Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/3ba160-e945-4d56-b129-52c19758fa15/1/USd7w4wS4ELt31bX519QVjxL0ic.mft
File: USd7w4wS4ELt31bX519QVjxL0ic.mft (raw, json)
Hash identifier: sYd9HWlVzqYkv9TaJCETMz3AW18tiuyiKsjHVT/4mLs=
Subject key identifier: 4A:7F:16:3A:6B:D1:0B:B7:28:54:68:04:30:3D:8C:FD:CA:B5:84:B3
Authority key identifier: 51:27:7B:C3:8C:12:E0:42:ED:DF:56:D7:E7:5F:50:56:3C:4B:D2:27
Certificate issuer: /CN=51277bc38c12e042eddf56d7e75f50563c4bd227
Certificate serial: 01A129567510EFCBF87B4BF05D9B10E51282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/USd7w4wS4ELt31bX519QVjxL0ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/3ba160-e945-4d56-b129-52c19758fa15/1/USd7w4wS4ELt31bX519QVjxL0ic.mft
Manifest number: 1A97
Signing time: Sun 11 Oct 2026 05:01:34 +0000
Manifest this update: Sun 11 Oct 2026 05:01:34 +0000
Manifest next update: Mon 12 Oct 2026 05:01:34 +0000
Files and hashes: 1: D4QRrUObCGq3FWyTZQYsdDxIC-Y.asa (hash: f66FrX9VHylFdBsRAbYxdFz6/ASysid9BFIKkasqYLk=)
2: HVAKOChJvzlPOcqJ_ehcMgXUK9o.roa (hash: 2mWGKvxbtg/GycElX7B4p0Awmc5Qwctw5xexjAFCbUI=)
3: USd7w4wS4ELt31bX519QVjxL0ic.crl (hash: 6T2Pi8nB22uVQBtcDOxVieEent3oPbuu0c1bjS+AyQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/3ba160-e945-4d56-b129-52c19758fa15/1/USd7w4wS4ELt31bX519QVjxL0ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/3ba160-e945-4d56-b129-52c19758fa15/1/USd7w4wS4ELt31bX519QVjxL0ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/USd7w4wS4ELt31bX519QVjxL0ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:56:75:10:ef:cb:f8:7b:4b:f0:5d:9b:10:e5:12:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51277bc38c12e042eddf56d7e75f50563c4bd227
Validity
Not Before: Oct 11 05:01:34 2026 GMT
Not After : Oct 12 05:01:34 2026 GMT
Subject: CN=4a7f163a6bd10bb728546804303d8cfdcab584b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:94:15:c0:bb:81:00:be:f2:71:78:e4:0a:42:
49:bf:58:88:b5:31:8e:f1:c5:57:88:7a:0b:4b:13:
fc:2d:c9:49:4a:6b:3c:e4:75:da:ec:f6:80:66:01:
bd:a1:5b:b3:a6:99:46:86:b6:62:47:c5:9b:72:89:
97:a1:69:3e:31:83:e0:a4:a4:f3:dd:56:e2:6a:76:
0d:84:d2:93:e8:e4:99:f3:30:c7:e9:62:6b:ba:38:
32:7a:ae:6c:49:90:ac:49:57:ee:e9:a6:a2:93:41:
7c:cc:de:3e:47:45:43:a7:73:3d:b7:82:7b:77:ef:
b2:56:64:16:ba:42:c9:96:3d:6b:f2:e9:2d:ab:c9:
2d:0b:96:ae:c5:c7:5c:7f:d2:73:dd:5d:09:fb:79:
ca:a0:bf:80:18:a6:7d:27:c7:82:78:eb:d0:42:c1:
0a:0e:2c:5a:02:1b:28:50:0a:a6:a9:0f:c2:b9:42:
62:e3:f6:30:fb:d3:fc:f0:a3:a4:20:bb:6f:34:33:
5b:0c:53:44:24:d8:cf:86:8a:4e:83:cb:55:f1:8c:
e4:64:18:81:33:1d:d4:14:02:e8:98:91:cb:68:04:
a5:06:0d:56:94:e7:76:0a:7f:90:55:ef:ee:48:bc:
1d:10:b5:42:7a:fc:16:ec:4c:4b:6b:14:2d:35:21:
78:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:7F:16:3A:6B:D1:0B:B7:28:54:68:04:30:3D:8C:FD:CA:B5:84:B3
X509v3 Authority Key Identifier:
