Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/3ba160-e945-4d56-b129-52c19758fa15/1/USd7w4wS4ELt31bX519QVjxL0ic.mft
File: USd7w4wS4ELt31bX519QVjxL0ic.mft (raw, json)
Hash identifier: ObnQQrsXdoCOSO1ddtnsNIq/xABF0HtPD/WdL7J5bfs=
Subject key identifier: BB:DB:A2:FC:DF:67:59:9D:54:7B:BC:1E:1E:9E:52:DD:7C:EE:E3:1E
Authority key identifier: 51:27:7B:C3:8C:12:E0:42:ED:DF:56:D7:E7:5F:50:56:3C:4B:D2:27
Certificate issuer: /CN=51277bc38c12e042eddf56d7e75f50563c4bd227
Certificate serial: 019F8FEC33B20C21A61E90BAD402E46A4C5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/USd7w4wS4ELt31bX519QVjxL0ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/3ba160-e945-4d56-b129-52c19758fa15/1/USd7w4wS4ELt31bX519QVjxL0ic.mft
Manifest number: 19C3
Signing time: Thu 23 Jul 2026 17:00:49 +0000
Manifest this update: Thu 23 Jul 2026 17:00:49 +0000
Manifest next update: Fri 24 Jul 2026 17:00:49 +0000
Files and hashes: 1: D4QRrUObCGq3FWyTZQYsdDxIC-Y.asa (hash: f66FrX9VHylFdBsRAbYxdFz6/ASysid9BFIKkasqYLk=)
2: HVAKOChJvzlPOcqJ_ehcMgXUK9o.roa (hash: 2mWGKvxbtg/GycElX7B4p0Awmc5Qwctw5xexjAFCbUI=)
3: USd7w4wS4ELt31bX519QVjxL0ic.crl (hash: gV3WwCa3oypIpgrd1WvPje73AexPGsBruKpPQAXs1hU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/3ba160-e945-4d56-b129-52c19758fa15/1/USd7w4wS4ELt31bX519QVjxL0ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/3ba160-e945-4d56-b129-52c19758fa15/1/USd7w4wS4ELt31bX519QVjxL0ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/USd7w4wS4ELt31bX519QVjxL0ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:33:b2:0c:21:a6:1e:90:ba:d4:02:e4:6a:4c:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51277bc38c12e042eddf56d7e75f50563c4bd227
Validity
Not Before: Jul 23 17:00:49 2026 GMT
Not After : Jul 24 17:00:49 2026 GMT
Subject: CN=bbdba2fcdf67599d547bbc1e1e9e52dd7ceee31e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:38:1d:30:44:5f:b4:73:e8:8b:4c:29:86:8d:
82:43:ea:36:c0:99:d7:86:d2:64:2c:a0:cb:60:b9:
39:9f:10:85:92:8c:9a:37:e8:4f:08:4a:34:64:9c:
ed:ab:d5:64:b0:6c:88:28:81:1d:08:cf:c6:3f:1c:
f5:36:b3:8d:fa:63:2f:7d:5c:44:59:f8:ca:cc:25:
5c:39:78:45:8d:d7:b8:c1:d7:3d:34:21:f3:1d:53:
1a:90:fc:68:2c:cc:35:37:db:17:81:d1:11:cf:b8:
b5:5f:eb:bc:f6:ca:4e:11:4d:59:f2:19:51:06:36:
3a:7b:1a:59:75:53:bf:19:2e:d6:52:d4:4c:cf:2d:
ab:2d:42:0a:46:1a:b7:2a:14:8d:57:a4:32:19:72:
f0:a6:07:de:52:27:ef:5c:46:f8:b6:dc:cd:3a:ec:
00:b7:47:ab:d3:c7:fb:63:76:3d:99:35:e6:be:eb:
b7:ed:cb:99:05:ca:37:d4:95:9e:8a:89:88:90:0b:
5a:19:76:68:ce:37:67:f5:66:44:12:2d:64:bc:2d:
34:c8:6d:1d:26:0b:de:72:87:22:4b:4e:cd:24:10:
47:f4:41:d8:09:7e:f9:b6:86:2c:32:d0:16:24:68:
e1:29:c1:a0:90:1b:3e:5a:77:5e:3b:96:cf:d6:2d:
21:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:DB:A2:FC:DF:67:59:9D:54:7B:BC:1E:1E:9E:52:DD:7C:EE:E3:1E
X509v3 Authority Key Identifier:
