Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/3ba160-e945-4d56-b129-52c19758fa15/1/USd7w4wS4ELt31bX519QVjxL0ic.mft
File: USd7w4wS4ELt31bX519QVjxL0ic.mft (raw, json)
Hash identifier: +qgUi+E2lASxKNFn8etvfbCWBv5F19Fos+AewI5emow=
Subject key identifier: FF:86:50:CB:62:20:57:11:0F:F1:72:EF:08:91:1D:24:24:09:8F:45
Authority key identifier: 51:27:7B:C3:8C:12:E0:42:ED:DF:56:D7:E7:5F:50:56:3C:4B:D2:27
Certificate issuer: /CN=51277bc38c12e042eddf56d7e75f50563c4bd227
Certificate serial: 01A1A1125A0D6061A59860E522716960F382
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/USd7w4wS4ELt31bX519QVjxL0ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/3ba160-e945-4d56-b129-52c19758fa15/1/USd7w4wS4ELt31bX519QVjxL0ic.mft
Manifest number: 1AD5
Signing time: Tue 03 Nov 2026 11:01:36 +0000
Manifest this update: Tue 03 Nov 2026 11:01:36 +0000
Manifest next update: Wed 04 Nov 2026 11:01:36 +0000
Files and hashes: 1: D4QRrUObCGq3FWyTZQYsdDxIC-Y.asa (hash: f66FrX9VHylFdBsRAbYxdFz6/ASysid9BFIKkasqYLk=)
2: HVAKOChJvzlPOcqJ_ehcMgXUK9o.roa (hash: 2mWGKvxbtg/GycElX7B4p0Awmc5Qwctw5xexjAFCbUI=)
3: USd7w4wS4ELt31bX519QVjxL0ic.crl (hash: khlx7JlTSMKC3ez7ZNs9L/s4vkkSH+PTaB6kcZgSZlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/3ba160-e945-4d56-b129-52c19758fa15/1/USd7w4wS4ELt31bX519QVjxL0ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/3ba160-e945-4d56-b129-52c19758fa15/1/USd7w4wS4ELt31bX519QVjxL0ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/USd7w4wS4ELt31bX519QVjxL0ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 11:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a1:12:5a:0d:60:61:a5:98:60:e5:22:71:69:60:f3:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51277bc38c12e042eddf56d7e75f50563c4bd227
Validity
Not Before: Nov 3 11:01:36 2026 GMT
Not After : Nov 4 11:01:36 2026 GMT
Subject: CN=ff8650cb622057110ff172ef08911d2424098f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b8:54:5f:b7:7a:fb:8d:20:04:59:9e:62:47:
15:09:29:ab:b7:da:4f:c9:e0:35:95:b5:ff:ee:27:
88:b9:ce:8a:45:6d:d7:89:7b:ea:71:8a:44:e5:f5:
4b:a4:f5:80:a6:5d:fd:5d:ec:ca:16:35:9d:17:1a:
aa:da:3d:d5:16:95:f1:57:ee:34:76:aa:e7:4c:66:
81:37:a3:48:33:c9:a0:15:62:8a:3f:b4:43:f1:81:
5c:d0:d6:70:88:6a:37:7a:59:12:f2:13:a3:7f:0f:
f6:bf:02:ed:28:8c:7d:ff:b7:4b:57:42:4e:c4:79:
47:e3:cb:99:da:65:c2:e7:d9:72:2f:5e:90:77:4a:
5a:16:7a:33:b6:c5:5a:9c:2e:cd:72:cd:94:71:4b:
83:01:b8:07:23:66:64:9d:cd:3a:e3:72:50:38:aa:
bf:c8:7c:88:1e:ef:ab:f5:ef:28:bf:2d:65:08:f0:
1d:5d:72:20:f0:38:ad:a2:30:eb:47:d1:bf:58:ee:
cb:e8:3a:d5:47:e5:e9:17:e9:ec:b2:2d:52:ef:10:
f6:4a:20:a4:2f:9a:26:62:4f:08:01:2d:94:77:ec:
87:9c:15:7f:91:3f:90:fe:24:4c:f6:76:c6:21:53:
37:2d:4a:74:a8:ab:72:32:3e:91:ab:1e:63:dd:5a:
3d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:86:50:CB:62:20:57:11:0F:F1:72:EF:08:91:1D:24:24:09:8F:45
X509v3 Authority Key Identifier:
keyid:51:27:7B:C3:8C:12:E0:42:ED:DF:56:D7:E7:5F:50:56:3C:4B:D2:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/USd7w4wS4ELt31bX519QVjxL0ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3ba160-e945-4d56-b129-52c19758fa15/1/USd7w4wS4ELt31bX519QVjxL0ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3ba160-e945-4d56-b129-52c19758fa15/1/USd7w4wS4ELt31bX519QVjxL0ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:c4:c6:04:96:df:b9:96:d6:b3:d3:98:c9:53:31:07:a7:49:
9e:11:27:af:95:9e:94:4e:e6:45:74:3b:a4:78:e8:e1:54:87:
9a:11:a9:57:27:d6:26:65:36:eb:8c:3c:ce:f4:07:cd:76:82:
1c:3c:24:5c:35:93:a9:64:e4:6d:3f:64:21:e7:a0:8c:9a:21:
12:dd:fd:41:6b:af:f3:aa:6e:fc:01:a4:63:94:1b:26:dc:c0:
bf:1e:ae:97:a0:db:6b:fc:2b:5f:d0:9a:a2:9d:93:32:af:74:
b3:44:08:4c:cc:2a:54:5e:90:02:44:aa:25:4c:ab:af:fb:52:
a6:14:c0:c1:79:7a:2e:eb:e4:37:c5:18:48:82:ee:e5:88:88:
3b:ce:70:61:64:49:a8:d3:f5:ae:72:1e:ca:c7:50:d6:83:ca:
f1:34:b6:4e:d5:50:28:0b:4e:14:ae:a7:36:23:4d:3b:24:18:
99:f9:83:a1:11:0d:a2:ad:df:48:8a:e1:25:29:15:72:a0:d0:
fe:80:5f:51:92:57:f3:8c:a7:a7:9e:d1:a2:52:15:94:11:24:
27:ce:c3:b7:c7:11:12:b3:3c:c7:57:7e:a4:39:30:10:4e:8b:
0f:5c:a7:4f:01:8b:43:a6:a0:27:c0:9b:10:9b:7e:9a:48:e3:
57:2f:01:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 21:42:46 2026 by rpki-client