Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/UsaDhcAgvlgfWdY0dXbrewXIa80.mft
File: UsaDhcAgvlgfWdY0dXbrewXIa80.mft (raw, json)
Hash identifier: ha/N+nEqHFRore2ZgD1aaKkLjvV6iEzKNmWv7uwvu4k=
Subject key identifier: D0:89:6A:61:AE:52:31:BE:9D:9B:61:DF:56:9D:31:D5:A7:9E:B4:C4
Authority key identifier: 52:C6:83:85:C0:20:BE:58:1F:59:D6:34:75:76:EB:7B:05:C8:6B:CD
Certificate issuer: /CN=52c68385c020be581f59d6347576eb7b05c86bcd
Certificate serial: 019FA0E01BC5CB5E89E7C6FBD5FBF113B8A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UsaDhcAgvlgfWdY0dXbrewXIa80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/UsaDhcAgvlgfWdY0dXbrewXIa80.mft
Manifest number: 48
Signing time: Mon 27 Jul 2026 00:01:09 +0000
Manifest this update: Mon 27 Jul 2026 00:01:09 +0000
Manifest next update: Tue 28 Jul 2026 00:01:09 +0000
Files and hashes: 1: UsaDhcAgvlgfWdY0dXbrewXIa80.crl (hash: yFQFwHkNtXjWTBMAdYaCedzn3855EPHpR7LzEJthNOA=)
2: sgtD8UYF9aRy2hvLvMZeq_DL8yA.roa (hash: 7+WO1NdpHvda7ZiRwxhmc9q1DRZhsi2qaxRrJ7/628M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/UsaDhcAgvlgfWdY0dXbrewXIa80.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/UsaDhcAgvlgfWdY0dXbrewXIa80.mft
rsync://rpki.ripe.net/repository/DEFAULT/UsaDhcAgvlgfWdY0dXbrewXIa80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:1b:c5:cb:5e:89:e7:c6:fb:d5:fb:f1:13:b8:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52c68385c020be581f59d6347576eb7b05c86bcd
Validity
Not Before: Jul 27 00:01:09 2026 GMT
Not After : Jul 28 00:01:09 2026 GMT
Subject: CN=d0896a61ae5231be9d9b61df569d31d5a79eb4c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1c:94:ca:76:c3:28:5e:73:25:6c:e8:b4:17:
2a:c8:a9:15:47:7c:84:e8:72:4a:9c:52:fe:38:ff:
1a:7c:de:77:fa:81:de:e8:a6:5f:b7:94:ff:cf:10:
2d:ae:ad:ef:a3:b8:00:e4:1e:be:38:29:75:cd:76:
d0:46:a5:2e:71:3b:e0:e8:2b:7e:96:f6:9e:e4:17:
b5:93:e0:7b:9f:4f:f0:4b:95:1a:c2:26:51:aa:7e:
69:33:de:d3:27:d6:0e:bd:6c:02:e5:5d:e4:da:30:
9d:8d:a3:09:81:ea:1b:ed:49:c1:7f:23:52:f6:3c:
99:6f:4e:2c:c4:be:cd:9a:b3:d8:f6:26:f0:07:8a:
cf:fa:0c:3d:04:80:04:5a:b2:f9:ab:ab:75:2a:ea:
03:e4:33:be:71:62:c0:0b:66:51:0d:57:74:eb:33:
78:fe:87:5e:ea:74:68:b0:73:87:db:e2:45:05:8d:
d6:09:6f:10:a0:57:c4:fb:55:69:d2:6f:07:ac:e3:
82:e9:57:56:30:2e:21:8d:98:9c:47:2c:89:5f:e7:
27:9d:d2:e7:8e:0c:96:82:1b:a7:d9:ce:d2:a7:eb:
1e:7f:1f:80:3d:f3:d5:d6:83:00:58:41:d6:2a:09:
0f:bd:49:3f:bf:a1:a2:6b:88:4d:db:12:eb:5d:0c:
45:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:89:6A:61:AE:52:31:BE:9D:9B:61:DF:56:9D:31:D5:A7:9E:B4:C4
X509v3 Authority Key Identifier:
keyid:52:C6:83:85:C0:20:BE:58:1F:59:D6:34:75:76:EB:7B:05:C8:6B:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UsaDhcAgvlgfWdY0dXbrewXIa80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/UsaDhcAgvlgfWdY0dXbrewXIa80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/UsaDhcAgvlgfWdY0dXbrewXIa80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:c6:52:7b:5e:3b:a8:5a:89:15:48:c2:e2:50:7b:45:25:47:
d1:93:6b:37:ef:81:1a:cb:07:54:c8:0f:11:61:77:0e:0d:c4:
b1:62:a5:84:b8:c4:d4:99:32:74:56:cb:1f:e1:c1:6d:8a:55:
78:6d:ae:2e:60:b5:39:fa:d6:75:8d:82:94:cb:fb:19:7b:a4:
7b:7d:cf:e9:76:94:eb:3d:95:4f:c0:11:39:bc:3d:79:31:6d:
da:d7:5f:50:d0:d7:df:c2:86:e6:c5:90:49:4d:fc:d2:f0:2a:
a6:0e:6e:86:fc:2f:55:d6:56:b4:0c:d1:53:2c:eb:71:56:b9:
0d:6a:dd:42:d2:f7:e5:0c:f5:20:03:95:2c:dd:21:93:61:03:
06:47:5d:c0:dc:fa:3c:aa:1b:66:1c:1d:26:a5:a3:c6:27:a9:
84:71:b1:a7:8a:19:6a:9c:cd:3f:b9:c5:c8:35:47:76:1b:8a:
b3:56:0c:f3:af:d5:c8:04:a7:1f:71:15:3f:3d:e3:ab:16:e8:
1e:b1:2e:e0:09:9a:78:76:37:85:ad:e4:f8:ba:20:17:fd:cd:
83:11:82:f3:85:ca:93:3d:d7:4d:95:75:89:9d:5e:24:ad:82:
10:a5:e2:27:a0:5f:8d:a7:33:54:99:59:ca:d7:93:44:36:a4:
c6:08:eb:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:21:53 2026 by rpki-client