Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
File: Us7uLW16UMkkmdoaIfKrt6KndMg.mft (raw, json)
Hash identifier: gcrRGcVOUYJdtp6GuvfgwuRaE8OfBA/ea6o4sP4Eu8A=
Subject key identifier: B6:7E:73:4A:A9:40:5B:33:0A:E5:04:30:63:2B:42:2A:20:A7:37:86
Authority key identifier: 52:CE:EE:2D:6D:7A:50:C9:24:99:DA:1A:21:F2:AB:B7:A2:A7:74:C8
Certificate issuer: /CN=52ceee2d6d7a50c92499da1a21f2abb7a2a774c8
Certificate serial: 01A18563AF59190A943185A519D10629684F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
Manifest number: 0F67
Signing time: Thu 29 Oct 2026 02:01:05 +0000
Manifest this update: Thu 29 Oct 2026 02:01:05 +0000
Manifest next update: Fri 30 Oct 2026 02:01:05 +0000
Files and hashes: 1: 00K95uzAVC-As-Iyho8vnUOQDZ8.roa (hash: kfLM/YtWZzFLfCP3ajHs0k6ce1lVF3pDxYNFKvjlQcg=)
2: Us7uLW16UMkkmdoaIfKrt6KndMg.crl (hash: Dmhm9cN/6XxQKPPYfwKPVHKKpBhDJlV8FTg33ecj8Lc=)
3: ei8OTREn63voSBE5nxK-2OquN1c.roa (hash: rtdm6RL7c+SJK/SooK4jKjSilqnAkSqbJlBiuodfm0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 02:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:85:63:af:59:19:0a:94:31:85:a5:19:d1:06:29:68:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52ceee2d6d7a50c92499da1a21f2abb7a2a774c8
Validity
Not Before: Oct 29 02:01:05 2026 GMT
Not After : Oct 30 02:01:05 2026 GMT
Subject: CN=b67e734aa9405b330ae50430632b422a20a73786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:32:c0:bb:fc:3a:e5:20:2f:84:dc:ee:f2:79:
49:81:4f:51:1c:ac:e4:d0:51:e6:c3:42:6a:1e:d4:
c3:91:c5:47:1e:46:97:09:e6:f6:a2:da:f0:9a:24:
69:18:b3:dc:f0:c8:79:e2:c3:41:0a:d1:ca:66:11:
c6:ba:d9:ac:84:02:33:e8:23:8b:2f:01:f1:04:b9:
1f:75:52:7b:0f:e5:68:13:6e:cf:ec:e0:a3:57:ca:
7c:06:ab:c6:05:96:65:9e:fa:47:89:95:3f:28:64:
f5:6a:91:e6:8e:0f:2b:ac:ba:c9:73:03:c4:e2:0f:
2f:e0:74:9d:8c:12:b3:4d:de:b8:94:1a:8d:12:48:
2e:b5:e7:ad:cc:f6:64:8e:a0:75:37:ea:c5:27:7c:
9e:f7:e1:1b:b4:1e:b4:df:0f:26:fe:b8:1c:1f:ab:
7e:6c:c0:04:a2:eb:3b:ad:57:1a:d9:cd:95:a4:4d:
74:4c:bc:bf:da:3c:48:53:8f:d1:b5:00:4c:ee:b6:
a7:5b:49:89:56:38:c9:3e:a8:55:4b:19:5e:5e:40:
f2:37:60:6d:e7:6c:d3:24:87:68:b1:8c:7e:9c:75:
e5:c0:76:66:ef:fd:07:75:a9:f9:f5:bd:72:66:75:
8b:39:a9:9b:d4:34:57:17:f7:85:85:2b:7e:cf:a1:
af:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:7E:73:4A:A9:40:5B:33:0A:E5:04:30:63:2B:42:2A:20:A7:37:86
X509v3 Authority Key Identifier:
keyid:52:CE:EE:2D:6D:7A:50:C9:24:99:DA:1A:21:F2:AB:B7:A2:A7:74:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:1f:af:00:66:91:92:e3:62:86:3f:86:c6:49:4d:d2:11:1d:
4c:e6:14:f4:d9:f4:b6:e5:73:83:19:d7:f6:f1:23:a3:9b:a2:
ad:bc:5b:73:cb:b8:73:8a:43:69:33:ee:93:11:a6:c1:c3:e5:
ba:9c:42:25:d3:68:f4:ff:f8:78:41:17:a1:9f:cc:7f:3d:37:
d8:0b:c5:37:5b:80:7e:20:2b:22:df:fe:4b:d4:f5:e8:a0:0f:
5a:b8:f1:23:77:63:64:a5:0c:35:0b:33:f5:66:77:20:c3:da:
86:ef:ad:90:bf:e2:20:2f:52:3f:e6:40:c7:2f:16:0b:93:1c:
ca:89:43:bf:ec:36:d9:99:08:59:14:6a:7a:84:57:fd:bd:f2:
7e:04:5e:d5:80:0b:72:b9:8f:be:3a:ed:b8:92:e3:2e:9e:3f:
a7:23:3a:a6:cc:1a:bf:c7:4c:be:cc:eb:52:12:77:f5:75:09:
61:af:16:90:6a:ce:66:4b:4f:dc:6b:3c:97:eb:5f:2f:14:8d:
e7:fa:7c:4d:71:b2:99:5e:39:e8:29:ec:ed:4a:13:e8:6d:ef:
f1:a0:cf:3a:58:d7:57:72:66:be:54:fd:bf:76:53:69:d0:0f:
c7:46:db:0d:3a:54:9f:50:e1:14:c0:12:82:07:2a:0c:d6:ba:
5f:80:6e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 11:30:58 2026 by rpki-client