Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
File: Us7uLW16UMkkmdoaIfKrt6KndMg.mft (raw, json)
Hash identifier: Zz7bBXIsvgQ5KcyqmF771ugsWdGQ7RyZYRRDMCF5Lxk=
Subject key identifier: 02:AB:68:60:BE:BA:DD:77:CE:2C:37:9A:6D:6D:37:4D:28:74:AE:B7
Authority key identifier: 52:CE:EE:2D:6D:7A:50:C9:24:99:DA:1A:21:F2:AB:B7:A2:A7:74:C8
Certificate issuer: /CN=52ceee2d6d7a50c92499da1a21f2abb7a2a774c8
Certificate serial: 019CEB5CA63D3E8A3FB8424F692C062EC344
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
Manifest number: 0D05
Signing time: Sat 14 Mar 2026 08:00:43 +0000
Manifest this update: Sat 14 Mar 2026 08:00:43 +0000
Manifest next update: Sun 15 Mar 2026 08:00:43 +0000
Files and hashes: 1: 00K95uzAVC-As-Iyho8vnUOQDZ8.roa (hash: kfLM/YtWZzFLfCP3ajHs0k6ce1lVF3pDxYNFKvjlQcg=)
2: Us7uLW16UMkkmdoaIfKrt6KndMg.crl (hash: vErKpA2gT+KMvzocDnXcIg79Gm8uMwXSKdyIgqQ/MsU=)
3: ei8OTREn63voSBE5nxK-2OquN1c.roa (hash: rtdm6RL7c+SJK/SooK4jKjSilqnAkSqbJlBiuodfm0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:eb:5c:a6:3d:3e:8a:3f:b8:42:4f:69:2c:06:2e:c3:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52ceee2d6d7a50c92499da1a21f2abb7a2a774c8
Validity
Not Before: Mar 14 08:00:43 2026 GMT
Not After : Mar 15 08:00:43 2026 GMT
Subject: CN=02ab6860bebadd77ce2c379a6d6d374d2874aeb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2d:38:60:ad:8e:38:2b:26:3d:17:c2:b1:84:
72:23:3e:ac:98:9e:fe:87:9b:ab:bc:98:0f:f8:3e:
58:6d:a7:66:c7:02:1a:61:61:ae:51:07:58:c3:c2:
02:a9:c7:0d:6c:bb:73:d8:3c:c1:a0:ed:cf:9a:ca:
8b:8a:77:56:fa:4c:ed:7c:3e:57:58:ee:48:c5:9b:
2b:53:bd:18:a9:92:1e:b9:bc:66:30:ef:f0:81:25:
cc:28:de:f8:66:d2:05:ed:db:8d:66:b9:07:25:39:
be:6c:26:ed:c8:b8:cd:85:03:ae:52:9f:1d:ef:e2:
2d:23:a4:6a:b6:69:11:22:28:e4:ec:19:97:a7:c0:
0e:0d:3b:d9:85:09:20:2a:2a:e3:39:66:16:76:d8:
a8:f9:01:90:a8:53:0e:a1:c0:24:77:4c:c3:5b:2d:
bd:b8:42:32:6f:10:23:fe:08:37:2c:ce:0b:9c:84:
13:0a:dc:30:5f:e2:99:c8:a6:d0:79:5b:7c:b0:1f:
36:9b:fa:9a:e9:bb:6e:5d:6b:cd:3e:24:70:11:8d:
fa:38:44:49:11:89:5b:aa:27:02:5b:a4:dc:e2:ec:
fd:50:0b:30:7c:a6:75:0a:fa:b3:64:17:54:27:6d:
ca:25:af:b4:4f:fa:19:0b:8b:bc:65:02:6e:41:32:
f8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AB:68:60:BE:BA:DD:77:CE:2C:37:9A:6D:6D:37:4D:28:74:AE:B7
X509v3 Authority Key Identifier:
keyid:52:CE:EE:2D:6D:7A:50:C9:24:99:DA:1A:21:F2:AB:B7:A2:A7:74:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a4:e7:89:e1:50:b2:48:ef:d7:6a:1e:64:dc:d1:60:5a:b9:
4b:0d:d8:83:c9:4e:1b:c0:bb:a7:e2:51:1b:e8:44:f7:4d:01:
27:15:b6:06:26:31:5a:3c:6b:2d:bb:04:de:e3:39:46:22:33:
f7:b8:83:af:50:cb:9d:2d:5b:a5:f5:26:e6:d6:5d:ac:1f:68:
db:d4:95:83:19:a6:38:55:a8:d9:44:1f:00:53:72:74:1e:52:
58:e4:88:83:62:0d:c2:82:c2:c0:7f:3c:6b:c5:78:47:35:21:
46:11:a9:a1:71:2d:f7:a4:87:76:f2:e7:65:09:0c:d1:82:13:
dc:ff:1c:4e:97:a3:a1:c4:aa:d6:1e:6c:cb:b8:23:20:3c:5b:
d0:11:40:1d:4b:89:7e:b6:97:54:8b:5c:09:e0:ec:7d:f7:80:
8e:4d:e6:a4:63:87:a4:df:93:13:b3:75:e0:a4:a5:34:7c:9d:
20:e5:c7:ce:d5:0b:c4:af:52:63:14:b7:6f:6f:32:77:11:1e:
f5:c4:a0:16:7a:59:73:1d:28:fe:2a:32:f1:92:ba:e0:19:f3:
9d:3e:fc:41:cc:dc:5b:28:7f:9e:fd:12:9f:67:87:fb:00:a0:
4c:74:46:f6:0a:92:de:8f:25:49:6c:be:07:99:71:c0:43:52:
5d:b6:48:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 15:14:30 2026 by rpki-client