Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.mft
File: usSgifjmioMOuYpcH-JWBlHls5s.mft (raw, json)
Hash identifier: aD0ZrIqM65bn+nu+lxCoXuj9jco5uXNUMQ8SFqkD8vQ=
Subject key identifier: 0D:6B:A8:C5:39:D5:8C:BA:F5:6B:9D:F6:00:13:F4:5A:B3:CE:FC:4B
Authority key identifier: BA:C4:A0:89:F8:E6:8A:83:0E:B9:8A:5C:1F:E2:56:06:51:E5:B3:9B
Certificate issuer: /CN=bac4a089f8e68a830eb98a5c1fe2560651e5b39b
Certificate serial: 01A0C77D20237E3C4B4E28CBCF383A6DBBE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/usSgifjmioMOuYpcH-JWBlHls5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.mft
Manifest number: 0303
Signing time: Tue 22 Sep 2026 05:01:01 +0000
Manifest this update: Tue 22 Sep 2026 05:01:01 +0000
Manifest next update: Wed 23 Sep 2026 05:01:01 +0000
Files and hashes: 1: GmNXmiq5iVl3LlLazdx_LHN3boE.asa (hash: YRVbgQn0SaBqEvSThmW75OyzWKprF8xX5w+6esDiBi4=)
2: lZdeB_zLhBn8Pma8VrIrTZ-DLw0.roa (hash: Ho6P5uHvKiLwzWfjR53vh5bZgXgpl16WZYv0ODwixJI=)
3: usSgifjmioMOuYpcH-JWBlHls5s.crl (hash: HZllokfQOc5lly/DL/0OWtITBizj6IFO2U+J8SmK0wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/usSgifjmioMOuYpcH-JWBlHls5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:7d:20:23:7e:3c:4b:4e:28:cb:cf:38:3a:6d:bb:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bac4a089f8e68a830eb98a5c1fe2560651e5b39b
Validity
Not Before: Sep 22 05:01:01 2026 GMT
Not After : Sep 23 05:01:01 2026 GMT
Subject: CN=0d6ba8c539d58cbaf56b9df60013f45ab3cefc4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fc:01:cd:e8:f2:82:95:0f:9a:70:2e:1b:4b:
f4:88:b3:75:79:d0:ef:9f:b1:a7:01:d3:44:d7:24:
70:86:33:fc:f9:9c:72:da:09:e3:2f:72:e3:a8:a3:
55:a8:cf:4a:76:06:b0:5c:f2:20:89:04:24:1d:12:
1b:92:83:d9:e4:c1:cb:d2:d0:d7:60:e3:cf:14:8d:
2c:4e:fe:68:a3:6d:5f:bf:b0:3f:6c:53:78:a5:d0:
9b:2c:32:99:78:c4:74:72:c8:df:bc:4f:e8:43:c2:
22:73:d6:55:fe:05:51:c0:cf:78:05:ef:cc:76:e3:
29:14:da:a8:ed:36:f9:61:3f:c9:81:d1:f2:bf:a0:
d6:d5:5d:af:d3:c0:c9:c5:d7:7f:67:87:5c:13:84:
34:b6:cb:93:3c:55:31:ab:77:68:12:c4:ee:42:46:
83:65:b8:a5:ec:2d:94:d7:13:41:ca:39:8e:0e:84:
d0:c5:76:c5:32:85:87:d5:08:56:b9:f5:91:e4:33:
79:80:d8:8a:9e:f8:68:93:20:f0:7c:90:40:ec:d4:
a5:ff:60:cd:6e:2a:84:67:cb:0e:62:7f:1d:c2:1c:
a2:7d:68:4a:1e:82:37:c6:c5:ec:8e:c1:8d:03:6a:
67:93:83:08:4c:ce:ba:07:b9:7c:53:df:2b:31:b2:
93:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:6B:A8:C5:39:D5:8C:BA:F5:6B:9D:F6:00:13:F4:5A:B3:CE:FC:4B
X509v3 Authority Key Identifier:
keyid:BA:C4:A0:89:F8:E6:8A:83:0E:B9:8A:5C:1F:E2:56:06:51:E5:B3:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/usSgifjmioMOuYpcH-JWBlHls5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:46:f4:3b:9e:e8:75:8b:cc:4a:61:c0:34:03:f4:a1:a4:40:
a6:2b:2c:54:6c:a0:b9:6b:00:c8:25:dc:69:03:e5:56:6c:52:
bf:09:2c:88:64:7a:3a:8f:43:ea:a2:fc:62:64:61:17:b7:d4:
df:e5:74:6f:e2:c8:8f:57:30:d9:20:95:ff:f8:f6:fe:e2:cf:
eb:75:e7:61:95:6c:e1:bb:98:48:d1:83:66:a1:9e:27:bd:e1:
ad:30:3a:29:72:c4:48:0f:75:9d:7e:da:c7:8f:22:ea:c2:ca:
00:c7:b0:51:d4:21:12:c3:25:4d:a5:67:e8:48:3d:85:8e:27:
be:a5:8c:78:b6:25:8e:de:95:17:b8:f3:e3:85:46:49:97:cd:
b6:75:5b:ae:a3:04:be:73:a3:20:86:7d:ee:39:d8:0e:b3:cb:
d5:6f:b9:b0:9a:97:e0:5e:03:76:37:df:1d:db:75:56:79:e1:
5e:04:3b:84:f5:16:65:91:03:74:0d:0a:57:de:f5:e5:e7:71:
ae:d3:cf:44:84:51:04:a6:74:a5:b0:bc:86:4f:c6:30:b8:64:
66:df:39:95:3c:fa:0a:8e:b1:5a:51:26:80:16:8e:ce:a9:35:
35:32:6f:95:cb:5a:c2:ae:2f:fb:23:07:6f:16:b2:82:5e:49:
fb:6c:e0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:43:28 2026 by rpki-client