Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/a5e94c-08be-4fce-8ec9-18ece368266f/1/UsSOG7ZyzaaEZADov41taWg1178.mft
File: UsSOG7ZyzaaEZADov41taWg1178.mft (raw, json)
Hash identifier: ruO1Qjgg1w3mSw3Dnnfny7Gh2DQ81F3e7gAQQ212WYs=
Subject key identifier: 29:C1:D4:9D:4A:94:4F:2B:30:CA:33:3B:2A:1D:DE:DD:85:B3:D7:50
Authority key identifier: 52:C4:8E:1B:B6:72:CD:A6:84:64:00:E8:BF:8D:6D:69:68:35:D7:BF
Certificate issuer: /CN=52c48e1bb672cda6846400e8bf8d6d696835d7bf
Certificate serial: 01A17C5FEC8B1BD1833E2FD0B4DCAC857B7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UsSOG7ZyzaaEZADov41taWg1178.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a5e94c-08be-4fce-8ec9-18ece368266f/1/UsSOG7ZyzaaEZADov41taWg1178.mft
Manifest number: 0CFC
Signing time: Tue 27 Oct 2026 08:00:23 +0000
Manifest this update: Tue 27 Oct 2026 08:00:23 +0000
Manifest next update: Wed 28 Oct 2026 08:00:23 +0000
Files and hashes: 1: Pxtr7Gbm8FoWkqDWUIVtrs362Ec.roa (hash: Hjsu0JAwI6gJ3DPtZLzsxv8mvLUzo+rKbsqMaxC3bYY=)
2: UsSOG7ZyzaaEZADov41taWg1178.crl (hash: 4b7zZ7SCKxrwLQO1aSqDkm4PkS37Jqvafoaesopt/HM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/a5e94c-08be-4fce-8ec9-18ece368266f/1/UsSOG7ZyzaaEZADov41taWg1178.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/a5e94c-08be-4fce-8ec9-18ece368266f/1/UsSOG7ZyzaaEZADov41taWg1178.mft
rsync://rpki.ripe.net/repository/DEFAULT/UsSOG7ZyzaaEZADov41taWg1178.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:5f:ec:8b:1b:d1:83:3e:2f:d0:b4:dc:ac:85:7b:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52c48e1bb672cda6846400e8bf8d6d696835d7bf
Validity
Not Before: Oct 27 08:00:23 2026 GMT
Not After : Oct 28 08:00:23 2026 GMT
Subject: CN=29c1d49d4a944f2b30ca333b2a1ddedd85b3d750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:16:b0:63:1e:b6:3e:f9:34:ef:95:71:6c:66:
a6:23:00:a7:c7:a3:77:90:c3:2d:bb:ca:c5:a3:19:
67:04:1a:3d:ad:cc:ec:12:06:88:58:d3:3c:56:c5:
25:0c:2d:e2:0e:cc:72:0d:07:db:67:cb:35:95:a5:
62:0f:e4:d8:e7:c3:a2:23:b2:bc:6e:58:e5:44:9c:
f4:ab:03:49:e3:c9:81:6d:26:46:cd:8f:8d:9f:a1:
62:f6:9b:34:8e:9a:b3:5f:53:f9:04:52:eb:5a:37:
96:8b:4e:10:ca:19:cf:62:45:dd:1f:d2:f8:4a:18:
f8:bd:f4:09:40:f7:69:aa:9e:53:9b:4d:6e:16:59:
45:3e:59:3d:f1:6f:69:07:8d:9c:a5:d0:5d:a3:0f:
a3:65:fc:34:a3:db:0f:ad:b5:c2:1a:ab:dc:97:4f:
ed:f8:cc:30:55:84:b5:47:0f:3e:85:7c:fc:6f:1b:
9b:29:a6:94:5e:76:31:0e:11:df:cc:de:07:cd:6d:
25:be:7d:95:7a:42:81:1a:b2:2e:1b:0f:c5:b7:42:
f4:78:18:ec:75:25:68:73:ba:01:08:a5:70:56:34:
b4:9b:b1:d2:a4:ad:78:59:83:ef:6e:85:21:d5:88:
60:85:0d:7f:1d:81:57:f1:ea:45:db:86:ac:ec:fa:
77:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C1:D4:9D:4A:94:4F:2B:30:CA:33:3B:2A:1D:DE:DD:85:B3:D7:50
X509v3 Authority Key Identifier:
