Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4a54cf-2414-4d6f-8ba5-7001baf775f2/1/USzy1zi8akeL64yogkEB_w_IGmE.mft
File: USzy1zi8akeL64yogkEB_w_IGmE.mft (raw, json)
Hash identifier: AHg+Uk18833LOWhTMR2vlOcgBJoxMIc02nwYcj7NWe8=
Subject key identifier: F3:A8:B9:A2:9D:D3:5E:00:F3:2B:07:67:95:DB:D2:CA:F6:00:53:A5
Authority key identifier: 51:2C:F2:D7:38:BC:6A:47:8B:EB:8C:A8:82:41:01:FF:0F:C8:1A:61
Certificate issuer: /CN=512cf2d738bc6a478beb8ca8824101ff0fc81a61
Certificate serial: 019D97AB0DF665E6F466E538A2AE9017896E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/USzy1zi8akeL64yogkEB_w_IGmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4a54cf-2414-4d6f-8ba5-7001baf775f2/1/USzy1zi8akeL64yogkEB_w_IGmE.mft
Manifest number: 06A2
Signing time: Thu 16 Apr 2026 19:01:03 +0000
Manifest this update: Thu 16 Apr 2026 19:01:03 +0000
Manifest next update: Fri 17 Apr 2026 19:01:03 +0000
Files and hashes: 1: USzy1zi8akeL64yogkEB_w_IGmE.crl (hash: Y1qRWFKsspd5/MTg8sj0i4F0Q3I6p0x3dFL8YXMnibo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/4a54cf-2414-4d6f-8ba5-7001baf775f2/1/USzy1zi8akeL64yogkEB_w_IGmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/4a54cf-2414-4d6f-8ba5-7001baf775f2/1/USzy1zi8akeL64yogkEB_w_IGmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/USzy1zi8akeL64yogkEB_w_IGmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:ab:0d:f6:65:e6:f4:66:e5:38:a2:ae:90:17:89:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=512cf2d738bc6a478beb8ca8824101ff0fc81a61
Validity
Not Before: Apr 16 19:01:03 2026 GMT
Not After : Apr 17 19:01:03 2026 GMT
Subject: CN=f3a8b9a29dd35e00f32b076795dbd2caf60053a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cf:80:fa:70:66:0b:27:74:e4:5f:d7:cd:63:
6a:4f:35:13:05:59:f9:2d:71:b2:e4:18:8f:65:d3:
7c:85:7a:a3:63:9f:3f:0f:c9:1e:e5:c8:ba:18:e9:
df:2d:ee:bf:0f:83:8d:b6:0a:8f:f3:1b:f3:fc:23:
f2:2a:09:89:fa:e9:16:6b:75:7e:6e:45:a1:23:95:
6a:3e:17:db:8b:26:62:94:61:45:30:bb:2d:1a:ea:
1a:d8:15:7e:e6:07:6f:5c:f3:e2:46:d3:7e:dd:5a:
97:60:d3:77:f4:88:a9:e4:95:bb:bc:2a:55:75:74:
0b:19:1b:b7:03:cd:73:b4:95:58:23:9d:c6:7c:0b:
17:44:b9:09:e6:83:41:61:ca:2f:85:40:3c:1e:21:
6f:f1:a9:81:fb:f5:22:b9:84:5f:ea:42:08:66:b1:
02:c4:d2:e4:05:9e:5a:b8:6d:2c:42:4b:69:4a:2f:
61:8b:e0:bc:a4:54:f6:b4:d7:b6:48:18:19:48:5d:
6e:77:5d:7a:bd:46:62:54:42:26:f3:60:47:f0:32:
1d:2a:29:39:cc:96:c4:2a:57:d9:79:7c:e4:c4:7f:
f8:87:61:02:f5:f0:d9:d4:6d:ec:0d:e7:99:ec:02:
af:cd:65:3c:b0:ed:60:c5:8b:fe:bf:1d:68:08:b2:
a9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A8:B9:A2:9D:D3:5E:00:F3:2B:07:67:95:DB:D2:CA:F6:00:53:A5
X509v3 Authority Key Identifier:
keyid:51:2C:F2:D7:38:BC:6A:47:8B:EB:8C:A8:82:41:01:FF:0F:C8:1A:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/USzy1zi8akeL64yogkEB_w_IGmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4a54cf-2414-4d6f-8ba5-7001baf775f2/1/USzy1zi8akeL64yogkEB_w_IGmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4a54cf-2414-4d6f-8ba5-7001baf775f2/1/USzy1zi8akeL64yogkEB_w_IGmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:c2:ae:22:a3:d8:05:5d:e6:8e:c0:d3:f3:c7:83:5d:bc:6e:
58:dd:e9:39:4a:ba:9e:9c:b8:f6:25:93:ff:7e:61:86:7d:3e:
31:77:8c:81:62:6a:3b:c3:4f:e8:a9:5c:13:c5:c4:57:99:4d:
ac:6e:6d:b0:b8:96:ae:7d:3f:a0:3d:00:d8:61:7d:f6:41:39:
1c:07:06:b4:d9:e5:ee:6a:35:90:22:53:0b:82:d0:0d:d7:27:
82:5a:ec:cf:22:74:59:53:95:48:17:47:8d:82:70:84:2c:68:
82:79:ab:9c:08:63:eb:21:38:54:71:1a:ab:a6:a8:58:23:48:
bd:76:87:82:79:9b:2a:37:11:b5:19:91:4e:44:77:9a:4e:c4:
78:e8:24:d3:7e:4f:f5:1f:21:e2:93:c2:80:4b:33:81:17:8c:
71:50:e0:ac:62:bf:bd:dd:84:c8:8e:af:61:5f:d6:30:23:a2:
02:f0:41:b3:3e:6d:7e:70:b4:18:77:39:32:7b:77:09:ae:4a:
1a:e7:5d:f3:da:b5:87:e5:c7:7e:b8:d2:c5:3a:d8:6b:76:80:
7d:d1:08:c2:b6:83:7e:5c:70:bc:6e:1b:f1:65:aa:82:61:82:
dc:0d:b8:f8:e6:0f:8d:dd:93:de:e3:1d:3d:e6:ce:ad:cc:ba:
12:5f:8e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:45:16 2026 by rpki-client