Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a5e94c-08be-4fce-8ec9-18ece368266f/1/UsSOG7ZyzaaEZADov41taWg1178.mft
File: UsSOG7ZyzaaEZADov41taWg1178.mft (raw, json)
Hash identifier: j/P1EdHFZxpQBHjM/6H2n6SsGHeximLxOcw8c0P74cc=
Subject key identifier: 58:08:FE:0D:A2:6F:58:E6:2B:D6:5A:A5:CB:82:45:B1:F6:F2:3C:70
Authority key identifier: 52:C4:8E:1B:B6:72:CD:A6:84:64:00:E8:BF:8D:6D:69:68:35:D7:BF
Certificate issuer: /CN=52c48e1bb672cda6846400e8bf8d6d696835d7bf
Certificate serial: 019CAC47831F51883E69391AB4B73F2A64D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UsSOG7ZyzaaEZADov41taWg1178.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a5e94c-08be-4fce-8ec9-18ece368266f/1/UsSOG7ZyzaaEZADov41taWg1178.mft
Manifest number: 0A7E
Signing time: Mon 02 Mar 2026 02:01:33 +0000
Manifest this update: Mon 02 Mar 2026 02:01:33 +0000
Manifest next update: Tue 03 Mar 2026 02:01:33 +0000
Files and hashes: 1: Pxtr7Gbm8FoWkqDWUIVtrs362Ec.roa (hash: Hjsu0JAwI6gJ3DPtZLzsxv8mvLUzo+rKbsqMaxC3bYY=)
2: UsSOG7ZyzaaEZADov41taWg1178.crl (hash: 2I2czv6x2JZ1tBfkqEycoHBMMx/WX8pGEAWQeJ9ErZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/a5e94c-08be-4fce-8ec9-18ece368266f/1/UsSOG7ZyzaaEZADov41taWg1178.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/a5e94c-08be-4fce-8ec9-18ece368266f/1/UsSOG7ZyzaaEZADov41taWg1178.mft
rsync://rpki.ripe.net/repository/DEFAULT/UsSOG7ZyzaaEZADov41taWg1178.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:83:1f:51:88:3e:69:39:1a:b4:b7:3f:2a:64:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52c48e1bb672cda6846400e8bf8d6d696835d7bf
Validity
Not Before: Mar 2 02:01:33 2026 GMT
Not After : Mar 3 02:01:33 2026 GMT
Subject: CN=5808fe0da26f58e62bd65aa5cb8245b1f6f23c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:14:29:77:74:4e:39:0b:9d:2c:71:5f:56:68:
a9:cf:ff:1a:33:20:52:aa:17:bc:6c:1d:42:b5:26:
39:90:ae:a3:d9:9a:e4:d5:6f:55:e9:1b:9b:1a:52:
d6:06:7a:c0:2b:4a:48:54:28:16:74:37:d8:72:4e:
66:aa:71:3f:f4:37:41:42:91:d3:78:58:4d:fe:f7:
30:17:7d:49:bb:eb:b8:35:7c:b7:d2:4e:f8:ac:9d:
51:76:99:b2:0e:a5:6f:68:3c:41:32:44:16:ec:aa:
cb:ec:97:a5:5f:eb:63:4e:2a:24:1a:b2:f4:a2:50:
7f:15:99:9f:37:8a:0d:eb:2d:43:30:b3:c9:a4:6a:
46:2a:0a:1d:b3:cd:dc:77:fe:8f:4a:38:77:c3:fc:
0e:2c:94:4e:e6:bf:aa:8d:a6:7e:24:d8:ae:94:9d:
6d:73:e6:2e:ef:c4:68:80:9c:ff:de:c7:2f:0a:1a:
c7:86:e6:de:f6:78:e2:8e:17:eb:47:27:ec:74:99:
c7:56:b5:90:87:aa:c9:23:83:0b:56:26:31:9c:38:
6b:e0:0e:38:1a:f1:15:c4:c0:2a:cb:e4:17:a6:5d:
73:13:f0:c4:f8:91:fd:b6:31:04:07:08:e6:de:25:
98:b0:52:58:39:03:47:bb:cf:8b:61:31:c1:93:70:
b2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:08:FE:0D:A2:6F:58:E6:2B:D6:5A:A5:CB:82:45:B1:F6:F2:3C:70
X509v3 Authority Key Identifier:
keyid:52:C4:8E:1B:B6:72:CD:A6:84:64:00:E8:BF:8D:6D:69:68:35:D7:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UsSOG7ZyzaaEZADov41taWg1178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a5e94c-08be-4fce-8ec9-18ece368266f/1/UsSOG7ZyzaaEZADov41taWg1178.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a5e94c-08be-4fce-8ec9-18ece368266f/1/UsSOG7ZyzaaEZADov41taWg1178.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:e7:53:b8:b9:38:34:e9:38:07:90:33:fe:ca:b3:bc:3c:6d:
2d:c8:f7:b1:66:12:de:bd:21:ef:be:23:cc:1a:25:66:4d:c0:
d8:23:6f:34:f9:82:af:14:6d:f8:24:87:20:c4:bf:7e:4a:9a:
d7:ad:c1:b9:30:01:42:d7:db:f7:1d:94:4e:49:bd:0f:4a:a1:
26:22:21:07:35:63:c7:a9:ae:5b:0c:49:d9:ca:6f:de:78:91:
e9:2b:c6:c0:59:a5:ef:28:83:66:28:49:82:80:1a:45:87:bf:
f5:00:5f:3a:0b:f0:e4:50:45:6a:32:be:5b:7e:e4:98:33:79:
17:05:ac:db:d8:14:09:77:41:61:80:8f:41:c2:e0:28:d9:15:
2c:03:1a:72:d3:41:03:ce:fc:a9:1d:65:ad:03:55:37:90:da:
bc:a6:1b:0c:64:21:d6:e0:d5:53:87:a8:12:5f:2a:f4:22:e6:
e5:81:cd:df:a1:b1:ea:f1:bd:ef:66:e5:f2:b3:1d:46:c7:e7:
76:6f:25:2e:de:6c:6f:73:0d:4b:34:6c:67:9a:fc:37:a0:8e:
8b:ae:03:63:60:18:15:54:22:24:7e:57:d4:7b:3b:09:70:d4:
cf:bd:7a:81:66:53:d9:7f:a8:0b:87:62:65:b7:d0:29:e1:61:
cc:a6:58:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:07:58 2026 by rpki-client