Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.mft
File: RUH1XBZZBCT7NMZeDi6sIogkcNs.mft (raw, json)
Hash identifier: VZjtOOZaOn6fegmZXOit/fdhGWHsZSpuU9mRtJSKTEc=
Subject key identifier: 0D:13:E9:29:1B:2A:FB:72:77:32:74:A4:EB:82:DE:C4:F8:B4:48:E0
Authority key identifier: 45:41:F5:5C:16:59:04:24:FB:34:C6:5E:0E:2E:AC:22:88:24:70:DB
Certificate issuer: /CN=4541f55c16590424fb34c65e0e2eac22882470db
Certificate serial: 019D270393B9D7DA87B26E211C85F00B8645
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RUH1XBZZBCT7NMZeDi6sIogkcNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.mft
Manifest number: 08C6
Signing time: Wed 25 Mar 2026 22:00:38 +0000
Manifest this update: Wed 25 Mar 2026 22:00:38 +0000
Manifest next update: Thu 26 Mar 2026 22:00:38 +0000
Files and hashes: 1: RUH1XBZZBCT7NMZeDi6sIogkcNs.crl (hash: xcOznTvpLL/PxosWQkaeN8hdaUhdG+fS/O+er0XvXbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RUH1XBZZBCT7NMZeDi6sIogkcNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:93:b9:d7:da:87:b2:6e:21:1c:85:f0:0b:86:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4541f55c16590424fb34c65e0e2eac22882470db
Validity
Not Before: Mar 25 22:00:38 2026 GMT
Not After : Mar 26 22:00:38 2026 GMT
Subject: CN=0d13e9291b2afb72773274a4eb82dec4f8b448e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:48:12:16:d9:1d:ed:6d:f9:58:f6:8a:dc:31:
32:3d:19:dd:10:53:8d:c4:32:2b:1d:92:3d:79:f5:
86:54:28:a7:58:d3:7b:5c:63:20:15:4f:e7:93:56:
42:2f:f2:b6:3f:af:da:1e:ab:32:fa:f3:9c:0b:fe:
d0:d8:31:d0:76:b0:3f:01:91:d3:31:7c:2a:3c:34:
51:d7:31:b8:76:13:0e:40:9b:c4:53:38:0c:e6:29:
e9:45:6c:8e:17:8f:3e:ae:d9:89:a3:e5:f1:03:61:
2f:53:80:1c:90:36:69:65:48:1e:a6:34:49:1a:10:
0f:88:98:14:20:90:54:bc:de:30:72:60:65:8c:f9:
66:d9:0e:40:d1:96:9e:44:f7:92:a0:fd:5f:f3:e1:
9b:03:2e:8d:1e:3a:29:df:61:e0:1b:c6:a2:5b:73:
16:58:de:b3:6d:f0:76:b7:c5:05:f4:53:4d:32:5d:
8d:d8:9a:9c:62:a7:bf:03:a0:04:ff:c6:b9:51:0a:
fe:f4:58:e1:0c:f7:6a:6d:69:b4:b0:3a:a2:30:fd:
26:5c:bb:9d:64:9b:c0:3e:8b:b6:fa:a7:73:86:08:
03:bb:18:ac:25:90:e0:b9:1b:bd:04:58:50:65:a2:
f9:be:99:41:12:e0:5d:a8:01:85:a1:ff:d1:9c:2e:
94:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:13:E9:29:1B:2A:FB:72:77:32:74:A4:EB:82:DE:C4:F8:B4:48:E0
X509v3 Authority Key Identifier:
keyid:45:41:F5:5C:16:59:04:24:FB:34:C6:5E:0E:2E:AC:22:88:24:70:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RUH1XBZZBCT7NMZeDi6sIogkcNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:80:94:0a:10:53:b9:d9:2d:46:4c:19:ab:50:e4:f1:2c:37:
1d:ec:15:4a:39:a9:13:51:a3:b8:97:d2:20:65:38:1f:0e:70:
4b:a6:16:b6:e4:e5:6e:a2:67:54:2f:ea:ae:09:8d:ff:a3:5b:
31:43:42:c1:08:29:83:20:16:53:7c:f4:02:10:99:6d:6b:41:
3e:36:d3:12:c3:4b:38:f4:e3:b3:cb:67:53:ec:77:a9:b3:c2:
e5:4b:06:77:88:b9:90:a0:3c:90:34:93:3f:40:86:d2:28:b2:
9f:72:06:26:76:68:67:d6:64:7a:40:f9:56:41:79:52:c0:3c:
c3:28:5d:e8:19:72:74:72:49:67:fb:00:8f:09:bb:4f:54:f2:
20:7b:61:d4:c2:ee:47:85:43:e2:4a:ad:ad:76:a7:4a:87:36:
d7:4a:cf:83:18:f9:e8:60:2f:f4:b5:73:d0:6a:9b:5b:39:6e:
da:3b:01:0a:e4:f9:cc:db:ad:1c:88:6a:ad:62:f7:63:42:b3:
a6:84:de:0d:72:35:3a:55:80:c1:e9:3f:b1:73:bd:46:c2:30:
1c:59:78:ff:e3:fc:42:99:4c:f3:c5:eb:fc:07:5a:7a:01:35:
8b:2e:ce:9a:33:3e:1f:3e:d2:42:eb:89:3d:62:44:cd:89:7f:
73:6c:c1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:56 2026 by rpki-client