Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.mft
File: rUS-GO4-DSdHZwVV6GsACWXoE5s.mft (raw, json)
Hash identifier: TWa7gf4hlssh0Hy3ejRLfqIs8yejBhlHI55o8GNHJxY=
Subject key identifier: AF:02:C3:8C:89:EB:6B:38:AE:FF:61:0A:DA:BF:69:B3:CD:4F:0A:29
Authority key identifier: AD:44:BE:18:EE:3E:0D:27:47:67:05:55:E8:6B:00:09:65:E8:13:9B
Certificate issuer: /CN=ad44be18ee3e0d2747670555e86b000965e8139b
Certificate serial: 019D992B8490BFB87EC71E2A4CA8193089A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUS-GO4-DSdHZwVV6GsACWXoE5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 02:00:59 +0000
Manifest this update: Fri 17 Apr 2026 02:00:59 +0000
Manifest next update: Sat 18 Apr 2026 02:00:59 +0000
Files and hashes: 1: IoZsqC7U-fQC_aty6wDytMhbNvQ.roa (hash: uSpnth7jpKViFNAUl0BHygMMK1vfeGylmztQwD5Bysw=)
2: rUS-GO4-DSdHZwVV6GsACWXoE5s.crl (hash: I3oydTu6jMBmh7SiltKzQppCiXVLGZY5H8YKiYMAHa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/rUS-GO4-DSdHZwVV6GsACWXoE5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:84:90:bf:b8:7e:c7:1e:2a:4c:a8:19:30:89:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad44be18ee3e0d2747670555e86b000965e8139b
Validity
Not Before: Apr 17 02:00:59 2026 GMT
Not After : Apr 18 02:00:59 2026 GMT
Subject: CN=af02c38c89eb6b38aeff610adabf69b3cd4f0a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5a:76:c2:ca:db:17:16:79:44:09:59:73:b0:
df:c2:7e:3b:0d:9f:e6:1b:e8:fe:46:37:58:a4:c8:
d4:c8:20:2a:c6:ec:ab:7b:c8:5b:a5:d4:91:19:e3:
7d:71:53:4b:0b:d5:2a:92:ad:d9:a9:bc:b6:ff:c8:
d0:01:5b:94:cd:ce:09:c0:e2:ae:d5:59:ff:6a:73:
4a:92:8a:6b:ba:c3:4b:52:23:53:54:13:d1:66:78:
f2:df:a4:46:db:6f:0d:05:96:8e:d9:f1:28:3a:59:
ac:ac:7b:ee:72:75:f5:e4:36:39:ca:30:75:64:65:
08:80:bd:2b:7e:64:a5:eb:a3:16:63:e8:15:5b:ed:
c5:75:83:02:13:88:80:c1:08:87:2c:92:91:42:f4:
d0:33:1c:f4:38:de:e2:12:12:c9:d7:36:76:d5:db:
a0:88:95:fa:10:43:d4:93:e6:0e:eb:69:75:b6:1c:
d2:76:47:c4:01:42:2a:10:e8:4b:2e:57:a6:e3:62:
d1:52:39:26:ec:16:38:b6:25:2d:dc:27:6f:be:a4:
d2:0e:1c:e1:a6:30:49:e8:70:5d:c3:e1:ce:1b:b4:
66:b7:c5:70:1d:3f:d0:15:39:94:97:69:b1:51:18:
62:f7:38:af:39:a5:1f:8a:2e:59:94:50:3a:dd:4a:
28:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:02:C3:8C:89:EB:6B:38:AE:FF:61:0A:DA:BF:69:B3:CD:4F:0A:29
X509v3 Authority Key Identifier:
keyid:AD:44:BE:18:EE:3E:0D:27:47:67:05:55:E8:6B:00:09:65:E8:13:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUS-GO4-DSdHZwVV6GsACWXoE5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:d5:13:11:22:58:0b:2c:7d:47:18:7f:88:f0:1a:b0:2b:5d:
c2:a0:0d:ba:8b:4a:e2:22:94:64:ef:8c:e6:71:ea:ae:2b:4b:
1d:c0:2c:75:02:83:59:63:93:0c:1c:db:5c:d5:2c:a5:f6:a3:
62:14:11:3b:81:1b:6d:aa:cd:0d:17:4a:21:fd:95:50:31:16:
45:de:57:aa:d4:36:f2:be:17:8a:bd:a5:07:12:49:a7:b9:91:
94:d2:c7:cf:08:32:e8:b0:05:61:fd:9c:4f:48:9b:e6:d2:14:
f7:e0:81:dd:65:f4:a1:fc:fe:02:6f:4f:5b:64:c9:1d:0b:cb:
5a:0c:f2:d2:46:1d:d5:ee:5b:a7:30:bc:d6:2e:81:31:04:42:
38:7a:ad:15:cc:07:e4:7b:23:cc:12:66:62:2e:97:86:1e:18:
45:c3:0a:0c:58:38:77:81:4d:28:c9:cc:73:d3:22:90:a5:a8:
ca:19:08:b5:fa:2d:1a:22:1b:b1:81:e1:96:14:15:27:38:73:
68:9f:17:88:7e:8e:c8:99:b8:5c:19:55:a5:74:33:13:9a:4f:
6f:f3:73:d3:f7:66:24:55:53:3e:ed:d4:67:f3:ac:95:4f:33:
53:b9:5a:5d:29:fe:69:82:99:99:94:29:a8:46:00:8a:cb:bb:
e1:d4:7c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:04:19 2026 by rpki-client