Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
File: RusRr5NV2porXfc-zdf9CWektYw.mft (raw, json)
Hash identifier: 4r0pb6q8+aAUuDLPGyxySwt7TJTF5fsiPJkfh1NsahA=
Subject key identifier: D8:01:A9:06:88:E1:38:F4:24:F4:95:88:23:86:04:58:35:49:B0:5A
Authority key identifier: 46:EB:11:AF:93:55:DA:9A:2B:5D:F7:3E:CD:D7:FD:09:67:A4:B5:8C
Certificate issuer: /CN=46eb11af9355da9a2b5df73ecdd7fd0967a4b58c
Certificate serial: 01A0DCBC391B37C3A6863EFAC8BB43A61224
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
Manifest number: 1A7A
Signing time: Sat 26 Sep 2026 08:01:57 +0000
Manifest this update: Sat 26 Sep 2026 08:01:57 +0000
Manifest next update: Sun 27 Sep 2026 08:01:57 +0000
Files and hashes: 1: RQrjDU4V5o7Y6FMae1KeS7H872g.roa (hash: 8xk+8pGV1p6Nt4ziixJs8iuoymfnnWJ5uoc1S8n08z8=)
2: RusRr5NV2porXfc-zdf9CWektYw.crl (hash: rJ8ovom6ROxZ8ssMwkuuv39O658rPPRhzEi+EIcgcAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:bc:39:1b:37:c3:a6:86:3e:fa:c8:bb:43:a6:12:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46eb11af9355da9a2b5df73ecdd7fd0967a4b58c
Validity
Not Before: Sep 26 08:01:57 2026 GMT
Not After : Sep 27 08:01:57 2026 GMT
Subject: CN=d801a90688e138f424f49588238604583549b05a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d0:ec:6f:20:1a:bf:14:7b:3a:15:e3:7b:c1:
5f:5d:21:bb:12:8c:31:6d:04:fd:dd:d2:4c:e8:70:
bd:c7:f7:56:30:92:c8:80:4a:46:6b:e3:87:a8:89:
e5:5e:c2:a4:97:7a:c6:cd:d1:1a:6d:8f:af:7c:27:
99:4a:f4:41:ac:d1:1e:32:4a:5f:a4:9a:4b:58:50:
f9:7e:dc:12:32:e5:a3:71:2e:f8:27:43:fe:ac:6f:
d2:7b:1f:33:1a:b1:26:66:c5:7e:82:f1:16:28:d1:
09:2f:e9:d4:50:a6:e5:f2:d5:cc:0f:1b:f7:08:14:
56:d4:78:bf:12:79:b4:4b:af:a5:f3:2e:19:1e:f4:
45:e4:91:2c:fb:62:ee:2c:59:d4:9b:74:85:a5:59:
33:fd:06:3a:39:58:08:fb:07:c4:02:c6:3e:d8:de:
45:b4:14:53:f0:84:7a:fe:4d:31:d7:0c:2a:62:08:
3c:81:9e:d4:14:ad:c4:d5:38:69:f7:13:6b:11:e8:
0a:4e:0a:16:f4:95:4d:a7:ee:c4:2b:50:e3:b8:66:
70:b7:17:5c:a0:0d:80:cf:45:28:55:d2:08:38:0c:
15:3a:1c:56:92:fa:06:ac:a6:13:f7:de:34:af:53:
e0:7b:7f:c1:9f:f8:8d:48:59:3d:cb:8a:97:a7:ef:
bb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:01:A9:06:88:E1:38:F4:24:F4:95:88:23:86:04:58:35:49:B0:5A
X509v3 Authority Key Identifier:
keyid:46:EB:11:AF:93:55:DA:9A:2B:5D:F7:3E:CD:D7:FD:09:67:A4:B5:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:f3:e3:4f:89:69:47:89:70:85:33:77:56:88:07:71:98:64:
47:18:63:d5:06:b4:96:e7:cc:cb:58:b9:73:6d:0f:82:b7:27:
05:dc:41:25:ec:56:8d:10:84:c7:60:28:b3:c6:f4:b4:f7:f8:
8d:1c:5f:93:8a:9e:d0:87:78:ef:04:29:0f:e5:c5:50:42:e8:
9d:e8:92:84:8f:a3:89:8b:3f:6e:ef:9e:fd:21:f0:1c:8e:86:
8b:d6:24:41:56:6c:50:ee:ad:43:8e:ad:ff:dd:1b:02:41:d0:
f6:c0:ec:97:15:20:c1:a4:58:a3:32:6b:5b:c1:5b:a6:db:69:
2f:24:3c:1c:33:99:32:e1:07:8f:77:cf:8e:96:af:f8:03:f1:
c6:cf:ad:11:a9:c1:17:7c:b4:db:8e:e5:67:ae:2d:d1:ee:0c:
0e:4b:2a:fb:a0:78:ab:34:3e:b8:b5:39:cb:82:51:f7:57:f3:
d6:a8:0a:8a:30:10:2d:2a:35:a6:20:53:c3:07:36:1b:de:f5:
12:35:c6:f2:af:61:08:ea:bf:02:83:e9:90:8d:02:19:1d:78:
f7:04:a7:65:53:fe:cc:73:7d:ae:e5:c5:bd:ab:63:3a:cc:03:
2d:ec:25:8b:fb:a8:6a:2d:ac:a2:aa:4c:26:ff:d9:cf:15:46:
a9:b1:79:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:16:09 2026 by rpki-client