e8ed0d8795af3d
Validity
Not Before: Mar 26 05:00:42 2026 GMT
Not After : Mar 27 05:00:42 2026 GMT
Subject: CN=f10d9eda71def3fe6cbe6eec693d1603d10a607c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fe:eb:73:00:4a:42:ec:3d:c7:7f:50:52:76:
a8:b8:51:42:63:7d:83:a2:71:7a:62:26:76:a1:28:
de:e8:13:93:b2:07:09:99:dc:0c:36:55:17:97:5a:
e5:d8:59:1c:40:1d:d8:da:14:d3:f4:c1:2a:c8:92:
bd:73:13:ae:6a:ae:ff:bf:33:fd:31:d0:f2:a7:64:
c4:63:7e:fb:23:5a:3b:e5:88:8d:a0:95:02:90:b6:
9b:7b:db:a2:50:3a:5a:9b:5d:99:86:26:6a:df:90:
60:3f:1f:5f:1c:7a:2f:5b:bf:6e:79:ca:ee:dc:12:
cb:c3:d5:84:8d:a9:af:0c:b7:ae:34:21:dd:9a:9e:
a9:aa:c5:77:7a:90:80:1d:5e:b0:a6:a6:28:a7:54:
9a:59:42:a1:44:f3:71:d3:10:36:12:89:78:83:ed:
30:c4:02:06:26:6a:d8:05:18:47:2d:ce:68:6b:11:
7d:e9:ed:b7:66:88:a8:91:7f:5e:60:df:65:65:41:
65:1d:30:83:67:bc:3d:66:ae:8f:25:38:66:ac:96:
86:18:5a:ef:f6:e8:a8:e4:db:f7:c5:ec:ce:88:08:
d6:25:b2:2a:00:13:51:e7:b5:de:58:01:bd:ab:bd:
58:d2:10:60:f4:9b:e3:2b:92:14:89:19:e2:91:aa:
31:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0D:9E:DA:71:DE:F3:FE:6C:BE:6E:EC:69:3D:16:03:D1:0A:60:7C
X509v3 Authority Key Identifier:
keyid:52:C6:DD:17:19:E2:84:FF:5C:70:7F:81:22:E8:ED:0D:87:95:AF:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:4f:a1:a3:70:83:b4:00:81:52:3f:4c:23:9d:e0:9e:34:41:
29:bd:2e:4d:0f:df:a4:10:18:e4:68:da:ef:b4:6c:4f:0e:f9:
35:37:be:ec:9a:80:9a:e2:dd:21:97:69:58:ea:54:79:75:0a:
58:83:71:8e:8b:f1:37:51:a4:4f:5c:fc:da:4d:70:dd:36:47:
8e:3f:e0:35:5a:bc:d8:9b:1a:6d:ce:fc:d7:fd:ef:db:01:6e:
02:7c:b7:cc:ed:77:a3:34:6d:93:21:15:20:ac:80:35:51:51:
97:fc:5f:cb:60:37:db:b8:eb:f5:dd:f6:73:dc:2f:03:d9:44:
68:13:2d:2a:33:27:91:12:da:65:b1:30:71:aa:74:3f:1b:01:
9b:e8:e0:83:28:69:68:8a:e6:ed:de:51:11:f2:79:ef:2a:5d:
11:ac:c2:3b:e0:e7:38:51:08:aa:63:ad:fa:bc:ac:98:43:1e:
05:c9:21:b4:32:5b:99:09:74:fe:26:cf:17:3c:79:ab:d3:2c:
28:1e:4a:db:8d:ed:43:23:8c:c4:96:db:3e:3a:92:ba:74:96:
16:e6:e6:8a:ec:7f:3f:bf:68:15:83:e0:b8:8e:50:5c:fc:71:
e0:ad:8e:9a:e4:10:ad:e5:ee:8c:ed:cc:7e:1a:29:e6:87:a4:
8a:08:2b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:26:21 2026 by rpki-client