keyid:52:C4:8E:1B:B6:72:CD:A6:84:64:00:E8:BF:8D:6D:69:68:35:D7:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UsSOG7ZyzaaEZADov41taWg1178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a5e94c-08be-4fce-8ec9-18ece368266f/1/UsSOG7ZyzaaEZADov41taWg1178.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a5e94c-08be-4fce-8ec9-18ece368266f/1/UsSOG7ZyzaaEZADov41taWg1178.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:14:5f:b5:d8:b1:21:2a:fc:b2:2c:5f:50:41:ef:ec:30:db:
c9:b7:65:04:b7:32:96:dd:e3:ff:db:5b:d0:4c:5e:29:06:8e:
c8:fb:c3:c1:f2:30:0b:bd:d7:57:da:12:8f:d2:ea:a7:60:bc:
ca:7d:b8:53:4c:1b:4b:e7:4c:b6:66:2f:a9:5d:8f:2b:38:53:
ec:1c:76:7a:bc:4a:2d:a1:e6:a6:db:9a:75:aa:61:7d:c0:bb:
85:12:b4:92:a1:78:b2:e8:a0:a0:d9:7b:15:94:63:17:35:2c:
ad:22:83:41:df:f7:9c:f2:08:bb:d5:a6:71:5b:ed:c6:68:a7:
46:2a:2d:51:2e:95:86:19:74:36:ec:91:b8:e2:94:fb:1c:73:
fc:14:5d:17:af:2a:23:cb:4c:74:08:6d:bd:23:b1:f3:ae:fb:
07:ac:7a:6a:00:5e:0c:1d:10:5d:9b:92:3b:48:c1:9f:2b:d6:
b7:9d:39:5b:82:44:e5:61:0d:cb:1b:1c:c9:90:cf:aa:4d:6e:
75:47:a8:04:0a:fc:fb:ef:70:1f:d7:ca:6a:94:f1:57:23:e4:
4c:64:d9:b8:87:cb:b1:c6:79:72:9c:07:35:33:fb:b5:2f:69:
e4:a9:96:ab:6e:b1:87:b7:d9:16:e5:53:fc:17:6c:78:98:b3:
cf:06:91:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF8X+yLG9GDPi/QtNyshXt8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyYzQ4ZTFiYjY3MmNkYTY4NDY0MDBlOGJmOGQ2ZDY5Njgz
NWQ3YmYwHhcNMjYxMDI3MDgwMDIzWhcNMjYxMDI4MDgwMDIzWjAzMTEwLwYDVQQD
EygyOWMxZDQ5ZDRhOTQ0ZjJiMzBjYTMzM2IyYTFkZGVkZDg1YjNkNzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRawYx62Pvk075VxbGamIwCnx6N3
kMMtu8rFoxlnBBo9rczsEgaIWNM8VsUlDC3iDsxyDQfbZ8s1laViD+TY58OiI7K8
bljlRJz0qwNJ48mBbSZGzY+Nn6Fi9ps0jpqzX1P5BFLrWjeWi04QyhnPYkXdH9L4
Shj4vfQJQPdpqp5Tm01uFllFPlk98W9pB42cpdBdow+jZfw0o9sPrbXCGqvcl0/t
+MwwVYS1Rw8+hXz8bxubKaaUXnYxDhHfzN4HzW0lvn2VekKBGrIuGw/Ft0L0eBjs
dSVoc7oBCKVwVjS0m7HSpK14WYPvboUh1YhghQ1/HYFX8epF24as7Pp3pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCnB1J1KlE8rMMozOyod3t2Fs9dQMB8GA1UdIwQY
MBaAFFLEjhu2cs2mhGQA6L+NbWloNde/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXNTT0c3Wnl6YWFFWkFEb3Y0MXRhV2cxMTc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9hNWU5NGMtMDhiZS00ZmNlLThlYzkt
MThlY2UzNjgyNjZmLzEvVXNTT0c3Wnl6YWFFWkFEb3Y0MXRhV2cxMTc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9hNWU5NGMtMDhiZS00ZmNlLThlYzktMThlY2UzNjgyNjZm
LzEvVXNTT0c3Wnl6YWFFWkFEb3Y0MXRhV2cxMTc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArRRftdix
ISr8sixfUEHv7DDbybdlBLcylt3j/9tb0ExeKQaOyPvDwfIwC73XV9oSj9Lqp2C8
yn24U0wbS+dMtmYvqV2PKzhT7Bx2erxKLaHmptuadaphfcC7hRK0kqF4suigoNl7
FZRjFzUsrSKDQd/3nPIIu9WmcVvtxminRiotUS6Vhhl0NuyRuOKU+xxz/BRdF68q
I8tMdAhtvSOx8677B6x6agBeDB0QXZuSO0jBnyvWt505W4JE5WENyxscyZDPqk1u
dUeoBAr8++9wH9fKapTxVyPkTGTZuIfLscZ5cpwHNTP7tS9p5KmWq26xh7fZFuVT
/BdseJizzwaR3w==
-----END CERTIFICATE-----
Generated at Tue Oct 27 12:46:15 2026 by rpki-client