Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.mft
File: usSgifjmioMOuYpcH-JWBlHls5s.mft (raw, json)
Hash identifier: W2xi8JjkGtTvL5FSm4+3VSqiLdkxAWaf3y0QUxEPZ94=
Subject key identifier: A9:24:4B:16:0A:95:69:94:EB:1C:C1:79:3A:89:F3:83:F9:37:4D:0F
Authority key identifier: BA:C4:A0:89:F8:E6:8A:83:0E:B9:8A:5C:1F:E2:56:06:51:E5:B3:9B
Certificate issuer: /CN=bac4a089f8e68a830eb98a5c1fe2560651e5b39b
Certificate serial: 019D3977E9983DEF89A6C9E8EC2983F54703
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/usSgifjmioMOuYpcH-JWBlHls5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.mft
Manifest number: 012B
Signing time: Sun 29 Mar 2026 12:00:53 +0000
Manifest this update: Sun 29 Mar 2026 12:00:53 +0000
Manifest next update: Mon 30 Mar 2026 12:00:53 +0000
Files and hashes: 1: 2HMiQuTO6J2fIcF3eHoToEe_Luc.asa (hash: Yt/kPR8GjLco9YHRPCXIo1zG3Dig9SCG1mXTu6u80U0=)
2: lZdeB_zLhBn8Pma8VrIrTZ-DLw0.roa (hash: Ho6P5uHvKiLwzWfjR53vh5bZgXgpl16WZYv0ODwixJI=)
3: usSgifjmioMOuYpcH-JWBlHls5s.crl (hash: xBCLB01vFO9UonhOt45dSEFYPSbOeJ5TTZKoDlDJ0gQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/usSgifjmioMOuYpcH-JWBlHls5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:e9:98:3d:ef:89:a6:c9:e8:ec:29:83:f5:47:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bac4a089f8e68a830eb98a5c1fe2560651e5b39b
Validity
Not Before: Mar 29 12:00:53 2026 GMT
Not After : Mar 30 12:00:53 2026 GMT
Subject: CN=a9244b160a956994eb1cc1793a89f383f9374d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f5:3a:97:ee:57:ba:4b:eb:45:53:e9:61:4c:
ef:2b:65:70:6c:14:5f:c5:38:06:72:da:c5:9b:fd:
87:bc:d8:4e:46:3c:7e:7a:54:43:7a:77:68:c3:46:
fa:29:8b:0b:5e:05:e7:ea:a8:a3:d8:68:b2:09:36:
7c:eb:32:c6:68:b4:22:42:e2:e8:70:33:ba:e3:34:
60:cd:4e:ce:7f:9e:d7:15:60:64:49:ea:d4:f3:6d:
1d:f5:82:7d:20:e9:41:c5:a9:a9:9b:be:5d:cd:fc:
00:5c:c3:df:e0:8b:9a:b8:82:e9:6c:72:21:64:7b:
f2:8d:cc:97:9f:9e:b7:53:a9:3e:3e:d3:f3:3b:93:
e8:7c:b0:af:6d:c5:57:71:1b:1b:69:f9:7b:d4:bc:
33:a9:e9:63:fa:89:39:71:08:83:2e:c2:9e:85:c4:
77:16:2f:0b:38:0f:d7:c9:79:0a:ab:ad:7b:e3:34:
6a:f5:9e:0c:10:02:13:08:2d:8d:f8:82:62:d1:d9:
e2:57:18:57:be:b4:3b:12:14:47:4d:56:39:0f:5f:
3f:4c:20:72:12:6b:c9:90:fa:d8:f1:c6:4f:83:ce:
f5:00:8d:ab:e2:d6:f5:2e:9d:2d:25:df:ad:19:dd:
22:66:54:8b:84:f3:af:74:2d:31:2e:2e:ee:e6:cc:
64:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:24:4B:16:0A:95:69:94:EB:1C:C1:79:3A:89:F3:83:F9:37:4D:0F
X509v3 Authority Key Identifier:
keyid:BA:C4:A0:89:F8:E6:8A:83:0E:B9:8A:5C:1F:E2:56:06:51:E5:B3:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/usSgifjmioMOuYpcH-JWBlHls5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:dd:67:cc:68:f7:26:08:55:ea:65:a1:93:ad:07:de:dc:9f:
4f:ba:9b:36:21:a6:3a:1f:b4:04:4b:c1:8b:f4:dd:3b:55:75:
00:65:a9:62:89:a9:a8:0b:1c:d5:71:25:00:9f:86:ba:1b:d6:
9e:af:b2:e4:e0:c4:ea:71:e0:ec:a6:ce:4f:0f:5c:80:b6:1a:
b4:19:71:6e:9c:dc:65:8f:1c:64:2b:00:97:ce:57:e2:a9:07:
29:b0:80:04:5a:8d:92:c3:98:02:9a:1b:2e:4a:0c:38:ca:d5:
2f:a1:1f:04:d4:1a:91:36:1a:57:73:e5:2b:3e:e5:cc:84:0f:
5d:8f:7e:8c:3d:24:94:4a:1e:21:d0:f5:8c:68:bf:83:4c:94:
63:35:53:22:e7:25:47:e7:05:72:aa:7c:48:e8:ee:71:f2:04:
4c:fc:25:29:f1:85:f1:30:93:92:68:f2:a1:4e:2b:3e:f5:b1:
bf:b8:18:1b:71:d6:5e:b5:b6:fc:be:c5:6d:55:dc:b0:34:ba:
c4:0e:05:05:ee:79:8a:3a:cf:c6:a7:66:e4:6d:5a:a0:5a:c4:
8b:f8:45:1a:4d:c3:78:1f:08:77:25:b6:14:55:49:b1:41:0b:
28:a9:0f:f2:76:5f:ff:16:08:19:54:7f:ba:6d:92:40:ff:7c:
3d:4c:61:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:55:32 2026 by rpki-client