Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.mft
File: usSgifjmioMOuYpcH-JWBlHls5s.mft (raw, json)
Hash identifier: BPPr2q8P8dVcbHa4YcA5uT8P4M2N+15SXbZurZjXomA=
Subject key identifier: BE:75:62:4E:EA:D3:E1:D2:97:89:BB:68:B0:85:DF:EF:BC:F8:8C:E6
Authority key identifier: BA:C4:A0:89:F8:E6:8A:83:0E:B9:8A:5C:1F:E2:56:06:51:E5:B3:9B
Certificate issuer: /CN=bac4a089f8e68a830eb98a5c1fe2560651e5b39b
Certificate serial: 019F115331454697ED5E6BF836935E546510
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/usSgifjmioMOuYpcH-JWBlHls5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.mft
Manifest number: 0220
Signing time: Mon 29 Jun 2026 03:01:32 +0000
Manifest this update: Mon 29 Jun 2026 03:01:32 +0000
Manifest next update: Tue 30 Jun 2026 03:01:32 +0000
Files and hashes: 1: GmNXmiq5iVl3LlLazdx_LHN3boE.asa (hash: YRVbgQn0SaBqEvSThmW75OyzWKprF8xX5w+6esDiBi4=)
2: lZdeB_zLhBn8Pma8VrIrTZ-DLw0.roa (hash: Ho6P5uHvKiLwzWfjR53vh5bZgXgpl16WZYv0ODwixJI=)
3: usSgifjmioMOuYpcH-JWBlHls5s.crl (hash: UCo2NhL1yZu1hAoC7bldec6gHGa7L3+Z1agc4MFhGDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/usSgifjmioMOuYpcH-JWBlHls5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:53:31:45:46:97:ed:5e:6b:f8:36:93:5e:54:65:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bac4a089f8e68a830eb98a5c1fe2560651e5b39b
Validity
Not Before: Jun 29 03:01:32 2026 GMT
Not After : Jun 30 03:01:32 2026 GMT
Subject: CN=be75624eead3e1d29789bb68b085dfefbcf88ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:08:db:45:84:56:4a:2b:9e:99:2c:43:af:21:
97:0c:e3:fc:33:84:cd:8c:25:a7:9e:00:12:a5:b4:
a6:ec:17:2b:29:15:3c:28:3b:c8:1e:a5:ce:6b:19:
33:d4:80:19:6f:9b:da:fd:be:0e:58:e2:e2:3b:c5:
3a:92:ca:c3:57:d0:51:c1:38:20:5f:0d:41:0f:71:
22:ea:01:b0:0a:7c:d8:ca:08:4b:c7:ee:f0:45:05:
1e:db:f1:0f:96:d5:e2:ef:a0:80:3b:89:93:ab:73:
98:86:fc:58:6a:a8:f8:04:7f:b0:aa:d4:2b:61:25:
96:2d:55:36:06:79:89:23:b5:c0:56:a9:9d:6a:5b:
2b:0e:88:a3:71:44:fb:a2:36:0a:75:af:64:08:7f:
db:c4:6e:02:14:a9:f6:66:e0:81:50:11:11:6b:ef:
2b:77:5c:32:4a:e7:54:b6:01:d2:39:d5:fd:0e:7a:
0f:f9:d6:2a:90:1b:7a:33:f7:69:3a:5b:56:94:cb:
34:e6:b0:bb:0a:ce:05:7d:50:3d:67:c7:4e:11:4c:
ec:38:39:a3:a2:66:8b:6c:2c:a4:f5:76:b1:61:02:
fd:80:45:69:39:8b:cc:0d:7f:da:56:3e:ef:68:63:
ad:3f:6b:9c:0a:7c:ea:d5:51:19:30:de:66:81:76:
e5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:75:62:4E:EA:D3:E1:D2:97:89:BB:68:B0:85:DF:EF:BC:F8:8C:E6
X509v3 Authority Key Identifier:
keyid:BA:C4:A0:89:F8:E6:8A:83:0E:B9:8A:5C:1F:E2:56:06:51:E5:B3:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/usSgifjmioMOuYpcH-JWBlHls5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:18:2f:76:ca:a0:d6:fd:fa:54:d5:6c:c4:1d:67:84:c1:4b:
bf:9f:c4:fb:7d:d6:59:89:a6:79:2d:6e:a8:ac:31:69:e7:29:
9f:5e:ec:24:4b:15:dd:3c:fb:be:a4:f1:81:03:f3:d1:10:cf:
ef:23:56:3a:2a:c8:23:71:c3:74:35:81:77:03:6c:3e:72:2c:
28:4b:7c:bd:ca:4f:9c:b0:54:0c:d3:42:b5:89:9f:cb:0b:6d:
9a:12:61:20:e8:39:e0:c0:7c:51:8b:fd:70:95:df:97:3d:b8:
55:cf:0d:8d:d4:8f:94:64:53:46:0c:6c:5d:d2:43:e1:4f:e1:
ea:19:03:91:36:dd:58:ae:78:ed:35:2f:f0:92:2a:13:fb:49:
3c:c0:25:83:26:5d:71:53:91:07:31:e4:9b:b7:23:00:0a:e4:
2a:7d:00:c4:7f:c4:cf:57:9f:3c:35:22:71:40:25:ea:2f:a3:
bc:15:21:f5:4d:a8:e1:b8:27:bc:b9:a1:50:5e:d8:05:be:43:
02:b8:70:d1:bc:07:65:13:d9:b7:bb:af:8a:39:51:72:9f:ae:
e2:6c:08:96:8f:25:e8:cf:10:84:6e:b3:8e:f3:e0:c8:f4:fe:
61:63:cd:19:42:b8:f0:e5:c3:8b:c7:ee:94:26:7b:04:46:a7:
3e:7a:a7:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:36:03 2026 by rpki-client