Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
File: UsbdFxnihP9ccH-BIujtDYeVrz0.mft (raw, json)
Hash identifier: M3Sl57p+KhT2T960eH0LDVh15mTzM+B5l3Fhj06InC0=
Subject key identifier: BB:72:80:61:BF:9C:F3:3C:DE:1C:A9:BF:A1:89:37:FB:6D:C5:C1:3B
Authority key identifier: 52:C6:DD:17:19:E2:84:FF:5C:70:7F:81:22:E8:ED:0D:87:95:AF:3D
Certificate issuer: /CN=52c6dd1719e284ff5c707f8122e8ed0d8795af3d
Certificate serial: 019D37F6E76373924CA7D1B8098067E7B885
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
Manifest number: 0FF6
Signing time: Sun 29 Mar 2026 05:00:21 +0000
Manifest this update: Sun 29 Mar 2026 05:00:21 +0000
Manifest next update: Mon 30 Mar 2026 05:00:21 +0000
Files and hashes: 1: 8xjA0vijBm1diaizodp3mG75LDI.roa (hash: 4AjzFUfgs+M+NN2IgWhMj7sovV6HcoEwZY/R0BtNoC0=)
2: 9zqsNEeSAsd4KPkjQphjUUcz4Fk.roa (hash: bkExPcU8J676GVwwzpIBRh1+JT4P+zvjVqg3r38ok4Q=)
3: UsbdFxnihP9ccH-BIujtDYeVrz0.crl (hash: Hnx4SXaxOzvKyVRTt0bjciRhK/k1R83G7DmiGs/bhUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:e7:63:73:92:4c:a7:d1:b8:09:80:67:e7:b8:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52c6dd1719e284ff5c707f8122e8ed0d8795af3d
Validity
Not Before: Mar 29 05:00:21 2026 GMT
Not After : Mar 30 05:00:21 2026 GMT
Subject: CN=bb728061bf9cf33cde1ca9bfa18937fb6dc5c13b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:25:e1:7a:ed:01:19:54:78:b9:d9:ae:1f:fb:
3b:e1:e9:f4:7d:aa:88:e6:2f:21:38:c8:07:4c:83:
12:3f:2a:6d:72:59:6b:b7:04:72:2a:0c:7d:cf:de:
f6:4b:67:54:00:7b:a5:f2:75:af:fd:8e:a4:71:1b:
3a:0f:1e:bf:f9:d6:aa:93:b3:3c:bf:b3:d4:06:bc:
4a:31:36:a1:2d:66:65:df:7b:2f:4a:9f:be:5c:59:
00:00:5c:a2:65:25:49:14:25:81:08:e1:8b:c4:e7:
7b:c1:46:a0:ce:8c:27:25:97:06:66:49:15:12:be:
c1:8f:72:ce:e6:52:2b:c6:6f:23:5e:62:87:28:13:
1a:a1:91:c4:eb:7e:ae:ab:6e:26:58:4f:00:ae:ea:
c6:74:2a:5b:0b:4e:7a:f1:a6:6d:e3:be:3f:0c:e8:
66:75:fa:0a:ef:e5:68:2d:7b:a8:e1:d9:2e:88:68:
15:5c:d0:07:1e:1c:23:d9:10:ae:ea:cf:d0:d0:18:
29:4a:04:f1:87:d0:b5:65:c5:b8:c6:f8:0c:ae:0f:
35:b0:5b:94:db:0c:47:38:ad:cb:74:e5:2f:93:41:
76:1d:62:c1:f4:81:5c:9e:5b:71:24:c0:10:83:ee:
d2:10:fc:4b:42:18:b8:34:a8:53:ae:b3:cb:61:4a:
a7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:72:80:61:BF:9C:F3:3C:DE:1C:A9:BF:A1:89:37:FB:6D:C5:C1:3B
X509v3 Authority Key Identifier:
keyid:52:C6:DD:17:19:E2:84:FF:5C:70:7F:81:22:E8:ED:0D:87:95:AF:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:08:a0:00:d2:ec:3b:13:a7:cd:20:10:8b:51:32:a5:fb:16:
a0:14:0d:f3:8a:ac:36:7e:cb:5d:ad:86:4d:a7:a7:51:70:7f:
f0:0c:00:31:5c:a9:d3:09:5f:30:1d:4a:37:f6:75:93:a9:86:
7c:50:1b:3c:34:92:39:a3:23:c2:f7:99:63:20:60:99:19:42:
a3:89:60:ee:0d:4d:4c:f1:e4:99:f2:74:09:e3:0d:69:ba:36:
3f:ac:d4:65:b2:2e:31:21:85:d4:ab:38:86:16:56:90:de:df:
f6:5c:1d:8c:49:4e:59:00:43:39:90:d3:c7:e5:ac:78:c2:67:
1c:8e:50:54:8c:16:06:a8:e8:45:35:52:fc:e2:60:f7:07:1b:
ca:d4:42:bc:0f:83:77:c6:90:8c:57:e7:8b:79:6b:cf:82:32:
bc:f2:af:89:aa:bc:b5:9c:ef:1e:ee:2b:74:ac:2c:c3:5c:73:
94:ab:c9:de:a0:e2:c4:61:48:bd:61:8f:d5:df:5c:45:d8:c4:
f6:76:28:bf:71:d4:06:dd:7a:a7:fb:2d:8c:a8:ba:2a:7c:4d:
ab:6b:c5:2a:33:25:9e:f6:f9:f3:51:70:aa:ac:36:07:4d:69:
8d:14:bd:34:2a:30:9a:d9:18:02:71:d7:f2:52:9d:4a:68:f5:
ae:d0:de:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:40 2026 by rpki-client