Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
File: UsbdFxnihP9ccH-BIujtDYeVrz0.mft (raw, json)
Hash identifier: zkXSvo4C9AzcZl2L7GJz68BZ6MHAXO646tBi92ocscs=
Subject key identifier: C3:31:40:49:DE:0C:00:AA:7D:4E:58:14:C5:B7:FE:63:8B:1B:FA:60
Authority key identifier: 52:C6:DD:17:19:E2:84:FF:5C:70:7F:81:22:E8:ED:0D:87:95:AF:3D
Certificate issuer: /CN=52c6dd1719e284ff5c707f8122e8ed0d8795af3d
Certificate serial: 019D9A74A035D4BDAFD8B52211204F0ED603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
Manifest number: 1029
Signing time: Fri 17 Apr 2026 08:00:27 +0000
Manifest this update: Fri 17 Apr 2026 08:00:27 +0000
Manifest next update: Sat 18 Apr 2026 08:00:27 +0000
Files and hashes: 1: 8xjA0vijBm1diaizodp3mG75LDI.roa (hash: 4AjzFUfgs+M+NN2IgWhMj7sovV6HcoEwZY/R0BtNoC0=)
2: 9zqsNEeSAsd4KPkjQphjUUcz4Fk.roa (hash: bkExPcU8J676GVwwzpIBRh1+JT4P+zvjVqg3r38ok4Q=)
3: UsbdFxnihP9ccH-BIujtDYeVrz0.crl (hash: Tu2Xr4u6b3dnNdq3jGMzLbJJczevZvJkUMshn7iV9LE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:a0:35:d4:bd:af:d8:b5:22:11:20:4f:0e:d6:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52c6dd1719e284ff5c707f8122e8ed0d8795af3d
Validity
Not Before: Apr 17 08:00:27 2026 GMT
Not After : Apr 18 08:00:27 2026 GMT
Subject: CN=c3314049de0c00aa7d4e5814c5b7fe638b1bfa60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:64:98:6d:86:88:69:ab:8b:5c:f4:1c:75:0e:
fc:c6:32:b7:29:30:88:81:b3:e3:1f:21:27:5f:46:
57:9c:f9:52:5b:38:f9:ee:a3:a7:87:3d:c3:be:18:
5f:f7:bf:f2:af:be:85:26:b0:c8:78:ef:54:55:68:
0c:a5:a8:92:4b:f0:a2:3b:77:2b:c1:cf:71:ab:20:
64:d7:9a:d2:7e:30:45:ee:04:20:79:14:cd:9e:90:
24:d6:d5:55:fc:c5:f1:f9:a9:8f:83:81:99:73:2e:
37:0d:00:be:10:f4:23:13:af:cb:34:c7:43:e7:cb:
53:85:23:a6:5f:ca:8d:17:13:1c:74:b2:b9:ed:10:
2f:68:27:7b:00:6a:16:e8:0a:6f:f9:fc:f4:65:2f:
04:b7:1b:1d:90:aa:e5:09:c9:85:63:be:29:e0:c3:
ea:3a:8d:81:63:1f:46:18:9e:ff:24:d4:08:92:98:
85:07:98:4f:8c:f8:25:03:fe:18:66:d9:08:74:2c:
e7:e5:af:ee:79:67:58:9a:fc:0f:87:2b:af:55:0d:
b4:90:62:50:4a:52:ec:80:85:3e:e4:20:a0:e9:ba:
3c:1d:48:3e:02:fe:9d:4a:fc:c0:86:3f:db:71:d5:
c3:b5:82:38:43:39:6a:46:f1:d4:c3:05:aa:b9:9c:
48:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:31:40:49:DE:0C:00:AA:7D:4E:58:14:C5:B7:FE:63:8B:1B:FA:60
X509v3 Authority Key Identifier:
keyid:52:C6:DD:17:19:E2:84:FF:5C:70:7F:81:22:E8:ED:0D:87:95:AF:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ab:90:e8:18:ca:d3:50:19:cd:42:b9:9d:b6:f7:72:36:9f:
