Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/a3b6ea-b4a6-4573-92e6-7cfe2c03b0a8/1/usAxCR9p01cBFvDdGgm-IPPdWEQ.mft
File: usAxCR9p01cBFvDdGgm-IPPdWEQ.mft (raw, json)
Hash identifier: tyRINsBKSFNifira7/TMmp5CX2Rcmh2gH4gvLX+17q0=
Subject key identifier: 77:50:48:2B:77:9E:4A:14:19:29:D9:4E:45:B1:85:36:24:3C:03:DF
Authority key identifier: BA:C0:31:09:1F:69:D3:57:01:16:F0:DD:1A:09:BE:20:F3:DD:58:44
Certificate issuer: /CN=bac031091f69d3570116f0dd1a09be20f3dd5844
Certificate serial: 01A1AB2771BD1F9CECE2C8FEBA3D321D199A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/usAxCR9p01cBFvDdGgm-IPPdWEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/a3b6ea-b4a6-4573-92e6-7cfe2c03b0a8/1/usAxCR9p01cBFvDdGgm-IPPdWEQ.mft
Manifest number: 29
Signing time: Thu 05 Nov 2026 10:00:51 +0000
Manifest this update: Thu 05 Nov 2026 10:00:51 +0000
Manifest next update: Fri 06 Nov 2026 10:00:51 +0000
Files and hashes: 1: ibifGe6nmFsSTVNDHYWRQSy2kOA.roa (hash: kEKA3i/6UscqbuHT+tIpAu/mc2AjacPsvOQfB+U26qw=)
2: p7l_6AP9SzvTdRcSseBZuvvaN9s.asa (hash: 3RzB6I+ThUU2yL5+tqEdamhmxh9ziAC/qB6dsO4wudg=)
3: usAxCR9p01cBFvDdGgm-IPPdWEQ.crl (hash: qF+LporOa/bR7a1u+l5l2gETdlFb/qafHb64xxpeLB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/a3b6ea-b4a6-4573-92e6-7cfe2c03b0a8/1/usAxCR9p01cBFvDdGgm-IPPdWEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/a3b6ea-b4a6-4573-92e6-7cfe2c03b0a8/1/usAxCR9p01cBFvDdGgm-IPPdWEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/usAxCR9p01cBFvDdGgm-IPPdWEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ab:27:71:bd:1f:9c:ec:e2:c8:fe:ba:3d:32:1d:19:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bac031091f69d3570116f0dd1a09be20f3dd5844
Validity
Not Before: Nov 5 10:00:51 2026 GMT
Not After : Nov 6 10:00:51 2026 GMT
Subject: CN=7750482b779e4a141929d94e45b18536243c03df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:06:18:b7:13:3b:c4:47:65:8d:25:3f:c7:cc:
f8:5d:97:52:e8:68:fe:b0:55:75:f3:83:be:98:9f:
dc:ce:5e:52:af:5b:a1:d8:d3:bf:6d:32:3c:11:96:
92:18:e4:ee:84:7e:0c:d9:fc:0c:60:5d:c9:45:a9:
ad:0f:6f:0c:55:af:5b:bf:f1:74:be:52:f0:36:bb:
e8:b8:2e:c4:65:79:f6:c2:92:8f:1b:15:bf:76:a2:
a1:ec:3e:a8:a5:60:60:2a:b6:42:32:ab:c1:53:49:
06:5c:71:5d:c1:f4:df:42:2d:1c:b5:23:4c:fe:65:
e3:a6:fb:e2:a1:b3:67:9b:02:d4:e1:27:7b:49:7c:
31:52:39:b9:18:22:04:92:df:6f:57:e5:56:5d:ab:
16:73:9d:d5:9b:a4:1d:8b:71:34:8b:a0:29:d3:ce:
1e:7d:fc:f6:66:85:be:07:aa:8b:72:b3:2f:dd:d4:
bd:0b:b5:78:2f:8e:13:7e:a6:19:df:ff:f0:6a:40:
bd:66:2c:6a:a3:80:3c:f8:fe:1f:2d:3c:f3:74:01:
8f:4a:aa:c7:46:3d:1d:93:a2:40:bd:6a:5e:40:d8:
a5:a0:7c:ea:2f:a3:ea:ac:d8:76:d6:6d:ca:d1:0d:
5e:bb:f7:77:a2:2d:ad:04:68:5c:71:da:57:40:2b:
38:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:50:48:2B:77:9E:4A:14:19:29:D9:4E:45:B1:85:36:24:3C:03:DF
X509v3 Authority Key Identifier:
keyid:BA:C0:31:09:1F:69:D3:57:01:16:F0:DD:1A:09:BE:20:F3:DD:58:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/usAxCR9p01cBFvDdGgm-IPPdWEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/a3b6ea-b4a6-4573-92e6-7cfe2c03b0a8/1/usAxCR9p01cBFvDdGgm-IPPdWEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/a3b6ea-b4a6-4573-92e6-7cfe2c03b0a8/1/usAxCR9p01cBFvDdGgm-IPPdWEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:51:5e:ef:6d:09:48:4d:11:d9:df:39:26:9a:08:05:08:f7:
b6:9a:f1:91:ef:db:67:7d:10:f6:70:6b:8b:73:a8:7c:f1:b9:
7b:33:c4:57:b3:b0:8f:d1:48:b3:58:1d:95:6e:34:c8:39:76:
4e:75:c6:fc:c0:dc:85:c9:06:f4:0e:98:ae:1e:b9:12:2b:4d:
c8:78:f2:40:0a:3b:47:85:92:de:e6:3e:52:b9:f6:3b:53:18:
68:c8:bf:11:3e:f0:f2:d0:5b:47:f9:49:8a:b9:29:80:2a:6e:
b7:7a:e7:4c:b6:df:2f:f9:fc:22:12:3f:0b:1f:1e:da:cc:0f:
f5:9b:9c:17:ce:78:10:e2:99:f2:52:de:6a:63:af:55:93:b8:
df:a9:b7:71:5c:41:7e:3b:ec:c7:cf:14:35:77:b6:aa:7c:fe:
6b:3f:25:d7:13:3e:3c:2f:d5:23:fb:5c:46:68:e7:83:81:78:
a4:0b:31:db:fb:3c:bf:76:f0:87:b6:2c:39:93:b9:c5:6f:3c:
5b:ba:bb:03:d2:87:b0:1d:75:69:d8:ee:ff:16:39:02:aa:93:
05:3c:f9:99:7f:3b:4c:3b:9f:37:7d:c9:60:b3:3e:ae:5b:a3:
74:38:e0:70:f0:bb:9d:d1:95:08:b8:0b:31:6b:66:e7:09:80:
75:9c:5d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 18:56:38 2026 by rpki-client