Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4a54cf-2414-4d6f-8ba5-7001baf775f2/1/USzy1zi8akeL64yogkEB_w_IGmE.mft
File: USzy1zi8akeL64yogkEB_w_IGmE.mft (raw, json)
Hash identifier: CNscUOuOb3oG/XHD3C/uwpHP9Bq3VwbByeBcq+LthQs=
Subject key identifier: 80:61:6D:18:59:AB:32:3D:A0:91:51:B8:7F:8B:47:D5:9F:8A:26:D1
Authority key identifier: 51:2C:F2:D7:38:BC:6A:47:8B:EB:8C:A8:82:41:01:FF:0F:C8:1A:61
Certificate issuer: /CN=512cf2d738bc6a478beb8ca8824101ff0fc81a61
Certificate serial: 019CAC10289E750C55CEF9BA40480A41BD1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/USzy1zi8akeL64yogkEB_w_IGmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4a54cf-2414-4d6f-8ba5-7001baf775f2/1/USzy1zi8akeL64yogkEB_w_IGmE.mft
Manifest number: 0628
Signing time: Mon 02 Mar 2026 01:01:05 +0000
Manifest this update: Mon 02 Mar 2026 01:01:05 +0000
Manifest next update: Tue 03 Mar 2026 01:01:05 +0000
Files and hashes: 1: USzy1zi8akeL64yogkEB_w_IGmE.crl (hash: rFzwbGRj1v4F3sQz9EqNhYaBpQPqkNjdE6oU1T39yZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/4a54cf-2414-4d6f-8ba5-7001baf775f2/1/USzy1zi8akeL64yogkEB_w_IGmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/4a54cf-2414-4d6f-8ba5-7001baf775f2/1/USzy1zi8akeL64yogkEB_w_IGmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/USzy1zi8akeL64yogkEB_w_IGmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:28:9e:75:0c:55:ce:f9:ba:40:48:0a:41:bd:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=512cf2d738bc6a478beb8ca8824101ff0fc81a61
Validity
Not Before: Mar 2 01:01:05 2026 GMT
Not After : Mar 3 01:01:05 2026 GMT
Subject: CN=80616d1859ab323da09151b87f8b47d59f8a26d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:22:fa:86:e9:ba:37:1e:45:a1:1d:d0:6f:9a:
66:0b:6b:cf:5f:e6:f0:4e:16:7d:d4:d5:26:5b:a4:
4f:35:30:81:94:9a:81:a3:ee:b1:aa:1e:77:7f:d8:
3d:af:06:85:06:dc:7e:07:fd:5c:a9:f3:88:89:c6:
0d:61:b7:a1:11:43:40:2b:f9:27:9c:47:eb:ed:24:
8a:a3:8d:72:df:08:d7:e8:87:57:36:14:88:8f:78:
75:f7:33:a0:9f:1a:da:ab:ae:b9:9a:c8:65:3a:e1:
83:ef:5d:b1:4a:5f:ec:97:da:f2:eb:68:78:a2:63:
74:55:2d:23:95:d7:04:bb:1f:df:fe:53:ac:79:d9:
d5:e4:a8:8c:39:58:a6:82:1f:8e:0d:52:8e:17:51:
aa:c1:31:f4:17:92:49:d6:46:51:f5:6f:ae:d5:5f:
51:40:17:68:eb:2e:8a:d4:ee:20:84:4f:be:c1:cd:
34:fd:dc:a5:5e:fb:c9:ee:27:f8:33:29:c1:6b:6f:
9a:f9:53:59:5f:b8:33:79:f6:65:d1:08:03:4c:32:
7e:67:7c:d6:ad:0f:53:72:52:46:a4:a1:2f:4f:e0:
a9:f7:a7:89:41:ef:78:39:eb:6b:6e:50:58:06:60:
ee:fc:43:e0:8f:89:83:79:0a:41:a2:18:7e:66:b2:
93:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:61:6D:18:59:AB:32:3D:A0:91:51:B8:7F:8B:47:D5:9F:8A:26:D1
X509v3 Authority Key Identifier:
keyid:51:2C:F2:D7:38:BC:6A:47:8B:EB:8C:A8:82:41:01:FF:0F:C8:1A:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/USzy1zi8akeL64yogkEB_w_IGmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4a54cf-2414-4d6f-8ba5-7001baf775f2/1/USzy1zi8akeL64yogkEB_w_IGmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4a54cf-2414-4d6f-8ba5-7001baf775f2/1/USzy1zi8akeL64yogkEB_w_IGmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:c2:5e:87:de:93:65:2e:e6:5a:dd:1b:ea:c3:4a:71:a4:d3:
0d:a4:37:1c:2e:93:dc:35:97:c3:8d:11:e9:fc:69:78:e3:d6:
a1:c0:8e:bf:3c:16:f1:45:75:d3:60:48:7e:ce:30:f6:07:48:
2d:74:d0:75:f0:07:54:53:9a:ed:74:ef:4f:61:9a:5e:c3:52:
d4:87:a7:d6:7d:4a:cc:63:dd:2b:0a:ba:b2:59:cb:c3:aa:be:
d2:df:14:12:39:0f:e7:ae:52:dd:f7:7f:0a:fc:26:5f:41:81:
2f:fa:8e:04:14:3a:99:47:5c:d8:3a:49:c6:35:d0:ef:0e:09:
e3:c0:92:4a:05:67:e9:25:e8:54:4e:c0:cf:d5:c6:cf:8c:0d:
39:6d:e4:d8:10:74:d7:7f:da:29:e0:5d:51:fb:54:e3:ee:4a:
b2:91:45:db:1b:07:33:b1:5d:3f:90:c8:ed:b0:24:ed:aa:42:
d1:99:eb:c5:bc:35:4a:25:56:23:f4:8a:e1:76:7a:f2:b7:8b:
e1:33:c3:e7:b4:a1:e6:0c:8a:a6:dd:14:9e:f0:c1:b6:bd:38:
d4:94:5e:f6:4b:40:e5:38:8a:44:e1:79:c4:5a:6c:67:d1:ec:
b3:09:26:2a:1c:77:4b:f8:8b:25:8d:cf:25:01:77:ec:d1:f9:
4a:e5:24:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:59:33 2026 by rpki-client