Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
File: RusRr5NV2porXfc-zdf9CWektYw.mft (raw, json)
Hash identifier: 0B6yQTzHRJrOUCCBIZRPfdsjSvxK4Mhjt3ZYJ8UYXQI=
Subject key identifier: BD:18:91:17:06:CC:66:C6:92:80:14:55:43:4D:03:C3:CE:61:3D:E1
Authority key identifier: 46:EB:11:AF:93:55:DA:9A:2B:5D:F7:3E:CD:D7:FD:09:67:A4:B5:8C
Certificate issuer: /CN=46eb11af9355da9a2b5df73ecdd7fd0967a4b58c
Certificate serial: 019F927FDF5C767D00235056FE6A6C9F0BF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
Manifest number: 19CF
Signing time: Fri 24 Jul 2026 05:01:21 +0000
Manifest this update: Fri 24 Jul 2026 05:01:21 +0000
Manifest next update: Sat 25 Jul 2026 05:01:21 +0000
Files and hashes: 1: RQrjDU4V5o7Y6FMae1KeS7H872g.roa (hash: 8xk+8pGV1p6Nt4ziixJs8iuoymfnnWJ5uoc1S8n08z8=)
2: RusRr5NV2porXfc-zdf9CWektYw.crl (hash: ngROHt51akJLO1otcYBLqBG20zr47x2d/xkM6jKzTpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:df:5c:76:7d:00:23:50:56:fe:6a:6c:9f:0b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46eb11af9355da9a2b5df73ecdd7fd0967a4b58c
Validity
Not Before: Jul 24 05:01:21 2026 GMT
Not After : Jul 25 05:01:21 2026 GMT
Subject: CN=bd18911706cc66c692801455434d03c3ce613de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:13:b4:9e:3a:9f:b2:b6:da:2f:48:eb:e0:6a:
e5:d0:9a:d4:7a:a3:25:e7:58:8d:53:c5:f8:ff:ad:
b8:47:fa:3c:74:4d:2a:a5:d1:d8:d5:c9:49:f4:7c:
b5:c1:52:8e:46:fe:fc:5f:18:03:5d:a8:f4:30:65:
6a:56:51:c2:b0:08:30:a4:f7:c4:55:57:b4:80:fb:
44:db:83:30:1e:ce:e8:c4:54:8d:93:9d:2d:57:e4:
f6:e9:26:c7:ac:4e:94:fd:fe:e9:7f:e4:e3:15:00:
fd:39:b0:c3:67:d0:58:0f:61:56:f5:d1:19:3e:4f:
0f:1f:10:20:e5:a8:f0:cf:04:2a:f5:4a:aa:23:de:
c2:42:eb:b3:3c:a1:31:de:ee:ca:24:6f:3f:14:6e:
68:b7:3d:2c:68:19:cb:70:8d:ab:f3:2d:4b:bf:1a:
3d:3d:84:c2:33:86:94:90:1a:8e:51:2b:f2:b3:62:
9b:e9:17:e4:1b:cd:7f:fd:bf:5c:28:0b:c5:88:dc:
cd:ba:d7:f3:17:d4:e4:8f:e8:68:6c:13:1a:16:86:
e6:32:32:dd:78:bf:ec:2b:05:63:d9:f1:29:a3:52:
34:58:51:ac:e0:9a:01:a0:a8:90:3d:84:d4:76:55:
a8:44:ef:ae:3f:b8:02:d5:0a:b6:45:69:00:0a:75:
04:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:18:91:17:06:CC:66:C6:92:80:14:55:43:4D:03:C3:CE:61:3D:E1
X509v3 Authority Key Identifier:
keyid:46:EB:11:AF:93:55:DA:9A:2B:5D:F7:3E:CD:D7:FD:09:67:A4:B5:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:5d:d1:0e:20:3f:8f:0d:af:7d:b0:00:cb:30:a4:67:80:85:
