Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/UsaDhcAgvlgfWdY0dXbrewXIa80.mft
File: UsaDhcAgvlgfWdY0dXbrewXIa80.mft (raw, json)
Hash identifier: kt3OdKOd/N3kC237IIIXefG5C+S3UdBNuyVbsgXIevc=
Subject key identifier: 81:B4:16:C4:38:B4:30:CE:C2:92:34:98:AA:56:90:95:C4:F2:43:44
Authority key identifier: 52:C6:83:85:C0:20:BE:58:1F:59:D6:34:75:76:EB:7B:05:C8:6B:CD
Certificate issuer: /CN=52c68385c020be581f59d6347576eb7b05c86bcd
Certificate serial: 019FAA887616F6F9C8A6386F498459F28641
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UsaDhcAgvlgfWdY0dXbrewXIa80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/UsaDhcAgvlgfWdY0dXbrewXIa80.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:01:37 +0000
Manifest this update: Tue 28 Jul 2026 21:01:37 +0000
Manifest next update: Wed 29 Jul 2026 21:01:37 +0000
Files and hashes: 1: UsaDhcAgvlgfWdY0dXbrewXIa80.crl (hash: 3HKU+WsJYZxm11lnaT0uvchZpxYb/1XyPN4vI5Q3PRQ=)
2: sgtD8UYF9aRy2hvLvMZeq_DL8yA.roa (hash: 7+WO1NdpHvda7ZiRwxhmc9q1DRZhsi2qaxRrJ7/628M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/UsaDhcAgvlgfWdY0dXbrewXIa80.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/UsaDhcAgvlgfWdY0dXbrewXIa80.mft
rsync://rpki.ripe.net/repository/DEFAULT/UsaDhcAgvlgfWdY0dXbrewXIa80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:76:16:f6:f9:c8:a6:38:6f:49:84:59:f2:86:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52c68385c020be581f59d6347576eb7b05c86bcd
Validity
Not Before: Jul 28 21:01:37 2026 GMT
Not After : Jul 29 21:01:37 2026 GMT
Subject: CN=81b416c438b430cec2923498aa569095c4f24344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a8:9a:33:b0:f7:12:dc:6a:10:54:d7:d6:8c:
58:af:ba:19:56:04:41:9c:3b:e3:60:ae:9e:43:24:
06:f1:17:a0:e3:ff:38:1f:35:22:6d:6d:54:54:6f:
1b:35:db:22:f2:ec:65:ca:43:30:fa:cf:f6:30:e3:
5b:05:2c:a3:9d:d1:84:93:fa:c4:39:b1:d6:aa:78:
b8:52:71:01:5f:b9:64:cf:42:9f:a3:45:a4:15:4a:
13:8b:99:90:e5:09:ab:a6:81:32:48:15:18:14:0f:
5c:3f:94:c3:55:cc:ae:c0:3b:aa:66:03:ec:9a:24:
89:8b:2d:04:13:a9:45:c0:ec:de:ee:80:dc:22:ef:
64:96:71:99:57:9e:fe:bf:cd:33:99:59:36:d4:36:
87:8c:1c:ae:4f:73:23:91:a9:c0:51:31:db:14:ca:
f0:bf:6e:02:1d:c9:bc:cc:bf:cc:e0:c4:b5:4c:c5:
ef:b2:d5:04:d9:1a:84:94:44:06:eb:17:e0:24:15:
34:1a:07:bb:0d:b6:d6:46:ec:bc:4f:ae:0a:46:d6:
9f:49:56:ae:ac:f0:c1:f2:b9:7c:5a:40:1e:d6:21:
e7:57:a4:d0:a5:52:52:8e:f8:7b:a4:f1:fb:de:f7:
a1:e6:3f:53:c7:0b:f2:b1:ad:fa:ef:51:23:21:0e:
aa:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B4:16:C4:38:B4:30:CE:C2:92:34:98:AA:56:90:95:C4:F2:43:44
X509v3 Authority Key Identifier:
keyid:52:C6:83:85:C0:20:BE:58:1F:59:D6:34:75:76:EB:7B:05:C8:6B:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UsaDhcAgvlgfWdY0dXbrewXIa80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/UsaDhcAgvlgfWdY0dXbrewXIa80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/UsaDhcAgvlgfWdY0dXbrewXIa80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:21:c8:bc:df:98:6a:ba:4b:a4:62:ee:92:7b:19:57:c3:47:
bb:28:ed:42:2f:51:64:b8:e3:94:94:4c:a3:fb:a0:61:7d:1e:
04:dc:97:bb:14:8c:d6:74:27:5b:51:1f:31:a1:ab:23:28:bf:
68:10:91:07:73:3c:67:30:ec:3f:87:96:e5:69:f2:a8:9b:64:
fa:db:1f:c7:c0:60:51:61:83:4e:b1:68:b2:95:8b:4d:f0:b4:
d7:f8:29:bc:dd:94:d1:d5:d0:c7:ed:5b:45:a7:13:2d:b4:ee:
62:7e:bc:7a:44:28:9b:69:55:a1:24:39:74:8e:40:4f:8c:b6:
c1:0d:ff:4c:48:7f:32:1c:66:ce:61:23:f8:56:5c:22:75:d0:
1c:e1:ac:7b:7a:c6:f8:d2:cb:fe:3a:98:b2:1d:5e:c9:fd:73:
c8:b6:90:86:b5:81:99:90:e6:d2:54:18:29:ba:a2:9b:5f:1d:
c5:ba:62:e3:92:8c:ba:8b:fa:a2:f4:f7:35:b7:c9:ae:5d:2a:
40:1b:8f:70:97:00:f2:02:75:c5:b3:73:af:d8:c5:45:87:f8:
e2:ab:8f:a3:3f:5c:2a:08:51:89:e2:8e:9d:3d:be:81:37:c9:
c2:b5:c9:a0:63:38:ac:59:a8:5b:a7:91:9b:7c:7f:aa:c1:36:
4b:1a:2a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:05:32 2026 by rpki-client