Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
File: Us7uLW16UMkkmdoaIfKrt6KndMg.mft (raw, json)
Hash identifier: lStfAtdzLUTZwb+iARJp+Py7Uc8C/VqXukDr9BPe0BI=
Subject key identifier: 7B:52:22:B1:10:09:1C:3A:37:BB:D7:62:27:D0:CB:C1:31:1B:FF:02
Authority key identifier: 52:CE:EE:2D:6D:7A:50:C9:24:99:DA:1A:21:F2:AB:B7:A2:A7:74:C8
Certificate issuer: /CN=52ceee2d6d7a50c92499da1a21f2abb7a2a774c8
Certificate serial: 019DD6F7B2D9B45E19E6F2472F3485B793F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
Manifest number: 0D7F
Signing time: Wed 29 Apr 2026 02:00:50 +0000
Manifest this update: Wed 29 Apr 2026 02:00:50 +0000
Manifest next update: Thu 30 Apr 2026 02:00:50 +0000
Files and hashes: 1: 00K95uzAVC-As-Iyho8vnUOQDZ8.roa (hash: kfLM/YtWZzFLfCP3ajHs0k6ce1lVF3pDxYNFKvjlQcg=)
2: Us7uLW16UMkkmdoaIfKrt6KndMg.crl (hash: BmOcTmKeDshXA/ZxEJIqlk6zroAfd+V4UxEDKG3W8/w=)
3: ei8OTREn63voSBE5nxK-2OquN1c.roa (hash: rtdm6RL7c+SJK/SooK4jKjSilqnAkSqbJlBiuodfm0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d6:f7:b2:d9:b4:5e:19:e6:f2:47:2f:34:85:b7:93:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52ceee2d6d7a50c92499da1a21f2abb7a2a774c8
Validity
Not Before: Apr 29 02:00:50 2026 GMT
Not After : Apr 30 02:00:50 2026 GMT
Subject: CN=7b5222b110091c3a37bbd76227d0cbc1311bff02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:09:a1:86:b5:51:38:11:20:b3:53:28:4f:8e:
87:f1:0f:77:10:f5:91:6b:bc:82:97:5e:41:15:02:
6d:13:8d:52:a0:cc:74:ea:db:e8:d7:a6:50:97:23:
bf:d5:84:85:5e:a9:6e:c3:e7:ec:6a:17:53:24:85:
7a:25:83:f5:8b:fc:26:66:12:71:2b:9e:32:ac:26:
5d:ad:5e:15:f0:8d:57:dd:d8:84:ca:8c:3f:83:56:
26:77:7d:79:e5:61:f7:67:de:46:3f:c4:d1:89:f1:
38:f2:2e:16:04:e0:20:eb:61:72:08:b8:7e:2d:22:
1c:80:6a:a7:e0:66:3e:78:9c:a7:e6:ca:72:11:71:
db:66:34:dd:c2:9b:e1:fa:f2:05:0c:46:19:bd:c0:
35:1e:f0:d4:5b:ec:a1:32:bb:16:bb:ab:5e:01:5c:
a9:94:e9:c6:87:3c:34:d7:6a:71:03:b1:61:b4:f9:
2f:c6:de:ac:b4:f2:12:3b:71:ff:3d:54:63:91:18:
50:4d:19:5f:3f:46:09:4a:5e:5d:95:77:96:0a:a0:
de:29:6e:35:2d:5b:8b:90:ec:f7:77:8b:7f:23:f7:
47:35:d7:41:b1:b1:dc:30:13:f4:93:6b:25:40:e6:
16:39:38:b0:1f:50:97:12:0c:ac:34:23:8c:da:33:
77:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:52:22:B1:10:09:1C:3A:37:BB:D7:62:27:D0:CB:C1:31:1B:FF:02
X509v3 Authority Key Identifier:
keyid:52:CE:EE:2D:6D:7A:50:C9:24:99:DA:1A:21:F2:AB:B7:A2:A7:74:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:7c:ed:a1:7b:ff:b2:ce:52:97:8c:02:b3:c3:ec:bc:87:85:
ef:8a:fe:8c:e2:ef:53:7d:45:8c:b4:83:72:4d:d3:0a:9b:8d:
c4:da:29:37:b0:33:a9:24:75:ed:40:ef:49:a4:85:23:54:c7:
e7:2a:ea:c1:5f:62:3e:f9:3e:62:13:72:c0:52:28:7d:87:8a:
9a:19:79:d4:ad:b1:75:82:67:7c:39:63:56:57:37:3b:10:1f:
19:85:99:f1:75:fb:e2:0a:5e:69:e4:61:5e:c5:46:ec:4f:49:
6b:67:1a:e5:72:bd:ec:7a:64:4c:01:9a:c2:47:39:99:44:f7:
67:a6:a6:d1:80:a6:08:94:7d:33:ef:42:b3:fd:75:fb:32:5d:
9a:c4:33:5e:d4:1a:bf:59:2b:ec:a3:50:52:d3:86:06:eb:9f:
fe:f8:78:56:06:98:35:5c:2f:bb:0a:a7:9c:1a:36:4a:34:a5:
ea:c8:60:75:4c:d0:cc:c6:01:fd:32:53:cf:ac:c0:8d:8d:db:
74:c4:ed:4d:46:13:7c:75:ed:33:18:a3:1f:ce:7c:db:43:4c:
45:b6:c7:b8:c0:da:33:a9:48:ad:1b:04:c8:22:6c:d5:47:1e:
d4:89:ad:7a:88:dd:06:bf:4b:dc:85:1e:78:1b:6f:7c:85:61:
23:09:eb:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 04:08:23 2026 by rpki-client