Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/a5e94c-08be-4fce-8ec9-18ece368266f/1/UsSOG7ZyzaaEZADov41taWg1178.mft
File: UsSOG7ZyzaaEZADov41taWg1178.mft (raw, json)
Hash identifier: qpexZ15522e9rIN3JNwZeUp02hp2ZzViUrR12aM30hY=
Subject key identifier: 60:DC:B2:57:2A:03:5D:C6:E9:BC:F9:F2:5B:B6:4B:F2:AA:8C:5E:56
Authority key identifier: 52:C4:8E:1B:B6:72:CD:A6:84:64:00:E8:BF:8D:6D:69:68:35:D7:BF
Certificate issuer: /CN=52c48e1bb672cda6846400e8bf8d6d696835d7bf
Certificate serial: 01A08AFAED68E17D5D5976A288F5B818657D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UsSOG7ZyzaaEZADov41taWg1178.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a5e94c-08be-4fce-8ec9-18ece368266f/1/UsSOG7ZyzaaEZADov41taWg1178.mft
Manifest number: 0C7F
Signing time: Thu 10 Sep 2026 11:01:35 +0000
Manifest this update: Thu 10 Sep 2026 11:01:35 +0000
Manifest next update: Fri 11 Sep 2026 11:01:35 +0000
Files and hashes: 1: Pxtr7Gbm8FoWkqDWUIVtrs362Ec.roa (hash: Hjsu0JAwI6gJ3DPtZLzsxv8mvLUzo+rKbsqMaxC3bYY=)
2: UsSOG7ZyzaaEZADov41taWg1178.crl (hash: onBHYnAdqCDn3zeXHB/VfNbJHg5kkSrc2hc2xNixmvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/a5e94c-08be-4fce-8ec9-18ece368266f/1/UsSOG7ZyzaaEZADov41taWg1178.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/a5e94c-08be-4fce-8ec9-18ece368266f/1/UsSOG7ZyzaaEZADov41taWg1178.mft
rsync://rpki.ripe.net/repository/DEFAULT/UsSOG7ZyzaaEZADov41taWg1178.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:ed:68:e1:7d:5d:59:76:a2:88:f5:b8:18:65:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52c48e1bb672cda6846400e8bf8d6d696835d7bf
Validity
Not Before: Sep 10 11:01:35 2026 GMT
Not After : Sep 11 11:01:35 2026 GMT
Subject: CN=60dcb2572a035dc6e9bcf9f25bb64bf2aa8c5e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:79:52:84:19:12:89:0a:22:a9:41:0f:ae:a8:
f5:42:75:ec:07:db:92:ea:dc:7d:12:b0:66:46:18:
4f:0f:a1:37:2b:49:08:05:3c:3b:a4:6d:46:bd:ba:
66:0d:b8:4c:8e:5e:6e:ed:b6:b7:81:27:0b:9c:d3:
eb:31:9d:8d:8c:78:cb:b1:a6:01:8f:58:04:1b:c9:
af:8f:da:19:13:c7:0c:be:47:b8:7d:8b:33:b0:8e:
e5:aa:2c:da:bd:84:21:36:43:a0:cf:fe:13:9b:95:
a5:d8:23:bf:6a:98:d9:85:00:34:bd:aa:33:5b:e8:
ce:9d:21:23:65:d9:3f:25:30:99:68:45:d0:71:00:
90:dd:2f:46:c7:1d:42:6d:05:2b:ab:88:f0:53:b1:
36:b5:e7:25:f1:01:fd:23:d9:5e:bf:9d:b5:c4:a0:
d3:32:19:b2:55:53:9f:cc:2b:4a:06:7d:19:ec:98:
f6:f8:fb:73:4e:29:34:44:4c:d1:51:87:c3:f7:49:
b0:15:81:af:0e:a2:7b:1f:e2:44:02:f5:f8:26:12:
a4:47:15:9f:d5:e6:2c:fa:25:02:5e:f2:44:a4:78:
1f:1f:f5:2b:72:56:74:31:1a:f1:b1:c8:3f:02:c8:
14:ff:79:ad:ec:f2:bb:69:b5:b4:13:6d:6d:08:65:
35:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:DC:B2:57:2A:03:5D:C6:E9:BC:F9:F2:5B:B6:4B:F2:AA:8C:5E:56
X509v3 Authority Key Identifier:
keyid:52:C4:8E:1B:B6:72:CD:A6:84:64:00:E8:BF:8D:6D:69:68:35:D7:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UsSOG7ZyzaaEZADov41taWg1178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a5e94c-08be-4fce-8ec9-18ece368266f/1/UsSOG7ZyzaaEZADov41taWg1178.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a5e94c-08be-4fce-8ec9-18ece368266f/1/UsSOG7ZyzaaEZADov41taWg1178.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:c2:c4:21:e0:8d:9d:ad:05:1b:8d:91:a1:ea:85:a8:1f:a5:
f6:c8:40:71:3b:25:b8:d1:a5:0d:21:77:1e:f5:49:4f:44:64:
4e:93:1c:cb:c5:ec:3c:88:16:9d:a5:c2:e1:0f:c1:62:25:de:
e4:dd:dc:7e:6f:87:7c:74:77:41:12:e0:43:a9:d4:49:73:b9:
91:5c:34:06:99:c8:a1:91:3c:40:67:27:bc:70:a2:73:84:7d:
0c:37:b6:a6:ca:d2:1a:90:4c:15:91:9f:8d:2e:f4:ae:c9:00:
b1:3b:4a:71:81:51:6e:4c:77:be:b4:d3:46:a4:b0:13:57:00:
f8:ed:84:d7:93:2c:f0:0f:17:78:90:b0:54:99:f5:cb:d6:f3:
ce:00:97:ec:41:97:3f:db:a7:73:83:cc:74:a3:28:28:92:db:
12:fc:cb:19:43:c1:74:59:ce:f8:04:64:b9:c3:f9:6d:2a:69:
35:56:76:ac:8b:06:b4:1e:b7:49:ff:6a:7e:69:c7:62:41:98:
f4:0b:8a:1a:59:b1:e2:94:29:94:c1:77:f0:94:2c:2e:96:54:
e9:69:eb:c5:03:36:9f:90:14:5f:c2:2c:64:c1:04:08:5c:9f:
a8:09:b3:cf:8a:54:32:d2:7f:0e:a7:4f:da:7a:0b:d9:7b:af:
b9:6a:a1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:11:54 2026 by rpki-client