Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/UsaDhcAgvlgfWdY0dXbrewXIa80.mft
File: UsaDhcAgvlgfWdY0dXbrewXIa80.mft (raw, json)
Hash identifier: ncNXgl+jZ/2Hss2yolNRAHEp0Qxur6xz94UlOnyRqpE=
Subject key identifier: 11:E3:FE:D7:C4:66:F7:34:14:05:35:58:25:33:5C:AF:86:F7:82:7C
Authority key identifier: 52:C6:83:85:C0:20:BE:58:1F:59:D6:34:75:76:EB:7B:05:C8:6B:CD
Certificate issuer: /CN=52c68385c020be581f59d6347576eb7b05c86bcd
Certificate serial: 01A08A8CAC2819D4309ED292136FC825B2C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UsaDhcAgvlgfWdY0dXbrewXIa80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/UsaDhcAgvlgfWdY0dXbrewXIa80.mft
Manifest number: C1
Signing time: Thu 10 Sep 2026 09:01:09 +0000
Manifest this update: Thu 10 Sep 2026 09:01:09 +0000
Manifest next update: Fri 11 Sep 2026 09:01:09 +0000
Files and hashes: 1: UsaDhcAgvlgfWdY0dXbrewXIa80.crl (hash: 6Hu7ZqQWlGmoo6kyZwi+IWB5M51lXt7P6oTjFPbmmY4=)
2: sgtD8UYF9aRy2hvLvMZeq_DL8yA.roa (hash: 7+WO1NdpHvda7ZiRwxhmc9q1DRZhsi2qaxRrJ7/628M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/UsaDhcAgvlgfWdY0dXbrewXIa80.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/UsaDhcAgvlgfWdY0dXbrewXIa80.mft
rsync://rpki.ripe.net/repository/DEFAULT/UsaDhcAgvlgfWdY0dXbrewXIa80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:ac:28:19:d4:30:9e:d2:92:13:6f:c8:25:b2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52c68385c020be581f59d6347576eb7b05c86bcd
Validity
Not Before: Sep 10 09:01:09 2026 GMT
Not After : Sep 11 09:01:09 2026 GMT
Subject: CN=11e3fed7c466f7341405355825335caf86f7827c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c3:c1:2d:e3:8c:d4:f5:65:48:d7:b6:9f:c7:
ba:69:b6:9b:af:7a:df:b4:57:cb:74:83:e5:13:3c:
3e:22:46:ef:9f:a3:8d:0b:2a:39:51:0a:5a:a6:03:
4f:4e:68:d6:ca:4f:92:55:05:3e:6a:b1:18:ab:8d:
1e:ea:4f:f8:9a:0f:13:03:9d:56:64:bd:4b:f8:4f:
77:d8:be:87:80:f5:9c:3a:16:ed:66:bc:3f:c3:90:
2c:18:77:5b:5e:7e:37:d6:43:e8:16:a1:c8:b5:98:
e7:36:7b:d3:6d:76:65:ef:42:5c:52:7a:c0:2f:3a:
9e:96:65:a6:f4:06:0b:af:53:fc:54:58:3e:97:20:
ae:f5:a7:48:11:5e:f9:20:23:f7:c7:ed:17:39:71:
3c:2f:6c:21:c2:29:07:a3:2b:d1:2c:25:bd:c5:66:
84:dc:e3:42:ec:72:6e:ec:2b:66:a5:fb:83:b7:fb:
1b:80:c4:e0:12:d8:fc:b1:35:02:4d:c2:64:66:e0:
d4:d8:6e:57:03:df:60:73:3f:e7:2f:7f:e7:ba:d4:
0f:b6:40:48:37:f7:e7:f7:87:70:d7:56:cd:71:db:
d8:c4:39:f9:de:46:bd:54:7f:9c:e7:20:06:76:19:
ff:ef:91:ed:a9:70:85:3c:4b:1a:30:ec:a9:24:8f:
5d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E3:FE:D7:C4:66:F7:34:14:05:35:58:25:33:5C:AF:86:F7:82:7C
X509v3 Authority Key Identifier:
keyid:52:C6:83:85:C0:20:BE:58:1F:59:D6:34:75:76:EB:7B:05:C8:6B:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UsaDhcAgvlgfWdY0dXbrewXIa80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/UsaDhcAgvlgfWdY0dXbrewXIa80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/UsaDhcAgvlgfWdY0dXbrewXIa80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ad:9d:f1:63:39:9b:99:17:9a:4a:5d:37:e8:43:a5:31:24:
04:32:04:a9:de:87:a0:0f:e0:a7:74:fa:99:8d:0c:4c:89:7e:
ef:c7:94:0a:8a:16:ea:06:0b:3f:fe:b9:72:ca:f7:bc:10:d6:
41:f8:b1:1d:13:15:ab:d5:2a:a1:f8:1d:51:f6:3e:96:03:b7:
d2:c6:78:49:db:ab:6c:3c:4e:56:0c:a4:47:4c:3c:5a:8d:0c:
a4:7a:fa:80:82:74:ac:a8:87:e9:d2:cc:05:5b:2f:9f:2a:a5:
fe:83:03:39:77:6a:16:3b:83:8a:bf:c6:76:19:6c:e8:1d:41:
4c:ab:eb:38:4d:7e:b3:22:33:e9:ea:ca:ae:7f:3c:50:e5:c2:
19:d6:d0:b0:5a:35:0a:b1:38:69:e8:18:90:81:80:3d:e3:23:
e7:6f:5b:bf:47:0a:89:83:e6:2d:cc:b2:c6:2b:a4:f1:95:6e:
a4:8a:82:b0:97:91:45:35:67:6a:f9:da:ba:07:3a:46:18:77:
8e:a8:6f:42:ee:67:f8:75:6c:af:3c:0f:6f:3e:84:03:e1:7a:
0d:d2:c6:89:59:d3:8b:96:9a:31:88:ca:5f:28:59:20:82:fc:
1c:dd:03:4a:fb:97:43:8d:7c:d1:b4:7a:e4:b7:80:e9:2d:da:
a6:f0:31:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:15:09 2026 by rpki-client