keyid:51:27:7B:C3:8C:12:E0:42:ED:DF:56:D7:E7:5F:50:56:3C:4B:D2:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/USd7w4wS4ELt31bX519QVjxL0ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3ba160-e945-4d56-b129-52c19758fa15/1/USd7w4wS4ELt31bX519QVjxL0ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3ba160-e945-4d56-b129-52c19758fa15/1/USd7w4wS4ELt31bX519QVjxL0ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:2c:1a:f1:e1:38:08:61:98:29:fe:49:f7:58:1d:15:6a:1f:
4d:c5:82:9a:58:a1:78:08:b5:2e:be:00:5a:a9:c1:6c:4b:17:
cd:48:7b:08:78:d9:08:34:25:bf:46:b7:dc:3c:37:ab:4a:b7:
84:ef:83:2b:27:9d:26:6a:34:ff:be:0d:d8:70:19:22:f4:26:
06:17:fd:d9:39:91:38:38:f7:c0:87:29:58:c4:3e:16:a2:c3:
f0:fc:5c:84:be:33:78:70:ef:f3:79:69:59:0b:34:ee:a2:31:
c4:c7:b7:e8:ba:07:70:b3:8c:3d:54:cf:68:82:1f:73:df:b2:
57:5e:4f:54:d2:5e:b2:0c:e4:b3:34:d5:e4:07:fa:a1:77:13:
97:a8:b4:48:d1:50:dc:14:c7:ce:ea:33:7c:e9:e5:8c:7d:2a:
1a:89:9a:fb:83:18:d7:cf:e8:17:6b:e5:6d:86:87:8d:df:27:
3c:d7:d7:9e:53:76:0d:7b:6e:96:9f:6b:fa:e6:63:f1:b9:4a:
03:0d:ee:3c:91:79:e0:dc:42:92:09:87:1b:3e:48:0a:fc:e9:
5e:46:de:cc:2b:de:a6:af:51:07:ff:57:fc:f9:04:90:f3:04:
86:79:d7:98:f0:76:1c:ae:0c:3f:bf:cc:11:11:76:6b:25:bc:
71:d3:8e:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+P7DOyDCGmHpC61ALkakxaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMjc3YmMzOGMxMmUwNDJlZGRmNTZkN2U3NWY1MDU2M2M0
YmQyMjcwHhcNMjYwNzIzMTcwMDQ5WhcNMjYwNzI0MTcwMDQ5WjAzMTEwLwYDVQQD
EyhiYmRiYTJmY2RmNjc1OTlkNTQ3YmJjMWUxZTllNTJkZDdjZWVlMzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTgdMERftHPoi0wpho2CQ+o2wJnX
htJkLKDLYLk5nxCFkoyaN+hPCEo0ZJztq9VksGyIKIEdCM/GPxz1NrON+mMvfVxE
WfjKzCVcOXhFjde4wdc9NCHzHVMakPxoLMw1N9sXgdERz7i1X+u89spOEU1Z8hlR
BjY6expZdVO/GS7WUtRMzy2rLUIKRhq3KhSNV6QyGXLwpgfeUifvXEb4ttzNOuwA
t0er08f7Y3Y9mTXmvuu37cuZBco31JWeiomIkAtaGXZozjdn9WZEEi1kvC00yG0d
JgvecociS07NJBBH9EHYCX75toYsMtAWJGjhKcGgkBs+WndeO5bP1i0hwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLvbovzfZ1mdVHu8Hh6eUt187uMeMB8GA1UdIwQY
MBaAFFEne8OMEuBC7d9W1+dfUFY8S9InMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVNkN3c0d1M0RUx0MzFiWDUxOVFWanhMMGljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8zYmExNjAtZTk0NS00ZDU2LWIxMjkt
NTJjMTk3NThmYTE1LzEvVVNkN3c0d1M0RUx0MzFiWDUxOVFWanhMMGljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8zYmExNjAtZTk0NS00ZDU2LWIxMjktNTJjMTk3NThmYTE1
LzEvVVNkN3c0d1M0RUx0MzFiWDUxOVFWanhMMGljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApCwa8eE4
CGGYKf5J91gdFWofTcWCmliheAi1Lr4AWqnBbEsXzUh7CHjZCDQlv0a33Dw3q0q3
hO+DKyedJmo0/74N2HAZIvQmBhf92TmRODj3wIcpWMQ+FqLD8PxchL4zeHDv83lp
WQs07qIxxMe36LoHcLOMPVTPaIIfc9+yV15PVNJesgzkszTV5Af6oXcTl6i0SNFQ
3BTHzuozfOnljH0qGoma+4MY18/oF2vlbYaHjd8nPNfXnlN2DXtulp9r+uZj8blK
Aw3uPJF54NxCkgmHGz5ICvzpXkbezCvepq9RB/9X/PkEkPMEhnnXmPB2HK4MP7/M
ERF2ayW8cdOOEw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:19:53 2026 by rpki-client