Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.mft
File: usSgifjmioMOuYpcH-JWBlHls5s.mft (raw, json)
Hash identifier: +03CKI1jCLG+nD9sTOKY0ZgJU8Gl/8r2jr+m0qJjDjI=
Subject key identifier: BF:A3:C6:11:31:00:FC:07:BA:77:1E:39:BB:C4:4F:EA:23:D6:9D:D1
Authority key identifier: BA:C4:A0:89:F8:E6:8A:83:0E:B9:8A:5C:1F:E2:56:06:51:E5:B3:9B
Certificate issuer: /CN=bac4a089f8e68a830eb98a5c1fe2560651e5b39b
Certificate serial: 01A03C711375D32BBBB3BC123FA540AAB00B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/usSgifjmioMOuYpcH-JWBlHls5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.mft
Manifest number: 02BB
Signing time: Wed 26 Aug 2026 05:00:38 +0000
Manifest this update: Wed 26 Aug 2026 05:00:38 +0000
Manifest next update: Thu 27 Aug 2026 05:00:38 +0000
Files and hashes: 1: GmNXmiq5iVl3LlLazdx_LHN3boE.asa (hash: YRVbgQn0SaBqEvSThmW75OyzWKprF8xX5w+6esDiBi4=)
2: lZdeB_zLhBn8Pma8VrIrTZ-DLw0.roa (hash: Ho6P5uHvKiLwzWfjR53vh5bZgXgpl16WZYv0ODwixJI=)
3: usSgifjmioMOuYpcH-JWBlHls5s.crl (hash: WrqPRU5sEwvnhEENQTPlXMvYAmmRMSTqzB+2ChLVGmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/usSgifjmioMOuYpcH-JWBlHls5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3c:71:13:75:d3:2b:bb:b3:bc:12:3f:a5:40:aa:b0:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bac4a089f8e68a830eb98a5c1fe2560651e5b39b
Validity
Not Before: Aug 26 05:00:38 2026 GMT
Not After : Aug 27 05:00:38 2026 GMT
Subject: CN=bfa3c6113100fc07ba771e39bbc44fea23d69dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:74:b8:7f:fd:28:a0:49:9c:d9:c8:c4:41:8a:
ca:ec:e8:44:e1:b5:fb:31:e1:16:69:5b:05:66:54:
ef:fc:c7:13:ab:d6:9c:ef:c6:94:24:48:7f:af:16:
52:23:4c:ee:c7:f4:bc:79:a9:2a:1d:14:62:c3:aa:
c1:31:ea:f1:8e:04:14:8b:c6:66:20:6d:06:a0:6f:
0c:0d:bc:89:0a:0b:96:0b:f5:93:79:90:b1:2e:ac:
9e:82:89:84:93:6b:de:41:b4:b0:6a:d7:58:b8:dc:
61:d0:14:44:8d:d6:9c:b2:8f:6e:91:14:f6:a4:8a:
f6:5a:ee:42:48:4e:1f:bb:89:01:a4:98:0c:f4:8f:
c5:c4:3d:d2:00:01:cc:c8:a5:4e:3d:8e:4b:71:e7:
f3:e1:b8:77:bb:a8:06:de:de:8f:43:ae:d5:bc:9e:
5f:d8:34:fb:6e:25:51:ff:e5:88:bd:61:8e:ed:f5:
af:5a:00:9c:3a:1c:9c:1b:90:a9:cf:4b:d9:8b:f1:
be:27:15:79:ed:a9:f7:c7:49:52:c3:51:af:3f:4a:
d5:c1:c9:62:83:a0:27:d5:0d:e9:34:cb:d0:c7:b3:
04:d6:8f:a6:85:e9:d6:8e:f2:8a:4c:8c:33:da:e1:
72:dd:bb:0d:a7:c5:4d:a7:cf:e0:69:59:8c:c0:3a:
9e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A3:C6:11:31:00:FC:07:BA:77:1E:39:BB:C4:4F:EA:23:D6:9D:D1
X509v3 Authority Key Identifier:
keyid:BA:C4:A0:89:F8:E6:8A:83:0E:B9:8A:5C:1F:E2:56:06:51:E5:B3:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/usSgifjmioMOuYpcH-JWBlHls5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:64:49:d0:74:f7:11:19:3b:38:37:ab:f1:08:ae:75:19:9a:
16:7c:6b:5b:87:bb:bd:c7:fb:92:47:10:93:26:50:87:5c:5d:
74:8b:26:c6:c6:eb:ea:0a:ce:7c:5a:22:d9:db:d6:7a:63:dd:
5d:5a:2e:10:3b:07:39:dc:10:a9:92:4f:aa:ed:06:82:cb:25:
60:ed:ea:6a:69:29:d5:f7:33:0d:0a:09:92:24:bf:26:0e:e4:
af:cc:f7:7e:66:68:54:dd:2d:f7:72:5e:a7:8a:50:fa:58:95:
7d:02:6b:69:4e:26:c7:1e:19:e1:fa:22:34:17:cf:1a:09:6e:
d6:92:30:21:18:b1:8d:c6:01:d4:97:fe:4b:c4:5f:79:cb:0b:
a6:b3:3d:29:a1:f8:73:ca:19:f0:07:cf:58:f2:60:33:90:ff:
f3:14:83:a1:9a:04:0e:a2:f1:59:84:27:d4:78:a0:6c:03:57:
e4:fe:8c:81:6c:f0:39:da:4a:5b:98:1c:50:d8:38:82:5a:7d:
51:61:11:1f:e9:11:d8:07:5a:b9:e4:77:35:ac:55:b2:0e:b0:
a2:6c:19:c6:e8:ad:fc:1d:4f:ff:dd:f3:bb:3f:31:41:1f:ec:
48:d8:cd:90:a8:e2:11:1f:35:c2:bb:2e:35:24:bf:cb:83:71:
47:08:4a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 11:27:56 2026 by rpki-client