keyid:51:27:7B:C3:8C:12:E0:42:ED:DF:56:D7:E7:5F:50:56:3C:4B:D2:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/USd7w4wS4ELt31bX519QVjxL0ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3ba160-e945-4d56-b129-52c19758fa15/1/USd7w4wS4ELt31bX519QVjxL0ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3ba160-e945-4d56-b129-52c19758fa15/1/USd7w4wS4ELt31bX519QVjxL0ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:9d:8f:6b:60:19:8a:3a:f0:88:d7:dc:86:cb:ab:cf:36:a3:
3a:85:62:02:a4:d3:3d:e8:b9:ce:22:41:79:76:e7:e7:93:55:
06:3b:36:f9:22:cc:3f:b0:c9:c6:bb:4e:9e:c8:d0:d7:cb:b9:
5e:42:0a:11:18:b0:3f:f9:53:6f:42:a9:18:1c:5b:b2:5f:05:
62:18:ba:e0:4e:2e:b3:06:9e:75:a0:fa:5f:be:9c:d5:de:e7:
5d:46:86:25:83:5f:cf:0a:7f:1c:a4:7a:98:31:47:f7:0b:90:
5c:e8:7c:07:d8:42:95:f1:d2:d6:eb:1f:2f:f8:78:9f:ee:39:
de:13:3f:2d:1f:1f:06:ee:11:a7:bf:b3:96:9e:eb:b5:03:1e:
27:d0:3f:a5:55:d8:9f:2b:5c:6d:96:b5:2c:02:8f:9c:46:a7:
a3:67:18:84:48:fd:90:e1:56:7e:8f:b3:05:3d:44:3c:6f:1d:
5d:aa:c1:d0:f4:ea:3a:0c:ad:c5:9e:22:44:94:f0:03:9d:f1:
28:7e:af:d8:38:e4:75:67:9f:9e:da:8f:30:53:ef:9c:d6:56:
f8:88:2c:94:0e:dd:7e:ca:41:20:6a:4d:7e:3d:f9:2c:02:9f:
ec:65:18:4b:54:7d:30:00:1d:f5:69:9c:6c:64:43:d3:85:4c:
b7:cc:30:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEpVnUQ78v4e0vwXZsQ5RKCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMjc3YmMzOGMxMmUwNDJlZGRmNTZkN2U3NWY1MDU2M2M0
YmQyMjcwHhcNMjYxMDExMDUwMTM0WhcNMjYxMDEyMDUwMTM0WjAzMTEwLwYDVQQD
Eyg0YTdmMTYzYTZiZDEwYmI3Mjg1NDY4MDQzMDNkOGNmZGNhYjU4NGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5QVwLuBAL7ycXjkCkJJv1iItTGO
8cVXiHoLSxP8LclJSms85HXa7PaAZgG9oVuzpplGhrZiR8WbcomXoWk+MYPgpKTz
3VbianYNhNKT6OSZ8zDH6WJrujgyeq5sSZCsSVfu6aaik0F8zN4+R0VDp3M9t4J7
d++yVmQWukLJlj1r8uktq8ktC5auxcdcf9Jz3V0J+3nKoL+AGKZ9J8eCeOvQQsEK
DixaAhsoUAqmqQ/CuUJi4/Yw+9P88KOkILtvNDNbDFNEJNjPhopOg8tV8YzkZBiB
Mx3UFALomJHLaASlBg1WlOd2Cn+QVe/uSLwdELVCevwW7ExLaxQtNSF4wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEp/Fjpr0Qu3KFRoBDA9jP3KtYSzMB8GA1UdIwQY
MBaAFFEne8OMEuBC7d9W1+dfUFY8S9InMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVNkN3c0d1M0RUx0MzFiWDUxOVFWanhMMGljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8zYmExNjAtZTk0NS00ZDU2LWIxMjkt
NTJjMTk3NThmYTE1LzEvVVNkN3c0d1M0RUx0MzFiWDUxOVFWanhMMGljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8zYmExNjAtZTk0NS00ZDU2LWIxMjktNTJjMTk3NThmYTE1
LzEvVVNkN3c0d1M0RUx0MzFiWDUxOVFWanhMMGljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcZ2Pa2AZ
ijrwiNfchsurzzajOoViAqTTPei5ziJBeXbn55NVBjs2+SLMP7DJxrtOnsjQ18u5
XkIKERiwP/lTb0KpGBxbsl8FYhi64E4uswaedaD6X76c1d7nXUaGJYNfzwp/HKR6
mDFH9wuQXOh8B9hClfHS1usfL/h4n+453hM/LR8fBu4Rp7+zlp7rtQMeJ9A/pVXY
nytcbZa1LAKPnEano2cYhEj9kOFWfo+zBT1EPG8dXarB0PTqOgytxZ4iRJTwA53x
KH6v2DjkdWefntqPMFPvnNZW+IgslA7dfspBIGpNfj35LAKf7GUYS1R9MAAd9Wmc
bGRD04VMt8wwwg==
-----END CERTIFICATE-----
Generated at Sun Oct 11 14:14:01 2026 by rpki-client