Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
File: Us7uLW16UMkkmdoaIfKrt6KndMg.mft (raw, json)
Hash identifier: Ht/D/vW5asqEhhj4fLQj71OTy+OSzwfuqi8GR8Wp0B8=
Subject key identifier: DD:0A:08:1D:37:14:DD:D8:A6:5B:9B:75:F9:04:2B:F8:CB:50:F1:F2
Authority key identifier: 52:CE:EE:2D:6D:7A:50:C9:24:99:DA:1A:21:F2:AB:B7:A2:A7:74:C8
Certificate issuer: /CN=52ceee2d6d7a50c92499da1a21f2abb7a2a774c8
Certificate serial: 01A099C851FA489C0A7E15CD20DDCE6D3933
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
Manifest number: 0EED
Signing time: Sun 13 Sep 2026 08:00:37 +0000
Manifest this update: Sun 13 Sep 2026 08:00:37 +0000
Manifest next update: Mon 14 Sep 2026 08:00:37 +0000
Files and hashes: 1: 00K95uzAVC-As-Iyho8vnUOQDZ8.roa (hash: kfLM/YtWZzFLfCP3ajHs0k6ce1lVF3pDxYNFKvjlQcg=)
2: Us7uLW16UMkkmdoaIfKrt6KndMg.crl (hash: DO7b3k1JO9QRb/64JKe4tjeHhmTxU42Z6kJggyAJ1rM=)
3: ei8OTREn63voSBE5nxK-2OquN1c.roa (hash: rtdm6RL7c+SJK/SooK4jKjSilqnAkSqbJlBiuodfm0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 03:19:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:99:c8:51:fa:48:9c:0a:7e:15:cd:20:dd:ce:6d:39:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52ceee2d6d7a50c92499da1a21f2abb7a2a774c8
Validity
Not Before: Sep 13 08:00:37 2026 GMT
Not After : Sep 14 08:00:37 2026 GMT
Subject: CN=dd0a081d3714ddd8a65b9b75f9042bf8cb50f1f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:fc:1e:6b:3c:69:d1:c8:1d:f5:2b:95:d7:27:
48:0d:de:d9:42:ae:37:a1:ce:65:45:4d:af:03:25:
75:97:f6:23:2f:f5:11:de:e6:84:0b:88:66:8c:41:
35:e4:77:2f:43:bc:a1:75:17:4e:85:72:64:fb:f5:
26:c8:5c:c1:3b:11:8b:ca:b9:93:a2:36:68:9b:5e:
25:f9:de:d7:40:d8:06:a5:4a:0e:88:83:16:9d:ba:
2c:33:15:d5:dc:90:4e:bb:05:d8:88:68:bc:31:b4:
39:64:ac:12:54:a4:1b:88:c9:3b:ac:8e:c3:d8:ba:
b6:91:56:6c:d2:25:23:f5:2b:d5:28:5d:4e:dd:7a:
14:dd:e2:0f:5d:18:8d:76:46:4a:db:00:ea:8b:53:
4f:21:a7:e7:fe:a6:ab:87:1e:f4:82:32:10:94:19:
1f:25:74:24:cc:09:78:b6:a1:e2:2f:6d:a3:91:47:
e4:69:48:49:43:92:a4:a2:ee:df:d2:36:22:df:75:
60:3b:a1:9b:1b:86:a5:f3:29:be:cb:1d:a3:33:21:
c7:47:d1:29:a3:5e:4e:3d:81:47:70:0c:5c:a3:53:
0b:c6:bc:44:7f:69:b2:30:41:cb:4d:40:1b:6e:3d:
ce:3c:a3:9b:80:2f:72:0c:a8:57:e7:10:35:52:66:
94:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:0A:08:1D:37:14:DD:D8:A6:5B:9B:75:F9:04:2B:F8:CB:50:F1:F2
X509v3 Authority Key Identifier:
keyid:52:CE:EE:2D:6D:7A:50:C9:24:99:DA:1A:21:F2:AB:B7:A2:A7:74:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:73:9c:53:cf:c1:64:00:98:4f:53:46:41:1c:3b:55:8d:79:
49:98:ab:6b:0e:4d:4a:32:ba:a2:b5:d3:c8:d4:48:5d:8c:35:
2f:d7:d8:94:3b:6b:90:0f:67:86:3c:54:ce:dc:c0:32:0a:f1:
cb:bf:8b:86:a4:f5:27:93:4c:3c:4e:f1:96:11:f0:cc:b1:92:
3c:e9:c6:18:bd:11:c0:18:61:ca:9d:a5:79:06:1c:e5:7a:19:
f2:12:ef:6b:a5:99:18:2e:a7:f1:b2:05:5a:37:03:1c:db:17:
dc:9f:f8:ae:56:f3:3f:01:68:e1:b6:99:e7:07:f3:05:ac:d2:
b8:7b:12:08:8e:13:cb:26:5b:db:53:d6:4b:54:68:ef:d0:98:
30:ba:14:ec:66:ac:46:b5:b6:af:6e:ed:ba:da:c8:fb:82:48:
14:1e:87:c9:71:f4:13:62:4e:cc:d1:30:52:1a:5d:6f:d7:90:
40:e5:bc:f9:9d:d3:05:d8:77:24:30:1d:d7:05:9d:81:04:7c:
a0:f9:82:ce:55:d3:f7:28:03:90:6f:27:03:50:38:b2:fa:23:
10:79:03:24:25:7c:0f:8e:c4:7e:40:31:54:45:8a:9d:30:5f:
8d:f4:45:d1:95:11:29:87:3d:0e:c9:90:92:09:66:5f:bc:5e:
bd:3b:41:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 12:33:46 2026 by rpki-client