Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/UsaDhcAgvlgfWdY0dXbrewXIa80.mft
File: UsaDhcAgvlgfWdY0dXbrewXIa80.mft (raw, json)
Hash identifier: GbBdZhOv9YeVtCfMqZ0KOVt4j371+rmRXWW1mCUoZ4Y=
Subject key identifier: 6A:11:4C:87:93:84:1B:3B:FD:AF:E5:9E:4B:A5:3B:A5:1C:AF:6D:47
Authority key identifier: 52:C6:83:85:C0:20:BE:58:1F:59:D6:34:75:76:EB:7B:05:C8:6B:CD
Certificate issuer: /CN=52c68385c020be581f59d6347576eb7b05c86bcd
Certificate serial: 01A17BF2801FCD875F9FAEEC12F752A1678B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UsaDhcAgvlgfWdY0dXbrewXIa80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/UsaDhcAgvlgfWdY0dXbrewXIa80.mft
Manifest number: 013E
Signing time: Tue 27 Oct 2026 06:00:52 +0000
Manifest this update: Tue 27 Oct 2026 06:00:52 +0000
Manifest next update: Wed 28 Oct 2026 06:00:52 +0000
Files and hashes: 1: UsaDhcAgvlgfWdY0dXbrewXIa80.crl (hash: eWuCFEesRy6MVIdmvKvEsOlyD2FUdp+1dqtupmZXioY=)
2: sgtD8UYF9aRy2hvLvMZeq_DL8yA.roa (hash: 7+WO1NdpHvda7ZiRwxhmc9q1DRZhsi2qaxRrJ7/628M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/UsaDhcAgvlgfWdY0dXbrewXIa80.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/UsaDhcAgvlgfWdY0dXbrewXIa80.mft
rsync://rpki.ripe.net/repository/DEFAULT/UsaDhcAgvlgfWdY0dXbrewXIa80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:f2:80:1f:cd:87:5f:9f:ae:ec:12:f7:52:a1:67:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52c68385c020be581f59d6347576eb7b05c86bcd
Validity
Not Before: Oct 27 06:00:52 2026 GMT
Not After : Oct 28 06:00:52 2026 GMT
Subject: CN=6a114c8793841b3bfdafe59e4ba53ba51caf6d47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:56:79:b5:e9:05:a7:2a:f2:ce:1a:84:e6:5b:
83:f2:e9:5f:1a:75:12:0d:26:e1:02:7f:19:c1:c5:
f4:73:c8:94:06:85:e1:ca:23:14:f7:d1:a8:d0:3c:
e1:07:29:10:1f:ac:4c:32:58:d8:74:20:02:46:1c:
1e:97:c2:8d:4f:66:18:3b:a4:6b:a1:c8:d4:49:80:
90:4e:6b:26:f4:05:41:52:0e:c0:cc:1e:66:1e:55:
93:95:5f:bf:a1:c5:33:d3:2a:46:ca:e3:67:a4:36:
0e:b4:27:5c:36:e1:93:d7:69:dc:87:0d:fe:4b:af:
21:c6:97:46:3a:3e:66:b7:29:5a:70:ba:79:29:c5:
58:ed:be:18:95:eb:79:ad:a2:48:39:16:89:bb:31:
7c:52:45:a4:9d:de:bc:3b:55:3f:99:ac:bb:8e:9f:
fa:a0:32:99:68:14:ff:a8:74:08:e2:83:81:70:73:
bc:10:d4:60:b6:42:d2:11:37:60:6b:fe:74:42:17:
4a:03:c9:10:24:71:a4:9e:5b:43:63:c0:56:5e:d9:
e1:bd:2c:3a:a2:ee:82:89:fd:1e:74:86:93:73:f7:
2f:e3:0a:54:43:e0:2e:ad:17:61:5d:22:f0:96:45:
df:87:fa:3d:10:c3:3d:21:d7:d0:c1:0d:18:90:5b:
d4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:11:4C:87:93:84:1B:3B:FD:AF:E5:9E:4B:A5:3B:A5:1C:AF:6D:47
X509v3 Authority Key Identifier:
keyid:52:C6:83:85:C0:20:BE:58:1F:59:D6:34:75:76:EB:7B:05:C8:6B:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UsaDhcAgvlgfWdY0dXbrewXIa80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/UsaDhcAgvlgfWdY0dXbrewXIa80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/UsaDhcAgvlgfWdY0dXbrewXIa80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:c3:8b:7e:59:a0:89:fa:38:40:e5:67:cf:c9:fd:17:1a:2a:
50:2c:96:ab:ac:76:6c:2a:38:29:df:87:91:97:57:b5:02:f7:
69:af:1c:0a:a5:93:23:7d:3c:67:e6:2a:28:7b:6e:56:59:e2:
bb:3b:56:ad:0b:10:22:a4:32:3a:1e:14:cf:8b:40:e6:e1:f0:
6f:82:7a:3a:ed:13:6b:3f:d5:2d:e8:67:d6:ce:61:1e:95:19:
86:71:0c:be:08:c1:a4:ba:2c:70:91:4c:2c:99:c6:6e:c3:b1:
de:d0:eb:24:09:8b:a9:7c:76:d3:d7:1a:50:b3:a3:ad:47:95:
86:ed:8f:2e:8e:10:8c:3c:bf:72:35:bd:c3:ee:d8:07:39:b8:
1a:51:c1:4c:1b:de:be:31:40:cb:a4:06:83:06:e0:78:9b:65:
ee:34:00:1c:cb:94:b1:27:e2:46:44:73:0d:56:66:53:57:db:
5d:9a:2d:8e:e0:70:5f:e0:92:be:b8:8b:39:ba:92:5c:10:bd:
0a:7a:c6:0f:32:55:d8:df:80:d4:dc:a0:20:01:f1:4e:3c:f5:
6f:b6:b7:28:17:95:08:e6:21:b2:1d:26:8d:f4:2a:5d:83:3d:
d1:5e:50:58:95:68:63:99:b0:84:7b:14:bd:4c:5e:95:4f:77:
dc:d3:74:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:52:11 2026 by rpki-client