Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/3ba160-e945-4d56-b129-52c19758fa15/1/USd7w4wS4ELt31bX519QVjxL0ic.mft
File: USd7w4wS4ELt31bX519QVjxL0ic.mft (raw, json)
Hash identifier: Ogk0spNs8LdHeJERaObURV4HCIzzPtGvrkWcW3phUmM=
Subject key identifier: CE:D8:09:6F:59:BA:FC:1A:16:A0:50:3F:D7:13:98:0A:D5:D1:A9:55
Authority key identifier: 51:27:7B:C3:8C:12:E0:42:ED:DF:56:D7:E7:5F:50:56:3C:4B:D2:27
Certificate issuer: /CN=51277bc38c12e042eddf56d7e75f50563c4bd227
Certificate serial: 019F91DA747A1ACA8664AEECCCF7D7E111DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/USd7w4wS4ELt31bX519QVjxL0ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/3ba160-e945-4d56-b129-52c19758fa15/1/USd7w4wS4ELt31bX519QVjxL0ic.mft
Manifest number: 19C4
Signing time: Fri 24 Jul 2026 02:00:40 +0000
Manifest this update: Fri 24 Jul 2026 02:00:40 +0000
Manifest next update: Sat 25 Jul 2026 02:00:40 +0000
Files and hashes: 1: D4QRrUObCGq3FWyTZQYsdDxIC-Y.asa (hash: f66FrX9VHylFdBsRAbYxdFz6/ASysid9BFIKkasqYLk=)
2: HVAKOChJvzlPOcqJ_ehcMgXUK9o.roa (hash: 2mWGKvxbtg/GycElX7B4p0Awmc5Qwctw5xexjAFCbUI=)
3: USd7w4wS4ELt31bX519QVjxL0ic.crl (hash: oeu8cDY0QZx70RZvpP1TWbgx+83L0EdJIRa9Bsk3rTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/3ba160-e945-4d56-b129-52c19758fa15/1/USd7w4wS4ELt31bX519QVjxL0ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/3ba160-e945-4d56-b129-52c19758fa15/1/USd7w4wS4ELt31bX519QVjxL0ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/USd7w4wS4ELt31bX519QVjxL0ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:74:7a:1a:ca:86:64:ae:ec:cc:f7:d7:e1:11:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51277bc38c12e042eddf56d7e75f50563c4bd227
Validity
Not Before: Jul 24 02:00:40 2026 GMT
Not After : Jul 25 02:00:40 2026 GMT
Subject: CN=ced8096f59bafc1a16a0503fd713980ad5d1a955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f2:29:23:dc:7e:b2:09:64:e6:b8:ba:5c:bd:
30:fc:54:19:0e:70:7d:33:97:6e:ed:f7:cd:ec:42:
da:3c:af:2e:c7:65:80:ad:08:6e:18:49:8b:69:62:
c5:2e:43:d8:83:e5:73:72:b7:ab:b3:09:44:e6:c9:
f0:19:1d:a5:17:6b:f4:66:87:20:2e:3a:cd:21:3e:
95:d9:36:9b:90:6e:c0:99:a0:5c:ac:ca:d1:b3:ed:
19:c9:be:a9:19:34:a5:90:a1:d3:b3:d5:ce:b1:51:
53:e2:48:ee:ce:6a:c4:c3:36:a9:3f:de:5a:41:8d:
88:ab:38:81:12:04:a4:15:2f:2a:c5:9a:ae:ab:8d:
f2:45:61:01:19:4d:c4:bd:0e:80:57:68:fa:c2:be:
da:fe:3a:09:7d:bf:ec:2a:89:9b:3d:92:a9:77:d6:
19:81:95:2e:6c:e1:ad:fe:57:f3:46:a3:76:50:1f:
37:d1:e2:c2:14:aa:da:4c:4a:1a:11:c1:33:e6:bb:
33:89:a5:b1:4c:92:b0:51:6c:c8:f4:9f:f2:3b:dd:
e2:ff:b8:82:d3:4d:76:b1:49:56:69:fb:1f:d0:ae:
5f:9a:4e:f6:85:06:a0:c7:40:95:1d:1e:db:a9:7e:
d6:c1:24:ac:78:05:e1:5f:3b:9d:c4:0a:4c:0e:45:
12:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D8:09:6F:59:BA:FC:1A:16:A0:50:3F:D7:13:98:0A:D5:D1:A9:55
X509v3 Authority Key Identifier:
keyid:51:27:7B:C3:8C:12:E0:42:ED:DF:56:D7:E7:5F:50:56:3C:4B:D2:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/USd7w4wS4ELt31bX519QVjxL0ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3ba160-e945-4d56-b129-52c19758fa15/1/USd7w4wS4ELt31bX519QVjxL0ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3ba160-e945-4d56-b129-52c19758fa15/1/USd7w4wS4ELt31bX519QVjxL0ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:6a:69:a5:7c:f5:20:a6:2c:5c:09:6a:2e:2c:5c:03:03:83:
55:43:61:83:fa:e8:4b:da:77:08:82:e6:7c:1d:95:83:78:8d:
c2:48:8f:c5:9e:87:af:67:ee:af:31:84:d6:ad:db:0f:b0:b9:
a3:0e:35:25:75:dc:0b:41:a1:7c:e5:dd:e2:43:03:3d:7a:04:
c6:b9:0d:b5:ef:26:41:67:a3:f1:5e:ae:bc:35:7a:d7:56:d2:
eb:dd:5f:13:b4:0d:10:5f:34:7b:a1:c3:e4:db:05:07:99:b2:
f0:92:65:eb:b0:b9:07:21:96:3f:d7:53:b9:55:2c:07:17:ea:
58:ad:dc:d7:c4:90:cb:b5:80:40:81:5d:fc:1a:3b:c9:da:b6:
f8:53:64:ed:90:e0:63:36:f3:77:0b:da:ba:3f:6e:70:48:f7:
2c:1c:1a:5e:4d:c9:5f:98:ed:3c:83:06:7c:c0:1f:43:bf:f1:
00:e0:c1:82:3b:83:42:93:0e:fe:39:49:94:01:79:8f:2d:1b:
45:47:14:95:01:80:58:43:1d:c7:1d:0b:4b:be:33:8e:2f:70:
6e:8a:1c:49:fe:de:a5:ea:e7:8d:ac:7d:32:06:a9:48:b5:13:
a2:08:4c:e9:0b:10:49:f7:c1:ae:8c:dd:dd:02:a2:f0:f9:06:
c8:a2:d5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:24:04 2026 by rpki-client