Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
File: Us7uLW16UMkkmdoaIfKrt6KndMg.mft (raw, json)
Hash identifier: iScs4EW+mXFYiVxdEPGGyadUl/nIASo5ril6XZvk4Xc=
Subject key identifier: EB:D3:1E:B4:A7:53:7F:8F:32:05:2F:DE:EA:58:F9:A7:0E:52:7B:F7
Authority key identifier: 52:CE:EE:2D:6D:7A:50:C9:24:99:DA:1A:21:F2:AB:B7:A2:A7:74:C8
Certificate issuer: /CN=52ceee2d6d7a50c92499da1a21f2abb7a2a774c8
Certificate serial: 019CAD9084E8A4474A8E29123D0FA524D32F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
Manifest number: 0CE5
Signing time: Mon 02 Mar 2026 08:00:55 +0000
Manifest this update: Mon 02 Mar 2026 08:00:55 +0000
Manifest next update: Tue 03 Mar 2026 08:00:55 +0000
Files and hashes: 1: 00K95uzAVC-As-Iyho8vnUOQDZ8.roa (hash: kfLM/YtWZzFLfCP3ajHs0k6ce1lVF3pDxYNFKvjlQcg=)
2: Us7uLW16UMkkmdoaIfKrt6KndMg.crl (hash: pRHInKG87WCGENoeFrIrxzQ92kLnNAggt0XF67yOXwc=)
3: ei8OTREn63voSBE5nxK-2OquN1c.roa (hash: rtdm6RL7c+SJK/SooK4jKjSilqnAkSqbJlBiuodfm0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:84:e8:a4:47:4a:8e:29:12:3d:0f:a5:24:d3:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52ceee2d6d7a50c92499da1a21f2abb7a2a774c8
Validity
Not Before: Mar 2 08:00:55 2026 GMT
Not After : Mar 3 08:00:55 2026 GMT
Subject: CN=ebd31eb4a7537f8f32052fdeea58f9a70e527bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:b7:02:dd:d1:ef:82:b6:43:4b:1f:49:76:db:
ec:25:79:2e:ea:68:42:52:e9:fc:48:ae:55:78:ca:
b5:41:1f:d4:9b:6a:08:c9:ab:0b:46:02:0c:73:55:
9e:58:ec:ee:c1:da:34:1d:fc:53:c5:b3:74:96:73:
94:af:d8:d2:4f:62:18:d0:e4:5b:a2:76:86:06:47:
63:3b:be:27:eb:a7:ff:a8:c4:8c:0f:bb:23:42:13:
65:61:4e:fb:97:67:54:25:81:9b:b0:7b:0d:32:24:
99:42:81:3a:d4:b9:73:2c:19:86:b7:08:30:e2:3d:
cd:4e:33:44:21:b6:c9:8a:1e:83:41:98:19:18:66:
87:d1:5b:48:e4:dd:79:04:7a:1b:d4:b3:7a:4e:49:
41:bb:e1:32:aa:0c:68:70:93:d1:c2:96:62:6e:b9:
71:15:37:3f:fd:d5:d8:46:bd:80:2f:37:1a:91:38:
87:e0:a6:82:5d:cf:5a:50:f6:6e:47:0f:5d:13:59:
f4:4e:a0:24:b4:a1:5e:51:e6:7f:db:86:2c:08:3a:
d5:d6:b7:69:27:1b:c1:8b:e5:05:be:68:13:41:ff:
5c:39:1d:d9:7d:4e:e4:1d:df:c0:9a:24:d5:15:8e:
42:3c:50:63:19:31:f5:33:0b:b2:89:11:4f:ef:12:
b2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D3:1E:B4:A7:53:7F:8F:32:05:2F:DE:EA:58:F9:A7:0E:52:7B:F7
X509v3 Authority Key Identifier:
keyid:52:CE:EE:2D:6D:7A:50:C9:24:99:DA:1A:21:F2:AB:B7:A2:A7:74:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:66:df:80:b1:77:a8:8a:5b:29:24:9f:07:bb:61:00:d7:f3:
2e:74:25:17:67:f5:54:4f:d9:3a:43:9a:d0:29:b9:1c:9e:e0:
a4:f2:51:8d:b9:5a:2f:70:82:03:de:3f:07:46:05:db:0e:0e:
87:da:db:51:5f:97:c8:03:62:95:eb:4c:e6:3d:64:90:86:b0:
a1:27:e1:7d:66:ed:a3:ec:6e:4c:77:17:7e:9f:fa:d8:c1:85:
6b:be:eb:ec:4a:17:c0:5c:7c:04:1e:63:b5:1f:3c:fe:9c:56:
40:80:ba:54:b6:95:2f:67:d8:bb:cd:b7:77:c2:1e:33:be:f0:
5e:a4:20:00:cc:7d:bb:9a:74:fa:26:52:0e:1a:19:14:4c:9b:
1a:b1:79:05:98:9f:2a:5b:0f:5b:11:71:b9:04:17:04:b9:c1:
ca:18:f2:bb:4a:ef:ac:ad:c5:eb:15:d6:5a:ab:52:70:cc:c4:
b0:69:c0:be:71:72:f3:dd:9c:50:28:e8:1c:25:c5:a0:72:c2:
03:84:90:65:2e:3b:f7:3b:5d:41:4d:65:b0:01:97:c6:a7:32:
79:e0:51:83:12:af:df:03:66:2e:4e:cb:8f:ff:c6:29:45:82:
c2:d4:b3:cf:df:cc:ed:00:df:5f:f1:1a:d4:be:7c:27:6c:a9:
3d:ad:6d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:36:05 2026 by rpki-client