d6:74:7d:75:b6:ed:75:5a:d3:58:92:08:38:62:00:bc:a4:e8:
9f:f8:d8:09:4b:4e:b4:44:c6:29:50:25:c8:73:99:e6:e3:bc:
a8:9c:d9:83:2a:db:bd:53:a2:25:f0:2a:05:3a:92:e8:8c:68:
da:17:10:7e:d9:78:0a:ea:02:7b:b2:d2:0c:66:8f:30:5a:f2:
9f:5e:d5:b5:7f:6b:c9:b5:45:cf:46:c5:5e:52:6b:5e:93:93:
32:e6:f8:e1:11:23:d4:44:7a:41:ba:3a:06:d2:5b:a8:81:c7:
c6:f5:d4:1b:47:3f:e9:37:d3:18:61:7c:c8:a0:82:34:00:d8:
cf:de:6f:3b:23:43:b6:1d:37:4d:2c:4d:94:2c:06:cd:92:41:
bd:fd:06:7f:6c:5f:6d:c6:bf:88:e6:8e:7f:04:22:52:f7:a8:
44:79:10:c3:4d:a1:fe:e1:88:15:db:f7:13:2f:35:5b:ed:66:
8f:d5:72:24:dc:57:16:fb:1f:38:26:81:8d:0f:e1:c7:d8:44:
7c:29:c8:4c:26:d4:95:15:d8:3d:e1:af:63:d1:e7:82:e3:63:
40:53:04:eb:d1:4d:90:f2:79:c1:92:d3:c4:74:fa:82:a0:c2:
a5:b0:90:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Sf99cdn0AI1BW/mpsnwvxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ZWIxMWFmOTM1NWRhOWEyYjVkZjczZWNkZDdmZDA5Njdh
NGI1OGMwHhcNMjYwNzI0MDUwMTIxWhcNMjYwNzI1MDUwMTIxWjAzMTEwLwYDVQQD
EyhiZDE4OTExNzA2Y2M2NmM2OTI4MDE0NTU0MzRkMDNjM2NlNjEzZGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBO0njqfsrbaL0jr4Grl0JrUeqMl
51iNU8X4/624R/o8dE0qpdHY1clJ9Hy1wVKORv78XxgDXaj0MGVqVlHCsAgwpPfE
VVe0gPtE24MwHs7oxFSNk50tV+T26SbHrE6U/f7pf+TjFQD9ObDDZ9BYD2FW9dEZ
Pk8PHxAg5ajwzwQq9UqqI97CQuuzPKEx3u7KJG8/FG5otz0saBnLcI2r8y1Lvxo9
PYTCM4aUkBqOUSvys2Kb6RfkG81//b9cKAvFiNzNutfzF9Tkj+hobBMaFobmMjLd
eL/sKwVj2fEpo1I0WFGs4JoBoKiQPYTUdlWoRO+uP7gC1Qq2RWkACnUEMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL0YkRcGzGbGkoAUVUNNA8POYT3hMB8GA1UdIwQY
MBaAFEbrEa+TVdqaK133Ps3X/QlnpLWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnVzUnI1TlYycG9yWGZjLXpkZjlDV2VrdFl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8xYTQzZjAtYzAyNy00ZmRjLTg1MTUt
NDVmNDk2ZjJmZTc1LzEvUnVzUnI1TlYycG9yWGZjLXpkZjlDV2VrdFl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8xYTQzZjAtYzAyNy00ZmRjLTg1MTUtNDVmNDk2ZjJmZTc1
LzEvUnVzUnI1TlYycG9yWGZjLXpkZjlDV2VrdFl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPl3RDiA/
jw2vfbAAyzCkZ4CF1nR9dbbtdVrTWJIIOGIAvKTon/jYCUtOtETGKVAlyHOZ5uO8
qJzZgyrbvVOiJfAqBTqS6Ixo2hcQftl4CuoCe7LSDGaPMFryn17VtX9rybVFz0bF
XlJrXpOTMub44REj1ER6Qbo6BtJbqIHHxvXUG0c/6TfTGGF8yKCCNADYz95vOyND
th03TSxNlCwGzZJBvf0Gf2xfbca/iOaOfwQiUveoRHkQw02h/uGIFdv3Ey81W+1m
j9VyJNxXFvsfOCaBjQ/hx9hEfCnITCbUlRXYPeGvY9HnguNjQFME69FNkPJ5wZLT
xHT6gqDCpbCQLw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:29:51 2026 by rpki-client