Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
File: UsbdFxnihP9ccH-BIujtDYeVrz0.mft (raw, json)
Hash identifier: eQf/R1g2X2qWv+8MqGA6VKeveWzgSJMCtq2eoWbcjIM=
Subject key identifier: 47:A8:F7:D2:6E:F3:7C:B7:56:87:83:E8:BD:E2:68:48:31:C7:63:A6
Authority key identifier: 52:C6:DD:17:19:E2:84:FF:5C:70:7F:81:22:E8:ED:0D:87:95:AF:3D
Certificate issuer: /CN=52c6dd1719e284ff5c707f8122e8ed0d8795af3d
Certificate serial: 019CACEB85BFDAAE7E41C86E80AB3F85C288
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
Manifest number: 0FAE
Signing time: Mon 02 Mar 2026 05:00:42 +0000
Manifest this update: Mon 02 Mar 2026 05:00:42 +0000
Manifest next update: Tue 03 Mar 2026 05:00:42 +0000
Files and hashes: 1: 8xjA0vijBm1diaizodp3mG75LDI.roa (hash: 4AjzFUfgs+M+NN2IgWhMj7sovV6HcoEwZY/R0BtNoC0=)
2: 9zqsNEeSAsd4KPkjQphjUUcz4Fk.roa (hash: bkExPcU8J676GVwwzpIBRh1+JT4P+zvjVqg3r38ok4Q=)
3: UsbdFxnihP9ccH-BIujtDYeVrz0.crl (hash: x4A12I3QIYPF2bdfvm7ZY6hTAwXog8Rg0RMXv7FGbbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:85:bf:da:ae:7e:41:c8:6e:80:ab:3f:85:c2:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52c6dd1719e284ff5c707f8122e8ed0d8795af3d
Validity
Not Before: Mar 2 05:00:42 2026 GMT
Not After : Mar 3 05:00:42 2026 GMT
Subject: CN=47a8f7d26ef37cb7568783e8bde2684831c763a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:6c:4f:a7:6c:21:31:24:dd:97:0b:3d:94:fd:
86:e7:0c:aa:cf:b3:61:0f:5a:de:dd:72:e5:3d:1a:
cb:78:8c:b1:1d:b0:e4:1b:a3:47:f8:ec:24:bc:21:
18:43:d8:ab:9b:49:9f:52:32:05:17:ec:f7:29:8f:
1c:5a:c8:0b:8e:db:e7:a9:dd:1b:94:a4:b6:ec:aa:
ae:05:fc:b7:09:35:d5:01:90:e5:4b:a7:7d:2d:bb:
46:eb:44:6b:db:f9:2b:c7:81:2e:e2:bb:89:6b:6a:
df:b8:3e:60:82:2a:db:eb:45:c4:ad:3d:63:17:41:
db:ea:87:52:d9:e8:7a:65:7b:00:f8:7d:25:8a:d5:
6b:22:9e:d8:6c:62:26:a0:3a:c3:4c:88:ff:54:65:
38:95:83:78:55:4d:12:73:2d:c3:a5:f1:16:ad:2f:
38:4e:8f:3b:51:f3:8b:75:eb:6d:d4:0c:b5:d8:b5:
c3:96:45:81:81:23:08:9c:3e:b3:67:d8:5c:38:ac:
9c:15:35:09:d3:66:fb:eb:8b:ac:0a:8f:d7:15:4c:
c7:c8:8a:d5:d8:1d:ef:5b:82:31:a5:b3:df:e7:81:
c3:62:5a:60:06:7b:c6:af:5d:c5:0c:86:18:64:1f:
7f:da:46:bf:e1:bb:9e:04:9f:a2:15:72:29:4a:56:
64:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A8:F7:D2:6E:F3:7C:B7:56:87:83:E8:BD:E2:68:48:31:C7:63:A6
X509v3 Authority Key Identifier:
keyid:52:C6:DD:17:19:E2:84:FF:5C:70:7F:81:22:E8:ED:0D:87:95:AF:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:70:76:16:b4:a2:8e:39:25:68:01:63:16:11:1d:4f:5e:63:
4c:9c:91:58:95:b0:17:f1:34:0b:aa:6c:8d:5d:cd:de:31:ab:
0d:a6:43:38:8e:e0:ad:5a:46:61:3b:56:6e:f5:11:b1:32:63:
01:15:46:10:a1:91:72:a2:de:0c:e5:3d:03:9a:2f:4a:ed:01:
8e:37:6d:26:ec:41:4a:8f:27:ab:25:77:33:0e:3f:55:7b:4e:
66:a0:ef:75:18:a2:df:91:32:80:38:03:3f:80:7c:1a:64:e2:
29:05:8e:95:e4:1a:b8:db:38:05:05:d9:15:98:c7:88:c6:ae:
bc:58:32:8f:c3:ef:ed:da:b2:bc:0d:f4:ae:16:21:f2:62:94:
c2:3b:8f:b9:3f:b2:71:0d:5e:94:19:7b:d5:f0:b9:36:08:dd:
81:83:2e:01:59:3a:53:c8:ce:0d:17:a0:de:60:a9:a3:07:3f:
47:d9:70:34:76:b8:97:72:f5:af:a1:69:08:8e:c9:62:fe:7b:
7c:4a:fb:6d:a7:14:b7:07:2e:14:ad:82:39:e5:8f:f1:01:7a:
1e:88:36:da:b4:76:ae:c8:3b:82:f7:fa:54:8c:5f:07:f2:3a:
09:f5:8f:4a:86:2b:51:76:b6:45:12:4e:cb:2f:5d:9f:68:4a:
f8:0a:2e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:32:41 2026 by rpki-client