Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a5e94c-08be-4fce-8ec9-18ece368266f/1/UsSOG7ZyzaaEZADov41taWg1178.mft
File: UsSOG7ZyzaaEZADov41taWg1178.mft (raw, json)
Hash identifier: zfJHzoJSLKdCxm3BSZ1NcvRBVvVv0a1KZEDcjgCrb+I=
Subject key identifier: 35:E3:6C:B1:05:A3:85:6E:7C:92:2E:71:DE:7E:28:01:A7:AD:82:54
Authority key identifier: 52:C4:8E:1B:B6:72:CD:A6:84:64:00:E8:BF:8D:6D:69:68:35:D7:BF
Certificate issuer: /CN=52c48e1bb672cda6846400e8bf8d6d696835d7bf
Certificate serial: 019FA14D4F837326C3364B2D1AE90F2753BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UsSOG7ZyzaaEZADov41taWg1178.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a5e94c-08be-4fce-8ec9-18ece368266f/1/UsSOG7ZyzaaEZADov41taWg1178.mft
Manifest number: 0C06
Signing time: Mon 27 Jul 2026 02:00:25 +0000
Manifest this update: Mon 27 Jul 2026 02:00:25 +0000
Manifest next update: Tue 28 Jul 2026 02:00:25 +0000
Files and hashes: 1: Pxtr7Gbm8FoWkqDWUIVtrs362Ec.roa (hash: Hjsu0JAwI6gJ3DPtZLzsxv8mvLUzo+rKbsqMaxC3bYY=)
2: UsSOG7ZyzaaEZADov41taWg1178.crl (hash: Db4I8mAQo0GHgqA8fgt8B4UxMVvoFI57TcQn7Tet7AM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/a5e94c-08be-4fce-8ec9-18ece368266f/1/UsSOG7ZyzaaEZADov41taWg1178.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/a5e94c-08be-4fce-8ec9-18ece368266f/1/UsSOG7ZyzaaEZADov41taWg1178.mft
rsync://rpki.ripe.net/repository/DEFAULT/UsSOG7ZyzaaEZADov41taWg1178.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:4f:83:73:26:c3:36:4b:2d:1a:e9:0f:27:53:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52c48e1bb672cda6846400e8bf8d6d696835d7bf
Validity
Not Before: Jul 27 02:00:25 2026 GMT
Not After : Jul 28 02:00:25 2026 GMT
Subject: CN=35e36cb105a3856e7c922e71de7e2801a7ad8254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:aa:5c:ed:51:ca:cd:62:4d:4b:6e:f2:f0:91:
ea:d9:a4:0c:c1:0f:da:5b:bb:86:5c:38:e9:be:96:
87:bd:f5:7a:4e:39:38:df:d5:4c:d1:01:11:1a:61:
d0:79:42:93:92:28:b0:4e:c8:e1:0a:4a:9c:4c:24:
f5:21:e1:1a:3c:4c:ab:ef:2c:25:be:99:05:4b:57:
33:06:c9:a6:a3:68:bc:a3:c6:7e:dc:cd:0d:4f:a8:
db:be:1d:fb:23:8a:2f:e4:aa:5d:e8:5a:47:ab:37:
14:e9:00:9e:38:82:7c:26:07:e3:17:e7:b9:c8:35:
2e:3e:c2:3a:c2:6e:52:7e:96:b2:03:af:da:a3:18:
1b:86:59:1f:2b:b5:b2:76:52:da:b7:aa:a4:07:b8:
e2:23:04:31:38:4a:01:2e:26:1e:9d:89:61:6b:73:
06:ac:ca:7f:a4:b4:29:85:f0:83:a6:7b:28:06:78:
95:a9:b7:8c:1f:c3:c9:42:5b:9b:11:7a:14:cf:24:
fa:a9:26:7f:88:11:7b:66:2e:9e:93:44:30:99:54:
bc:7c:f3:b8:b8:19:5d:7b:37:38:69:9a:18:b0:8d:
53:2a:22:4b:5a:97:b5:2b:6d:2a:96:2a:1f:6b:a8:
8f:1b:1c:05:60:8a:3a:f2:7d:72:29:a4:e1:b2:45:
d6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E3:6C:B1:05:A3:85:6E:7C:92:2E:71:DE:7E:28:01:A7:AD:82:54
X509v3 Authority Key Identifier:
keyid:52:C4:8E:1B:B6:72:CD:A6:84:64:00:E8:BF:8D:6D:69:68:35:D7:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UsSOG7ZyzaaEZADov41taWg1178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a5e94c-08be-4fce-8ec9-18ece368266f/1/UsSOG7ZyzaaEZADov41taWg1178.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a5e94c-08be-4fce-8ec9-18ece368266f/1/UsSOG7ZyzaaEZADov41taWg1178.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:99:b6:b3:fd:48:a1:04:64:83:d8:4a:5f:c0:35:2e:e9:df:
6b:0d:7a:37:af:7d:32:18:e6:5a:31:80:0a:c2:38:ab:0c:ec:
33:ea:33:7f:68:cc:f5:ba:e4:09:04:36:29:77:9c:18:87:4e:
af:e0:cd:52:ca:df:d4:af:1c:6b:cd:f0:3e:ea:eb:27:1e:8a:
78:e8:dd:b8:fc:d2:d9:b0:34:48:3f:63:2d:71:23:c0:3b:b1:
fc:39:a4:ca:b4:28:23:a2:dd:21:8b:73:26:c7:9d:74:bf:1d:
3c:f6:00:64:0d:19:cf:e7:48:a5:a9:88:a3:5b:5c:5d:ed:fa:
38:57:54:56:4c:93:af:5e:97:ad:26:e3:76:53:59:18:76:56:
ea:9b:cc:fb:19:fa:0a:03:94:d0:03:be:d8:15:e6:13:8b:a2:
40:86:f8:65:e7:fa:37:e9:c5:51:d4:aa:e4:ac:86:1b:16:b8:
61:98:8e:9d:d5:95:28:97:c1:82:84:44:ef:1e:47:a4:4f:0b:
d8:55:bc:66:ca:d5:bc:20:26:b1:43:77:e4:02:05:e9:44:ca:
70:d9:e5:d8:00:6a:0f:d4:76:1e:a8:53:20:82:09:e7:d3:ac:
e2:b8:22:be:91:fe:3d:03:b1:80:ab:4a:93:79:32:60:d0:0a:
b3:04:bd:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:42:37 2026 by rpki-client