Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.mft
File: usSgifjmioMOuYpcH-JWBlHls5s.mft (raw, json)
Hash identifier: mMas/+yjfKaB0iZSI9aXbmj11kg0y8OCtXZVmei2qGo=
Subject key identifier: DE:BC:23:1D:E1:90:29:88:0C:78:D3:C4:7D:82:CA:EB:DA:5A:C3:96
Authority key identifier: BA:C4:A0:89:F8:E6:8A:83:0E:B9:8A:5C:1F:E2:56:06:51:E5:B3:9B
Certificate issuer: /CN=bac4a089f8e68a830eb98a5c1fe2560651e5b39b
Certificate serial: 01A15665D92F9D4403B784DC09BF862F2ACB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/usSgifjmioMOuYpcH-JWBlHls5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.mft
Manifest number: 034D
Signing time: Mon 19 Oct 2026 23:01:17 +0000
Manifest this update: Mon 19 Oct 2026 23:01:17 +0000
Manifest next update: Tue 20 Oct 2026 23:01:17 +0000
Files and hashes: 1: GmNXmiq5iVl3LlLazdx_LHN3boE.asa (hash: YRVbgQn0SaBqEvSThmW75OyzWKprF8xX5w+6esDiBi4=)
2: lZdeB_zLhBn8Pma8VrIrTZ-DLw0.roa (hash: Ho6P5uHvKiLwzWfjR53vh5bZgXgpl16WZYv0ODwixJI=)
3: usSgifjmioMOuYpcH-JWBlHls5s.crl (hash: xtL+PvQ6n5jmIwZhRus329tr16U76O2FTuucA+cN+q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/usSgifjmioMOuYpcH-JWBlHls5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:56:65:d9:2f:9d:44:03:b7:84:dc:09:bf:86:2f:2a:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bac4a089f8e68a830eb98a5c1fe2560651e5b39b
Validity
Not Before: Oct 19 23:01:17 2026 GMT
Not After : Oct 20 23:01:17 2026 GMT
Subject: CN=debc231de19029880c78d3c47d82caebda5ac396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:40:5b:b8:f8:a8:bd:ff:af:47:a3:b3:ab:70:
3a:5f:d0:ca:ee:99:52:41:a2:21:b5:01:3d:97:2b:
85:57:a7:f9:22:b2:c9:81:f9:b3:d7:a0:90:49:07:
9c:e1:49:87:d9:ff:46:69:2d:5c:14:f2:d0:17:4c:
0c:44:cf:60:ca:59:84:6d:d4:cc:64:10:90:42:0f:
bb:5b:ca:9e:7d:85:c5:27:5f:1c:85:b3:9e:02:91:
bc:2f:e5:ef:86:21:c2:1b:f7:71:76:10:69:a5:26:
ca:ee:7b:1c:ec:5d:1b:af:fb:4b:3d:d7:26:6d:23:
99:8b:6c:ba:3f:86:2d:27:da:8b:0f:98:10:f6:94:
b5:1f:d2:e8:83:75:fc:1f:0d:7e:7e:e7:47:6e:3d:
16:44:cc:2c:11:59:14:08:9a:f1:5d:92:10:fa:b1:
20:73:bd:c3:8a:00:ea:39:fd:f3:64:f7:03:07:3b:
61:d5:dd:81:66:ab:3f:15:b9:79:40:36:57:7f:0c:
2a:70:fc:98:64:bf:08:11:e6:59:e8:70:04:ec:fc:
09:63:9d:d4:1a:d6:fe:4d:24:b7:0d:bc:66:d3:3c:
19:7c:3d:db:0e:cb:d1:a7:a3:51:9c:e3:a7:f4:7f:
90:9c:43:30:ff:92:99:9d:9f:0f:87:4e:36:d4:bb:
b2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BC:23:1D:E1:90:29:88:0C:78:D3:C4:7D:82:CA:EB:DA:5A:C3:96
X509v3 Authority Key Identifier:
keyid:BA:C4:A0:89:F8:E6:8A:83:0E:B9:8A:5C:1F:E2:56:06:51:E5:B3:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/usSgifjmioMOuYpcH-JWBlHls5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:8a:2f:35:7c:eb:0d:6b:0e:18:7c:f4:86:c7:4c:bf:bf:75:
7a:c9:8d:cb:c2:e3:52:6e:fe:3f:25:63:ae:14:f1:28:93:10:
16:8c:51:e5:ed:2c:48:ed:6a:90:7d:72:67:62:ca:8b:ee:9c:
bf:b4:b1:72:0c:25:f6:5a:41:3a:53:5d:f8:b5:c6:07:cc:b8:
c2:6e:26:52:bc:a9:82:0f:c4:7e:9e:21:ea:0d:a0:4e:12:c4:
35:d6:8c:c7:c0:a9:23:95:1a:83:b8:be:38:de:5d:21:1f:e8:
f1:b7:12:29:55:67:66:16:ff:e5:0f:9c:2d:49:57:1a:54:69:
8f:b8:d9:53:8e:6a:9c:ef:25:c4:83:3b:89:92:22:fd:c1:e9:
99:78:01:9b:1f:9d:6a:9e:8b:c3:4f:bd:0b:28:78:e2:b8:9e:
8b:b0:03:fa:f8:a8:6b:23:b4:62:6a:a7:86:66:f9:e7:d8:b7:
7f:c2:8f:0e:e5:60:37:d4:2f:ff:cc:03:9d:67:02:fb:58:a5:
02:40:68:5d:2a:18:59:1a:8f:f5:4c:a1:aa:69:23:c2:2a:c8:
b9:dc:55:44:cc:1d:90:ac:5e:16:b4:7d:04:bb:b6:3f:2c:b4:
db:26:cc:d0:dc:5a:b7:62:32:1f:70:19:a1:65:e1:2a:5f:23:
68:10:a9:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 05:05:17 2026 by rpki-client