Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
File: Us7uLW16UMkkmdoaIfKrt6KndMg.mft (raw, json)
Hash identifier: ue+cZrDcsd8ZByNpbQ1tuv8+AOu/amAoiFGrL3JSQCA=
Subject key identifier: DA:F3:75:FD:A5:66:4B:FA:6C:74:6D:EE:28:5E:74:D1:72:D6:25:71
Authority key identifier: 52:CE:EE:2D:6D:7A:50:C9:24:99:DA:1A:21:F2:AB:B7:A2:A7:74:C8
Certificate issuer: /CN=52ceee2d6d7a50c92499da1a21f2abb7a2a774c8
Certificate serial: 019FAA50A82940A8D945B5108D3C014538F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
Manifest number: 0E71
Signing time: Tue 28 Jul 2026 20:00:40 +0000
Manifest this update: Tue 28 Jul 2026 20:00:40 +0000
Manifest next update: Wed 29 Jul 2026 20:00:40 +0000
Files and hashes: 1: 00K95uzAVC-As-Iyho8vnUOQDZ8.roa (hash: kfLM/YtWZzFLfCP3ajHs0k6ce1lVF3pDxYNFKvjlQcg=)
2: Us7uLW16UMkkmdoaIfKrt6KndMg.crl (hash: BJVtrudMw1pjd61EUvPSL0cIcwJQtbJdjhLbtAfPV38=)
3: ei8OTREn63voSBE5nxK-2OquN1c.roa (hash: rtdm6RL7c+SJK/SooK4jKjSilqnAkSqbJlBiuodfm0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:a8:29:40:a8:d9:45:b5:10:8d:3c:01:45:38:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52ceee2d6d7a50c92499da1a21f2abb7a2a774c8
Validity
Not Before: Jul 28 20:00:40 2026 GMT
Not After : Jul 29 20:00:40 2026 GMT
Subject: CN=daf375fda5664bfa6c746dee285e74d172d62571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4f:a2:b8:d8:d1:fb:6f:f0:96:1e:a5:f5:df:
3e:84:90:1b:3c:06:4a:42:02:3e:36:d6:10:4d:fc:
de:74:1c:9b:02:c2:86:3c:b1:ce:63:86:03:f5:01:
17:55:ba:67:e1:80:db:3a:d9:25:38:0b:e9:d9:9d:
9f:23:86:86:e8:0e:65:d0:5b:3e:64:1c:fb:6b:d6:
23:a1:37:b2:e3:38:59:53:10:dc:05:51:58:e5:04:
3f:5a:7c:ec:05:e9:ed:5c:a6:a1:f5:59:41:fe:a8:
0d:e8:9f:91:55:35:88:f5:da:9e:71:04:bc:20:f4:
94:95:05:0f:56:89:0b:80:81:b4:44:8c:68:5f:e5:
73:49:35:de:a3:9c:67:07:f5:e8:14:85:8d:08:97:
f6:38:9a:43:38:35:60:80:a1:bd:01:c0:97:24:50:
6a:e1:f1:b7:e6:25:67:93:bd:54:39:78:23:74:9f:
93:b9:7f:66:90:d3:7d:37:df:70:d2:f2:df:dd:91:
9e:62:3a:07:b9:3e:45:fb:bd:23:9e:0a:cb:97:3b:
b4:87:04:56:a0:3f:45:55:26:d6:34:bb:6b:5a:39:
e3:7a:64:28:71:4f:12:41:52:4f:81:3f:91:d5:b7:
58:2c:1f:a8:51:88:5a:0d:2f:dd:cf:2b:95:6e:57:
fc:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F3:75:FD:A5:66:4B:FA:6C:74:6D:EE:28:5E:74:D1:72:D6:25:71
X509v3 Authority Key Identifier:
keyid:52:CE:EE:2D:6D:7A:50:C9:24:99:DA:1A:21:F2:AB:B7:A2:A7:74:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:ec:13:0c:5a:7a:5a:50:a2:bf:9f:2b:b4:f1:93:79:96:f4:
f9:d8:8b:1e:74:d7:23:d3:db:cd:c7:f6:a4:94:9c:c9:6f:01:
0b:9a:e4:6a:6a:d6:51:3f:8c:61:a2:df:67:7d:19:01:78:df:
52:51:e8:46:83:c3:f8:a0:17:1a:d7:de:95:2b:90:49:98:bf:
bb:32:f7:77:9a:3d:0a:45:6c:97:8b:43:4e:35:51:56:ec:48:
c1:fd:a8:c6:04:1d:77:e4:96:fb:66:7b:f6:c7:d2:1e:10:89:
8d:44:ba:6c:62:03:37:53:f4:14:23:9d:c5:b9:2c:ee:29:c2:
6f:f5:f0:07:a7:e7:fa:d3:7c:8a:ab:e2:6a:df:7c:0e:1d:83:
6a:49:f5:b5:d4:99:ec:37:df:8b:c3:40:61:ce:a1:86:c8:2d:
15:d4:11:33:55:b7:8c:cd:37:15:59:d9:5b:9a:0b:fa:93:db:
01:c1:2c:b4:93:0c:aa:0d:ba:87:f8:5e:65:b5:b1:30:37:88:
6f:79:2a:78:28:67:5a:1c:5c:00:51:9a:f5:1f:9f:4c:ad:c1:
6d:e3:fc:d9:e9:08:63:5b:0e:ec:94:41:98:2b:66:00:6c:bd:
9e:ab:d6:15:bc:3c:02:11:a3:4b:f3:92:4b:e4:71:47:85:2d:
15:7b:31:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:26:39 2026 by rpki-client