Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
File: Us7uLW16UMkkmdoaIfKrt6KndMg.mft (raw, json)
Hash identifier: MpC7gxixHj9/cuJddzILq1QnAFvySkdAoHKGHTdY3Pw=
Subject key identifier: 27:D8:4C:A5:A4:FC:F7:95:F9:4D:5A:D0:11:81:86:70:51:2E:5A:5B
Authority key identifier: 52:CE:EE:2D:6D:7A:50:C9:24:99:DA:1A:21:F2:AB:B7:A2:A7:74:C8
Certificate issuer: /CN=52ceee2d6d7a50c92499da1a21f2abb7a2a774c8
Certificate serial: 019FAE2D61344D3AFBED4E5940126FB0791B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
Manifest number: 0E73
Signing time: Wed 29 Jul 2026 14:00:37 +0000
Manifest this update: Wed 29 Jul 2026 14:00:37 +0000
Manifest next update: Thu 30 Jul 2026 14:00:37 +0000
Files and hashes: 1: 00K95uzAVC-As-Iyho8vnUOQDZ8.roa (hash: kfLM/YtWZzFLfCP3ajHs0k6ce1lVF3pDxYNFKvjlQcg=)
2: Us7uLW16UMkkmdoaIfKrt6KndMg.crl (hash: wQbalzeIJdTbIso617AADd5b66tcPJZWsX39Gui3NfQ=)
3: ei8OTREn63voSBE5nxK-2OquN1c.roa (hash: rtdm6RL7c+SJK/SooK4jKjSilqnAkSqbJlBiuodfm0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:2d:61:34:4d:3a:fb:ed:4e:59:40:12:6f:b0:79:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52ceee2d6d7a50c92499da1a21f2abb7a2a774c8
Validity
Not Before: Jul 29 14:00:37 2026 GMT
Not After : Jul 30 14:00:37 2026 GMT
Subject: CN=27d84ca5a4fcf795f94d5ad011818670512e5a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0c:30:90:14:c5:92:ac:00:73:e8:c0:26:5a:
c1:7b:d3:d1:e8:5b:c1:37:eb:95:0c:d4:d7:47:9c:
2e:91:0c:d9:e0:92:ee:3f:40:8f:d9:36:55:13:68:
46:90:54:ef:26:55:02:1f:a1:72:43:d5:a2:ec:28:
cb:cd:af:b0:07:26:4b:39:9c:48:84:71:b5:10:a2:
6a:0f:6a:68:d3:af:e1:e2:51:89:cd:b7:fa:39:20:
49:1e:cc:f9:34:b7:14:37:c9:17:a1:5d:eb:e1:4e:
f0:16:a8:97:06:88:e5:2e:4a:30:cc:c0:65:ba:b4:
1e:0d:5f:40:e3:5b:c5:15:4f:f0:e1:2d:3b:58:6d:
d2:90:f1:bc:32:05:4c:6b:2b:0b:ad:e9:bf:5b:b9:
4f:2d:cc:c4:35:35:65:1e:ad:a4:fe:30:12:54:6f:
65:03:d8:b8:f7:93:b5:74:23:0d:05:72:2b:64:78:
ea:74:71:a9:71:27:cf:db:81:a8:13:ad:bd:59:36:
41:82:fe:5b:49:f4:c7:63:64:c6:33:e6:19:05:cc:
d9:a4:f0:c6:e5:44:0a:17:a0:0e:3c:19:39:b8:fe:
d0:56:75:00:4b:85:c7:43:16:5b:27:01:d1:3c:a2:
af:6e:fa:7e:1b:39:98:9c:96:8b:b9:6c:a9:cc:3e:
5f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D8:4C:A5:A4:FC:F7:95:F9:4D:5A:D0:11:81:86:70:51:2E:5A:5B
X509v3 Authority Key Identifier:
keyid:52:CE:EE:2D:6D:7A:50:C9:24:99:DA:1A:21:F2:AB:B7:A2:A7:74:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:47:43:6f:36:df:16:fe:4d:4f:6d:22:83:c9:63:04:ac:b6:
99:97:e9:33:e7:86:2b:a8:3b:f9:fb:ce:d9:31:08:70:dc:a1:
43:6c:fc:a8:51:66:1a:51:e9:09:31:91:2b:27:e0:4c:56:a1:
9f:81:2e:53:4d:28:ce:7b:6d:b3:68:0d:f1:ca:16:fd:71:c6:
1a:b7:7a:37:bf:30:b8:1d:34:6a:bb:24:35:7a:b0:1a:e4:73:
24:29:36:7c:52:80:d4:b6:43:73:2c:72:31:48:1c:7b:f4:90:
36:10:60:a1:69:84:d3:03:b4:2e:fd:7a:ef:bf:79:25:e6:91:
01:0f:d8:34:bd:f6:78:20:1f:3a:36:fb:b1:d0:05:cf:62:4f:
77:83:5c:f5:5e:f3:2c:44:2d:28:44:51:e6:08:53:a4:fc:b2:
bb:56:63:8f:50:e6:24:a5:09:f9:d3:6c:6e:99:92:b4:63:99:
2b:0f:21:86:fe:a0:5a:6c:36:ae:dd:d4:6a:59:25:59:e6:84:
20:3d:46:09:c7:12:62:7d:2a:5d:0d:7c:78:47:42:11:45:cd:
71:c2:35:a4:b5:15:a0:9d:b4:fe:e0:aa:60:0b:16:c5:96:45:
3c:c4:aa:71:4b:58:6f:12:de:d0:f1:41:3b:74:f6:8f:ab:62:
2d:aa:80:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 19:55:17 2026 by rpki-client