Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.mft
File: usSgifjmioMOuYpcH-JWBlHls5s.mft (raw, json)
Hash identifier: Qt6hXkfFTX5V+aaSwOZ5NIalfEwdNy7xnRLTFwbEqNw=
Subject key identifier: 8D:92:C0:0A:72:8D:89:8D:E9:C8:B8:52:7A:52:7E:FE:9B:4F:43:35
Authority key identifier: BA:C4:A0:89:F8:E6:8A:83:0E:B9:8A:5C:1F:E2:56:06:51:E5:B3:9B
Certificate issuer: /CN=bac4a089f8e68a830eb98a5c1fe2560651e5b39b
Certificate serial: 019FA9ABB16762A0DAFF10E30681830C87A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/usSgifjmioMOuYpcH-JWBlHls5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.mft
Manifest number: 026F
Signing time: Tue 28 Jul 2026 17:00:29 +0000
Manifest this update: Tue 28 Jul 2026 17:00:29 +0000
Manifest next update: Wed 29 Jul 2026 17:00:29 +0000
Files and hashes: 1: GmNXmiq5iVl3LlLazdx_LHN3boE.asa (hash: YRVbgQn0SaBqEvSThmW75OyzWKprF8xX5w+6esDiBi4=)
2: lZdeB_zLhBn8Pma8VrIrTZ-DLw0.roa (hash: Ho6P5uHvKiLwzWfjR53vh5bZgXgpl16WZYv0ODwixJI=)
3: usSgifjmioMOuYpcH-JWBlHls5s.crl (hash: dXrcLXFYNj/zBMWPQTFD7LB6IR81POugYGK8O+WxSz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/usSgifjmioMOuYpcH-JWBlHls5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:b1:67:62:a0:da:ff:10:e3:06:81:83:0c:87:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bac4a089f8e68a830eb98a5c1fe2560651e5b39b
Validity
Not Before: Jul 28 17:00:29 2026 GMT
Not After : Jul 29 17:00:29 2026 GMT
Subject: CN=8d92c00a728d898de9c8b8527a527efe9b4f4335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:22:d8:5f:4d:a7:df:cd:56:3e:1f:23:a1:e9:
fa:7e:c5:9a:26:6e:ab:08:82:0e:d2:d8:41:15:b1:
f3:b1:d6:8b:6f:cd:a4:13:47:ef:51:be:01:b3:b7:
c3:d9:40:2d:2d:88:a6:93:ef:51:0c:4b:1d:02:d0:
d8:c6:1a:9c:ea:d8:f8:15:a6:6c:27:b7:d0:95:c3:
ac:f2:6d:12:2e:11:2d:b3:19:87:fe:d9:82:d1:12:
b1:90:33:1c:39:07:55:f6:f1:cd:b4:25:de:35:d3:
37:39:dc:04:a1:83:d8:92:42:ef:82:32:7b:82:94:
01:3e:d8:1f:74:40:02:a5:8c:75:4f:fd:89:a4:ba:
b1:2c:14:ff:df:92:c0:a8:12:77:01:42:f8:4c:08:
fa:96:da:11:4c:86:4c:8c:59:a6:52:ea:c1:a9:59:
7a:62:e6:d1:c6:e1:1c:f7:fc:c5:b8:b4:a2:b2:1c:
b9:83:29:68:23:a5:14:96:66:16:d5:16:64:bc:e4:
92:93:de:32:b4:97:fc:22:fe:df:28:b3:b5:1d:90:
a0:5d:3e:ea:80:8f:a4:80:e4:d5:b8:69:45:b0:e7:
cc:9a:5d:0f:e4:9c:10:1c:a3:40:aa:e1:a1:d8:28:
98:75:94:8c:44:61:e4:51:d4:4d:6e:46:03:8f:74:
e5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:92:C0:0A:72:8D:89:8D:E9:C8:B8:52:7A:52:7E:FE:9B:4F:43:35
X509v3 Authority Key Identifier:
keyid:BA:C4:A0:89:F8:E6:8A:83:0E:B9:8A:5C:1F:E2:56:06:51:E5:B3:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/usSgifjmioMOuYpcH-JWBlHls5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:c0:dc:8b:1c:87:54:0f:f4:2d:7d:c4:c0:75:b0:b6:66:e7:
73:5d:c5:a9:f4:1a:ec:92:e5:2a:44:e0:af:53:45:f1:f2:01:
54:a0:c8:b5:d6:a9:14:61:21:c6:08:5a:52:bb:3b:29:48:0e:
6b:75:e1:b4:b5:6a:8f:f7:2e:89:0c:88:18:0e:89:bf:b1:58:
5d:d4:02:9c:0b:1b:fe:9e:95:e3:ba:70:6f:cf:b7:7c:9f:a3:
2d:1d:19:08:db:91:4c:68:02:94:67:0c:3d:80:5a:f6:dd:dd:
ac:d2:29:e5:2b:0d:ec:9e:c4:12:ca:8c:e0:f5:c2:62:dd:90:
d5:10:02:93:43:92:86:fd:8d:f0:9e:d8:5b:e3:df:63:57:63:
44:5a:c5:48:ef:8a:86:10:3b:f1:15:60:a0:f7:8b:ca:97:dc:
96:3f:6b:04:e2:be:d8:67:6f:94:4a:fb:3f:5f:a5:0f:02:48:
b4:cf:8d:88:64:d5:10:f3:e2:1d:99:87:1d:e5:66:9d:16:25:
cb:0d:08:22:d1:34:bc:ac:84:ee:bd:28:04:2a:41:6a:61:d2:
cb:99:95:58:20:00:c8:cc:c3:6e:32:ca:19:9e:25:86:fc:b5:
53:9f:c4:4f:8e:fd:59:0a:24:1d:93:48:76:fe:f9:8c:f3:82:
e4:5f:5c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:26:46 2026 by rpki-client