Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/3ba160-e945-4d56-b129-52c19758fa15/1/USd7w4wS4ELt31bX519QVjxL0ic.mft
File: USd7w4wS4ELt31bX519QVjxL0ic.mft (raw, json)
Hash identifier: GPTatUy2aK3hi80saL0oBGIb0MWQGJGs3kLOSXY9u7I=
Subject key identifier: F1:AF:17:14:94:B2:3E:2B:EB:E0:02:E9:69:FB:16:FC:4C:FF:DB:4D
Authority key identifier: 51:27:7B:C3:8C:12:E0:42:ED:DF:56:D7:E7:5F:50:56:3C:4B:D2:27
Certificate issuer: /CN=51277bc38c12e042eddf56d7e75f50563c4bd227
Certificate serial: 019FF83583D302AC93D28C2013582A6738F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/USd7w4wS4ELt31bX519QVjxL0ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/3ba160-e945-4d56-b129-52c19758fa15/1/USd7w4wS4ELt31bX519QVjxL0ic.mft
Manifest number: 19F9
Signing time: Wed 12 Aug 2026 23:01:24 +0000
Manifest this update: Wed 12 Aug 2026 23:01:24 +0000
Manifest next update: Thu 13 Aug 2026 23:01:24 +0000
Files and hashes: 1: D4QRrUObCGq3FWyTZQYsdDxIC-Y.asa (hash: f66FrX9VHylFdBsRAbYxdFz6/ASysid9BFIKkasqYLk=)
2: HVAKOChJvzlPOcqJ_ehcMgXUK9o.roa (hash: 2mWGKvxbtg/GycElX7B4p0Awmc5Qwctw5xexjAFCbUI=)
3: USd7w4wS4ELt31bX519QVjxL0ic.crl (hash: /FKXVG2rVZzCFB7Z4mQpKReD3Fhf4NOL3j7ZP/4+Cvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/3ba160-e945-4d56-b129-52c19758fa15/1/USd7w4wS4ELt31bX519QVjxL0ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/3ba160-e945-4d56-b129-52c19758fa15/1/USd7w4wS4ELt31bX519QVjxL0ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/USd7w4wS4ELt31bX519QVjxL0ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 23:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:35:83:d3:02:ac:93:d2:8c:20:13:58:2a:67:38:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51277bc38c12e042eddf56d7e75f50563c4bd227
Validity
Not Before: Aug 12 23:01:24 2026 GMT
Not After : Aug 13 23:01:24 2026 GMT
Subject: CN=f1af171494b23e2bebe002e969fb16fc4cffdb4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:61:d3:03:c7:2f:70:48:77:ea:d6:83:2d:9d:
b3:70:62:45:cd:b1:5e:c3:ca:c2:d3:48:b0:b6:2b:
f2:88:27:e9:b5:9d:4c:ad:3c:fb:78:ff:53:45:40:
0f:e3:b8:d6:de:00:5b:2c:7a:74:03:f0:c8:da:36:
db:f0:67:b0:f7:54:af:25:27:68:03:e7:f1:15:af:
11:f1:3b:79:cb:13:71:16:33:de:ec:01:25:9b:40:
1a:64:ff:e6:e9:af:b3:95:c0:20:bb:09:41:f4:e6:
d1:5d:85:fd:44:05:a4:82:a1:df:10:3b:a6:96:fc:
75:73:8b:8a:d9:55:d0:d4:47:74:be:0a:14:19:e6:
04:39:64:b6:c3:05:aa:77:88:57:9d:ae:89:e8:bb:
d6:f3:a8:f2:7d:2f:3e:07:11:0b:02:7b:c6:53:3d:
d4:ca:85:76:e4:94:97:e1:8d:20:39:f0:cc:8e:2b:
b1:43:ee:ed:cb:71:4d:a3:3f:47:76:31:c5:0f:37:
27:2b:61:a9:a0:02:15:a1:73:81:17:04:0f:59:d7:
29:a4:c0:06:7b:94:40:4b:28:ce:38:d5:9f:ac:da:
ef:5f:b7:34:72:e8:3a:8c:c4:1b:66:21:7c:f7:68:
2b:ae:d5:73:9a:82:97:76:83:14:88:9a:5a:eb:d0:
b1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:AF:17:14:94:B2:3E:2B:EB:E0:02:E9:69:FB:16:FC:4C:FF:DB:4D
X509v3 Authority Key Identifier:
keyid:51:27:7B:C3:8C:12:E0:42:ED:DF:56:D7:E7:5F:50:56:3C:4B:D2:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/USd7w4wS4ELt31bX519QVjxL0ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3ba160-e945-4d56-b129-52c19758fa15/1/USd7w4wS4ELt31bX519QVjxL0ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3ba160-e945-4d56-b129-52c19758fa15/1/USd7w4wS4ELt31bX519QVjxL0ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:97:a3:e9:93:02:8c:46:cf:9e:2c:01:3c:f6:0e:c9:b8:9f:
9a:09:24:49:39:fe:28:6b:54:20:74:be:d6:02:24:f2:be:3b:
20:f9:e7:9b:2d:14:78:e1:d1:6c:9d:d6:fa:ba:5e:83:e6:4c:
40:78:b1:74:e0:f3:d8:1e:1a:4b:8f:79:7f:e1:2b:4c:a7:72:
e9:fb:61:0b:bc:a5:b7:43:86:db:a3:49:34:3a:1c:68:2c:7b:
1b:fa:28:ab:f9:21:40:2d:5e:a2:b2:79:bc:a5:0d:aa:44:4f:
21:8b:78:d0:2f:ab:1a:cb:35:5a:4e:3d:d3:2d:d3:6f:88:f0:
0b:48:1a:7d:d4:df:71:99:1c:8b:43:d5:31:a3:67:e4:72:4e:
00:a1:7b:ad:08:65:a2:b2:39:cf:ec:27:4c:76:ce:1d:96:7e:
47:92:d8:2e:59:60:b4:be:6e:7c:7b:6f:d2:ab:99:7e:bf:60:
33:15:f9:60:66:30:6f:9f:b4:a7:c6:30:02:85:22:8d:fa:2b:
3c:69:39:bb:3b:1d:55:6b:88:e9:35:9c:de:19:8f:61:ff:e0:
f4:7a:8a:4a:52:fa:12:f2:bd:09:52:2b:6b:00:6c:bb:03:6f:
a6:13:e2:df:f5:c8:79:bd:a8:57:48:1a:2a:4e:05:d6:75:d9:
1f:71:81:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:03:12 2026 by rpki-client