Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.mft
File: rUS-GO4-DSdHZwVV6GsACWXoE5s.mft (raw, json)
Hash identifier: lKeYriRp0OB2byniamdNofRQzhrrfaiMKicWlQQcWv4=
Subject key identifier: 7A:50:52:79:5C:11:D4:1D:F1:F6:D8:34:A2:85:D2:72:EC:B1:5B:D8
Authority key identifier: AD:44:BE:18:EE:3E:0D:27:47:67:05:55:E8:6B:00:09:65:E8:13:9B
Certificate issuer: /CN=ad44be18ee3e0d2747670555e86b000965e8139b
Certificate serial: 019CABA21E97C0065B15DE3BE0DE62127EB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUS-GO4-DSdHZwVV6GsACWXoE5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 23:00:54 +0000
Manifest this update: Sun 01 Mar 2026 23:00:54 +0000
Manifest next update: Mon 02 Mar 2026 23:00:54 +0000
Files and hashes: 1: IoZsqC7U-fQC_aty6wDytMhbNvQ.roa (hash: uSpnth7jpKViFNAUl0BHygMMK1vfeGylmztQwD5Bysw=)
2: rUS-GO4-DSdHZwVV6GsACWXoE5s.crl (hash: 7FEEjj2kh18vepUui+x4BMvcrRGUXA/WFRc+/i29B24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/rUS-GO4-DSdHZwVV6GsACWXoE5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:1e:97:c0:06:5b:15:de:3b:e0:de:62:12:7e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad44be18ee3e0d2747670555e86b000965e8139b
Validity
Not Before: Mar 1 23:00:54 2026 GMT
Not After : Mar 2 23:00:54 2026 GMT
Subject: CN=7a5052795c11d41df1f6d834a285d272ecb15bd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4d:55:e7:b4:39:f6:03:01:3c:86:a2:fc:f1:
6b:f6:fc:9e:8d:3e:07:03:37:23:ec:1e:81:5e:cf:
76:02:b2:bf:ff:dd:18:35:99:48:58:ee:e6:e5:d7:
73:b6:64:6d:bf:99:92:00:a7:2a:ef:f6:6a:c4:32:
e4:f6:7c:4f:35:7d:14:25:4b:7c:6c:fc:29:92:78:
61:7a:a2:ee:0f:7e:17:30:09:8b:f2:d0:3a:e7:8c:
7c:35:fd:66:86:a2:86:30:29:fa:05:1b:20:d1:52:
bc:77:5d:80:f1:ba:93:f9:27:3e:bd:a6:b8:c0:65:
6b:5e:08:ee:bc:8a:a0:66:3e:26:8f:94:9a:df:38:
45:d8:99:cb:d9:00:ca:0c:d3:9a:37:a7:b9:8d:15:
c0:b2:f8:a4:ef:3a:60:ad:16:a7:bf:8f:c2:54:b7:
5a:f6:0c:2a:19:74:d4:7c:6b:b7:83:40:46:90:6f:
09:ed:87:89:e8:96:97:11:65:50:d6:08:b4:4c:dd:
66:92:82:bb:b8:78:71:3f:47:b6:a3:b9:56:fa:6d:
fc:07:3c:49:08:6a:72:2a:13:84:f7:e0:4e:58:9f:
d7:37:f9:26:5b:5a:e0:f3:2c:25:a0:14:28:33:43:
39:85:c1:ba:c3:89:7f:72:1b:1d:86:35:d8:49:ce:
d5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:50:52:79:5C:11:D4:1D:F1:F6:D8:34:A2:85:D2:72:EC:B1:5B:D8
X509v3 Authority Key Identifier:
keyid:AD:44:BE:18:EE:3E:0D:27:47:67:05:55:E8:6B:00:09:65:E8:13:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUS-GO4-DSdHZwVV6GsACWXoE5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:e4:b3:9b:bb:49:24:80:ca:a1:9e:85:49:71:cd:1c:9e:07:
fd:26:2d:8f:64:39:96:c7:14:67:2a:b3:8b:4a:f0:ba:87:b6:
fc:54:28:aa:cc:75:36:30:51:9e:6f:db:58:7a:28:8c:e5:15:
ab:d5:f3:50:0e:8a:98:ec:f1:5a:07:5a:e3:f2:e0:10:af:e6:
51:ab:df:da:66:8d:8d:21:61:18:6b:3b:2d:0e:d2:67:e8:59:
fe:22:7e:db:17:cd:c1:bb:5c:eb:da:87:18:54:21:f7:3c:5e:
fe:e4:a9:0e:56:1a:01:0c:29:17:1a:fc:7b:bd:53:f6:9e:2f:
09:15:47:ac:b4:bb:cf:da:6c:ff:6c:44:55:60:d6:12:d4:46:
f7:fb:16:d1:29:27:2e:4d:8b:ef:3f:fa:1d:43:87:9a:1d:39:
e0:31:ab:67:de:32:a3:13:14:fe:27:82:e0:f3:77:46:10:02:
50:42:fa:9f:e8:3a:97:e4:f0:89:d1:aa:c5:1e:50:ca:a1:18:
d7:5a:be:56:43:b7:63:1e:1b:70:f7:de:02:ff:92:24:15:94:
b3:b2:01:db:8a:d9:20:3c:24:b4:bb:aa:ef:75:41:be:d4:a4:
26:8c:77:d6:bb:78:b3:37:d1:b6:46:64:d4:b2:86:9a:e6:fd:
99:a1:1e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:05:19 2026 by rpki-client