Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.mft
File: usSgifjmioMOuYpcH-JWBlHls5s.mft (raw, json)
Hash identifier: KhEwtu3uj/b3T79P0JnGDPNRRVGjNWzaZBrjtSjBnns=
Subject key identifier: 17:F9:8A:88:D7:6F:4D:0B:B2:F6:4E:B8:35:85:5A:D4:F3:A2:69:90
Authority key identifier: BA:C4:A0:89:F8:E6:8A:83:0E:B9:8A:5C:1F:E2:56:06:51:E5:B3:9B
Certificate issuer: /CN=bac4a089f8e68a830eb98a5c1fe2560651e5b39b
Certificate serial: 019CA8A1534066B9D61E9BE9C2D783B1E31F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/usSgifjmioMOuYpcH-JWBlHls5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.mft
Manifest number: E0
Signing time: Sun 01 Mar 2026 09:01:10 +0000
Manifest this update: Sun 01 Mar 2026 09:01:10 +0000
Manifest next update: Mon 02 Mar 2026 09:01:10 +0000
Files and hashes: 1: 2HMiQuTO6J2fIcF3eHoToEe_Luc.asa (hash: Yt/kPR8GjLco9YHRPCXIo1zG3Dig9SCG1mXTu6u80U0=)
2: lZdeB_zLhBn8Pma8VrIrTZ-DLw0.roa (hash: Ho6P5uHvKiLwzWfjR53vh5bZgXgpl16WZYv0ODwixJI=)
3: usSgifjmioMOuYpcH-JWBlHls5s.crl (hash: AMpkMvcBO6vIofW8ROGikFfP+nOyu1+mRy1mbandxaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/usSgifjmioMOuYpcH-JWBlHls5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:a1:53:40:66:b9:d6:1e:9b:e9:c2:d7:83:b1:e3:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bac4a089f8e68a830eb98a5c1fe2560651e5b39b
Validity
Not Before: Mar 1 09:01:10 2026 GMT
Not After : Mar 2 09:01:10 2026 GMT
Subject: CN=17f98a88d76f4d0bb2f64eb835855ad4f3a26990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:21:21:86:af:19:45:3e:2c:68:dd:4a:fb:2e:
6a:8a:1a:a9:58:04:59:4a:79:4a:6c:4d:e1:d5:b1:
88:fe:d0:df:c9:bc:dc:43:f4:40:71:16:64:57:05:
f2:18:b8:e9:b7:4b:25:cb:ee:36:99:51:68:60:dd:
bc:bd:de:13:72:13:82:28:c7:a8:94:a9:14:09:e3:
3f:68:2f:28:88:ec:be:28:f2:12:0b:ec:9f:be:32:
f5:16:b6:c9:2b:b0:c7:77:bf:4d:f6:b7:db:14:75:
e3:80:66:a8:5d:09:bc:08:ee:bf:88:2b:fa:0f:6e:
65:fe:14:79:eb:3f:63:22:5f:d8:3b:38:34:f2:e8:
e4:7f:46:db:96:e2:70:42:93:0b:72:21:3a:6d:53:
0b:f3:18:8c:d5:9a:e6:c9:0d:e7:05:b3:53:1e:28:
ef:ed:8e:5d:1f:41:77:d9:18:9d:38:08:d2:42:f4:
c3:c5:92:10:6a:75:11:f6:d6:93:fd:f7:aa:7d:d9:
a4:f0:dd:bb:6c:28:9b:1a:40:be:fc:76:54:1a:f0:
6e:7b:c4:9c:1b:1d:4b:c1:be:38:27:1b:17:ca:75:
f5:f7:87:35:26:91:01:1c:94:ca:57:93:10:2b:be:
d5:b3:01:b1:79:73:f8:ce:3a:69:1f:58:f5:ef:c3:
c5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F9:8A:88:D7:6F:4D:0B:B2:F6:4E:B8:35:85:5A:D4:F3:A2:69:90
X509v3 Authority Key Identifier:
keyid:BA:C4:A0:89:F8:E6:8A:83:0E:B9:8A:5C:1F:E2:56:06:51:E5:B3:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/usSgifjmioMOuYpcH-JWBlHls5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:04:9a:2f:70:30:7a:b8:f7:51:00:d6:68:64:6d:9b:48:cc:
a9:80:87:da:e4:3f:4c:e8:44:db:e4:cd:b8:8e:53:bd:78:04:
5d:26:cf:5b:80:46:81:ca:ad:d0:fb:0c:be:fd:2a:f9:8e:03:
43:9e:f1:56:24:ae:46:91:9d:7d:b8:30:f9:26:82:a7:66:03:
39:14:c8:ac:60:29:23:4d:71:9b:40:c6:70:ad:21:52:24:ea:
a7:27:d6:f1:1b:38:37:9f:3d:8a:0e:cd:83:45:f3:e9:bc:db:
c5:45:69:82:6e:80:c4:4b:70:f2:21:be:cc:a7:c9:3e:2a:ef:
32:08:4e:a3:d4:21:d6:77:38:49:c5:db:f4:35:b4:39:5a:e3:
2b:85:c1:78:f3:76:43:a5:d2:b8:3f:af:08:a4:63:cd:05:fc:
40:7a:22:b6:69:41:bd:8a:e0:7d:e4:84:01:b3:14:4e:2a:ec:
2e:08:7d:8d:8f:23:ac:7f:65:07:c9:44:34:31:a7:15:22:e6:
40:78:56:b6:36:e2:db:23:79:f1:b6:a0:c1:f2:c5:46:75:f5:
c8:d0:ce:fd:18:b6:e5:c4:65:23:62:7f:2e:ba:65:60:51:06:
2d:f2:1d:82:82:02:25:b1:ef:42:6c:1c:33:38:87:b2:a2:08:
2e:ed:0d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:28:49 2026 by rpki-client