3c:17:31:1f:0e:01:71:bd:49:24:0d:76:28:cb:12:28:6c:2f:
87:d3:e2:75:40:a0:03:e8:ce:02:83:27:a3:f4:54:79:1f:26:
7e:66:09:70:e4:58:0f:e5:3e:a4:e4:d8:0b:fb:98:2b:1d:40:
fd:f5:f5:5f:63:bf:ee:27:0e:7d:9b:5c:03:c8:9b:fa:d5:4d:
f1:bc:6c:bf:29:02:d0:f3:09:82:29:35:1f:7e:5a:cf:68:29:
da:5e:d5:17:e4:92:a6:b3:82:1c:ee:b0:40:8d:18:b9:45:a5:
76:63:c2:1e:ee:1e:f0:b7:c8:b7:d1:23:5a:28:d5:83:91:83:
c3:bb:fa:fb:37:5b:3a:74:0b:ce:7b:69:92:4e:39:83:80:17:
64:94:cb:9f:e3:af:ce:57:58:08:89:83:92:53:91:1c:43:50:
ac:b6:a6:32:3f:8b:8c:cd:de:50:3c:09:df:8f:0c:13:83:0a:
1a:ef:f0:ac:d7:71:13:81:0f:72:59:9d:f4:bc:4e:57:16:f3:
3e:88:66:74:26:f9:64:6b:77:cb:22:40:e8:57:fe:56:af:92:
8b:3a:1e:98:58:5e:02:06:64:b0:c0:60:0b:ee:bb:1a:3a:03:
80:c5:03:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2adKA11L2v2LUiESBPDtYDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyYzZkZDE3MTllMjg0ZmY1YzcwN2Y4MTIyZThlZDBkODc5
NWFmM2QwHhcNMjYwNDE3MDgwMDI3WhcNMjYwNDE4MDgwMDI3WjAzMTEwLwYDVQQD
EyhjMzMxNDA0OWRlMGMwMGFhN2Q0ZTU4MTRjNWI3ZmU2MzhiMWJmYTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWSYbYaIaauLXPQcdQ78xjK3KTCI
gbPjHyEnX0ZXnPlSWzj57qOnhz3Dvhhf97/yr76FJrDIeO9UVWgMpaiSS/CiO3cr
wc9xqyBk15rSfjBF7gQgeRTNnpAk1tVV/MXx+amPg4GZcy43DQC+EPQjE6/LNMdD
58tThSOmX8qNFxMcdLK57RAvaCd7AGoW6Apv+fz0ZS8EtxsdkKrlCcmFY74p4MPq
Oo2BYx9GGJ7/JNQIkpiFB5hPjPglA/4YZtkIdCzn5a/ueWdYmvwPhyuvVQ20kGJQ
SlLsgIU+5CCg6bo8HUg+Av6dSvzAhj/bcdXDtYI4QzlqRvHUwwWquZxIGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMMxQEneDACqfU5YFMW3/mOLG/pgMB8GA1UdIwQY
MBaAFFLG3RcZ4oT/XHB/gSLo7Q2Hla89MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXNiZEZ4bmloUDljY0gtQkl1anREWWVWcnowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8xMGIyOGUtZjkyOC00YTMwLTk0ZjMt
NjlkNDA2ZTE4NjUzLzEvVXNiZEZ4bmloUDljY0gtQkl1anREWWVWcnowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8xMGIyOGUtZjkyOC00YTMwLTk0ZjMtNjlkNDA2ZTE4NjUz
LzEvVXNiZEZ4bmloUDljY0gtQkl1anREWWVWcnowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaKuQ6BjK
01AZzUK5nbb3cjafPBcxHw4Bcb1JJA12KMsSKGwvh9PidUCgA+jOAoMno/RUeR8m
fmYJcORYD+U+pOTYC/uYKx1A/fX1X2O/7icOfZtcA8ib+tVN8bxsvykC0PMJgik1
H35az2gp2l7VF+SSprOCHO6wQI0YuUWldmPCHu4e8LfIt9EjWijVg5GDw7v6+zdb
OnQLzntpkk45g4AXZJTLn+OvzldYCImDklORHENQrLamMj+LjM3eUDwJ348ME4MK
Gu/wrNdxE4EPclmd9LxOVxbzPohmdCb5ZGt3yyJA6Ff+Vq+SizoemFheAgZksMBg
C+67GjoDgMUDIg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:42:56 2026 by rpki-client