Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
File: Us7uLW16UMkkmdoaIfKrt6KndMg.mft (raw, json)
Hash identifier: WUGQJ5yKuoznrof81c77zyO1CqoHTu0AtL1MW26Aelk=
Subject key identifier: C3:E1:13:EE:5B:32:76:23:51:50:C3:0C:1F:96:0B:FC:CB:A8:B1:41
Authority key identifier: 52:CE:EE:2D:6D:7A:50:C9:24:99:DA:1A:21:F2:AB:B7:A2:A7:74:C8
Certificate issuer: /CN=52ceee2d6d7a50c92499da1a21f2abb7a2a774c8
Certificate serial: 01A0C632DCB492915519308875CA07EBC93F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
Manifest number: 0F04
Signing time: Mon 21 Sep 2026 23:00:17 +0000
Manifest this update: Mon 21 Sep 2026 23:00:17 +0000
Manifest next update: Tue 22 Sep 2026 23:00:17 +0000
Files and hashes: 1: 00K95uzAVC-As-Iyho8vnUOQDZ8.roa (hash: kfLM/YtWZzFLfCP3ajHs0k6ce1lVF3pDxYNFKvjlQcg=)
2: Us7uLW16UMkkmdoaIfKrt6KndMg.crl (hash: 73W4KvhwN8CEq2zifp6jlVKjXizQ3MrlCQFj/MqzpWE=)
3: ei8OTREn63voSBE5nxK-2OquN1c.roa (hash: rtdm6RL7c+SJK/SooK4jKjSilqnAkSqbJlBiuodfm0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:32:dc:b4:92:91:55:19:30:88:75:ca:07:eb:c9:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52ceee2d6d7a50c92499da1a21f2abb7a2a774c8
Validity
Not Before: Sep 21 23:00:17 2026 GMT
Not After : Sep 22 23:00:17 2026 GMT
Subject: CN=c3e113ee5b3276235150c30c1f960bfccba8b141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d9:d3:3b:f1:51:38:45:df:3d:b9:13:ae:f1:
5b:5a:5a:32:07:ec:12:ce:7f:66:1a:4f:8e:be:3c:
46:fc:2c:44:f0:69:5e:74:0b:4e:63:b9:0e:14:d3:
ae:f5:ab:0c:76:e0:d4:e7:0b:12:df:df:27:ab:dd:
53:7e:86:ff:44:cb:68:cb:c0:6d:51:24:ef:9a:3b:
7c:0d:73:1d:7c:54:3f:fa:0a:8f:0f:d2:30:0b:22:
58:c5:e8:69:aa:7f:5e:23:b7:7d:5e:96:8d:5b:d3:
5f:28:7b:fb:c7:17:fa:4c:60:03:59:b3:d2:c0:91:
4f:14:37:6e:3e:ea:b3:59:6f:8a:8a:bd:0c:ba:e4:
6a:8a:24:7e:80:ed:db:f7:93:bf:9c:43:e0:85:b6:
7a:cd:cb:19:05:c1:0d:dd:d6:d9:70:05:99:10:07:
c7:67:dd:06:b9:34:6d:80:1a:23:8a:e2:52:2d:c5:
a9:7d:81:e6:92:4f:70:09:96:41:c1:2e:42:53:4f:
39:27:fc:39:7c:d3:f8:c9:15:8a:da:72:c0:c8:21:
7e:25:0c:25:a2:0f:ab:8f:ef:fd:59:75:ac:66:1a:
ce:83:6f:9f:8e:62:c4:38:05:5b:cb:7e:dc:3d:92:
12:8a:30:c1:e9:e5:6e:a1:f4:73:a4:95:15:28:25:
80:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E1:13:EE:5B:32:76:23:51:50:C3:0C:1F:96:0B:FC:CB:A8:B1:41
X509v3 Authority Key Identifier:
keyid:52:CE:EE:2D:6D:7A:50:C9:24:99:DA:1A:21:F2:AB:B7:A2:A7:74:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:a4:95:32:df:94:f4:b9:12:eb:ff:8a:61:5c:9b:2c:9d:22:
58:00:4e:25:35:3e:16:59:66:f1:e2:a0:f1:cb:78:06:23:1e:
9b:8d:2c:d9:04:c6:49:51:f6:28:96:ad:1a:9e:3d:fb:11:f1:
bb:2e:2d:31:30:f0:7b:bc:76:4f:e5:a9:a6:9d:5e:79:e0:c6:
65:ab:3e:c6:43:7a:2f:b5:a4:09:df:4e:b1:9f:38:ef:16:04:
7f:03:85:cd:46:b6:20:03:92:a7:e6:6e:0c:40:f4:31:4b:ff:
fd:71:87:93:06:22:9b:b9:05:76:04:0d:42:9d:4c:e3:88:66:
5f:e9:e9:4b:6c:f2:0d:a7:bc:58:db:e9:3b:6b:b6:8b:9c:9a:
b9:37:90:dd:3a:7b:c7:a7:bb:fd:eb:da:c4:36:f2:0e:24:05:
93:5c:76:59:d4:70:d0:53:a8:e5:73:a9:17:16:81:25:21:17:
60:d5:04:5a:a0:f0:be:9c:c2:2b:06:46:d5:8b:94:64:eb:7d:
b4:7b:67:56:8b:fd:b3:2e:a7:67:99:c3:d8:a7:0d:87:ef:f6:
58:3c:70:73:00:cd:25:57:78:7c:d6:47:05:48:72:49:38:28:
1c:35:7f:41:5a:c6:22:5f:60:1a:01:92:6d:4c:ea:db:98:5e:
8a:cd:e3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:42:50 2026 by rpki-client