Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/3ba160-e945-4d56-b129-52c19758fa15/1/USd7w4wS4ELt31bX519QVjxL0ic.mft
File: USd7w4wS4ELt31bX519QVjxL0ic.mft (raw, json)
Hash identifier: xPbexPJwajfQgQb+unW935HfUddyOjg8TNqSaNJKXjo=
Subject key identifier: A8:F6:DA:EA:E1:45:FE:BB:FF:F4:CF:15:38:03:D2:23:EE:17:E8:9A
Authority key identifier: 51:27:7B:C3:8C:12:E0:42:ED:DF:56:D7:E7:5F:50:56:3C:4B:D2:27
Certificate issuer: /CN=51277bc38c12e042eddf56d7e75f50563c4bd227
Certificate serial: 01A1310FD9D9D92710814A449B3AC52363D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/USd7w4wS4ELt31bX519QVjxL0ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/3ba160-e945-4d56-b129-52c19758fa15/1/USd7w4wS4ELt31bX519QVjxL0ic.mft
Manifest number: 1A9B
Signing time: Mon 12 Oct 2026 17:01:24 +0000
Manifest this update: Mon 12 Oct 2026 17:01:24 +0000
Manifest next update: Tue 13 Oct 2026 17:01:24 +0000
Files and hashes: 1: D4QRrUObCGq3FWyTZQYsdDxIC-Y.asa (hash: f66FrX9VHylFdBsRAbYxdFz6/ASysid9BFIKkasqYLk=)
2: HVAKOChJvzlPOcqJ_ehcMgXUK9o.roa (hash: 2mWGKvxbtg/GycElX7B4p0Awmc5Qwctw5xexjAFCbUI=)
3: USd7w4wS4ELt31bX519QVjxL0ic.crl (hash: GOTdTvf445PdCDv1QmRummtbkONDo2W50UULcWdoHxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/3ba160-e945-4d56-b129-52c19758fa15/1/USd7w4wS4ELt31bX519QVjxL0ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/3ba160-e945-4d56-b129-52c19758fa15/1/USd7w4wS4ELt31bX519QVjxL0ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/USd7w4wS4ELt31bX519QVjxL0ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:0f:d9:d9:d9:27:10:81:4a:44:9b:3a:c5:23:63:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51277bc38c12e042eddf56d7e75f50563c4bd227
Validity
Not Before: Oct 12 17:01:24 2026 GMT
Not After : Oct 13 17:01:24 2026 GMT
Subject: CN=a8f6daeae145febbfff4cf153803d223ee17e89a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:79:20:40:97:5e:4d:d6:13:e3:16:02:e0:38:
5e:47:39:a8:77:e4:27:6e:42:33:97:01:93:97:2a:
cd:22:0b:28:62:2f:2c:ed:97:7c:f5:1d:56:e4:c2:
22:ca:f1:15:9d:47:51:17:1b:de:75:ca:4a:1f:63:
e6:df:40:2f:f0:92:09:b3:00:eb:87:b7:66:ed:24:
5d:44:71:bc:df:cc:d4:ca:2a:08:92:1c:ba:9e:d7:
a6:03:75:c5:d8:0b:62:e0:03:fb:5e:8b:93:23:92:
82:1b:ad:6e:9e:b7:b9:06:fc:4a:6b:c1:52:67:33:
a0:6b:69:ae:5b:41:3e:a6:87:d4:ca:5b:bb:f6:71:
c1:bd:b5:95:68:46:e1:8f:39:4a:92:de:34:10:76:
3a:7f:c7:76:6a:ba:a5:68:2e:65:68:91:c4:99:f4:
a5:1d:d0:64:93:dd:28:05:97:3c:4d:64:ff:61:a6:
72:2f:74:f0:07:75:c7:f9:68:46:6d:be:c6:5a:d7:
51:18:49:25:ec:b7:70:28:e3:e2:ee:d0:8b:65:72:
86:83:88:69:86:8e:67:a6:4b:43:f7:ca:0e:69:d8:
69:56:d7:fe:21:bf:5c:d3:d3:65:5c:ac:1a:dc:0f:
13:14:2a:76:0a:89:8b:11:db:b3:4e:11:17:9a:b7:
20:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F6:DA:EA:E1:45:FE:BB:FF:F4:CF:15:38:03:D2:23:EE:17:E8:9A
X509v3 Authority Key Identifier:
keyid:51:27:7B:C3:8C:12:E0:42:ED:DF:56:D7:E7:5F:50:56:3C:4B:D2:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/USd7w4wS4ELt31bX519QVjxL0ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3ba160-e945-4d56-b129-52c19758fa15/1/USd7w4wS4ELt31bX519QVjxL0ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3ba160-e945-4d56-b129-52c19758fa15/1/USd7w4wS4ELt31bX519QVjxL0ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:8a:4f:86:87:fe:fb:08:8b:a7:ab:c5:ba:f3:6a:b9:16:e9:
c2:13:ae:7d:03:63:9c:5d:ab:d2:26:57:72:82:96:a1:36:cd:
a6:26:57:17:aa:00:4e:f2:52:d7:fa:0e:cc:d0:ba:ec:d5:67:
19:2d:14:32:e0:f4:48:1a:60:c0:b0:64:9d:21:d8:82:fb:2f:
bc:b7:a6:08:59:b7:c7:ee:77:7f:59:02:5f:78:e2:d4:02:44:
cb:8c:30:0e:98:57:28:ba:ea:cc:17:93:38:f1:14:c1:a7:f8:
81:05:5f:a2:54:0b:e0:15:19:ce:55:94:fc:6a:a3:16:3c:96:
c0:8e:44:7c:8a:56:3f:aa:9b:55:e8:57:96:8e:46:13:29:f8:
5a:b9:c4:be:1e:e3:61:e6:b2:7f:11:ee:9e:b3:bd:f4:ab:6e:
ff:18:56:12:db:48:fa:bf:bf:59:50:8f:25:94:13:eb:37:62:
a4:71:b8:9e:c6:8c:fe:6c:b6:c1:c8:42:b8:b8:e2:68:2d:4e:
2d:f4:d3:c3:af:c9:ff:7e:5f:22:19:25:85:bb:1e:2a:ea:79:
ed:e5:c0:cf:06:e6:47:d0:29:7e:74:66:7a:ef:77:6a:49:46:
a3:a8:14:a8:d4:43:9f:3e:49:48:f3:c7:6c:4c:a7:7a:af:29:
44:ac:a5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 22:29:56 2026 by rpki-client