Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
File: ruxDT4IchrfuYxZpHXHMYcQMNGw.mft (raw, json)
Hash identifier: Y7DkfT1ofj4hS/fiK/uXl+0cgwR7Dgi2qEQx1lmJpBE=
Subject key identifier: E7:D2:9F:50:1F:72:D7:08:7C:A4:8E:11:76:F1:36:92:7E:76:59:BC
Authority key identifier: AE:EC:43:4F:82:1C:86:B7:EE:63:16:69:1D:71:CC:61:C4:0C:34:6C
Certificate issuer: /CN=aeec434f821c86b7ee6316691d71cc61c40c346c
Certificate serial: 019D2960B86E1D998C34CCBD917E9721A416
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
Manifest number: 0DB6
Signing time: Thu 26 Mar 2026 09:01:37 +0000
Manifest this update: Thu 26 Mar 2026 09:01:37 +0000
Manifest next update: Fri 27 Mar 2026 09:01:37 +0000
Files and hashes: 1: hx04DxiZAHeQYm7pOZmel5U9TOA.roa (hash: AjIfJ2c3ZWWZTkNvhuqTyJOvutKGVYOaZ7ocJjjxqUY=)
2: ruxDT4IchrfuYxZpHXHMYcQMNGw.crl (hash: ZW08l0d0qvn7Vmlc5LfS2cy1celvhO+9DbGw/F72epA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:b8:6e:1d:99:8c:34:cc:bd:91:7e:97:21:a4:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeec434f821c86b7ee6316691d71cc61c40c346c
Validity
Not Before: Mar 26 09:01:37 2026 GMT
Not After : Mar 27 09:01:37 2026 GMT
Subject: CN=e7d29f501f72d7087ca48e1176f136927e7659bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:1b:45:b4:11:a1:c2:7f:42:89:87:d4:75:f6:
a4:83:5d:2d:df:2b:88:82:68:07:fd:df:10:3b:bb:
07:b0:48:d6:bf:e6:d2:d1:26:3d:21:82:4f:4a:65:
88:66:b9:a8:4c:bf:10:0f:5f:e1:32:55:b2:5c:8a:
4b:32:0b:83:2d:2c:86:dd:75:e3:99:f6:d9:08:bb:
69:8e:f7:a3:d0:85:4f:9d:6c:2f:c5:a5:fe:d5:57:
a7:a6:4c:66:6d:0e:71:45:5d:68:45:00:b7:f6:40:
2d:75:94:a8:af:37:f4:39:94:3a:43:ff:e8:1c:75:
ee:12:24:70:7f:f2:40:a7:e3:54:93:23:8e:48:df:
be:75:f5:39:47:66:9f:16:c4:d4:db:34:9b:73:0a:
6d:8f:0d:54:02:24:64:35:47:1d:25:9d:21:61:1e:
af:9f:07:04:af:ab:6b:aa:b6:d5:65:ab:f8:ee:9c:
aa:e8:5c:6f:84:a6:fe:92:71:57:f6:85:06:c2:52:
de:21:6a:a8:33:c3:cc:64:1d:b8:69:8c:28:20:5d:
38:83:2f:fd:40:12:6b:ed:d3:39:91:96:ca:b2:93:
fb:c2:98:dc:83:99:fd:79:0f:07:27:ee:06:a0:7e:
28:50:97:d8:a3:49:4b:b0:d9:50:cf:04:b4:08:c5:
c3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D2:9F:50:1F:72:D7:08:7C:A4:8E:11:76:F1:36:92:7E:76:59:BC
X509v3 Authority Key Identifier:
keyid:AE:EC:43:4F:82:1C:86:B7:EE:63:16:69:1D:71:CC:61:C4:0C:34:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:65:c0:f6:e1:46:7f:f9:17:59:6b:91:ec:1f:b3:81:ce:96:
2c:f5:ea:bb:18:49:54:fd:7c:f4:e5:1a:16:e3:86:d6:a3:f6:
56:de:3d:d6:f1:af:d9:92:84:55:7f:c5:ce:b6:5c:56:d1:07:
7d:2d:1d:36:2c:6a:2e:76:74:6b:65:1b:55:87:c0:63:b0:f7:
0c:7b:e3:c0:c4:58:cd:73:e2:7c:ef:fd:b4:92:99:0c:8b:93:
db:f1:b5:08:11:27:62:da:61:c8:97:e9:c5:5f:79:9e:9a:dd:
27:fb:7a:ee:87:b4:7d:83:af:21:53:72:c9:d7:84:9f:a9:5c:
6c:5e:d2:d8:66:13:30:15:e0:b2:4a:59:bf:98:5f:96:a3:69:
54:68:18:3e:f6:7c:99:0a:f7:b2:4e:42:8c:8d:be:e1:d2:02:
a2:a3:aa:cb:56:f7:7d:8e:27:a6:ba:03:1b:ae:82:85:ad:66:
3f:2d:2a:3a:58:f6:b7:08:18:c3:13:8b:62:84:9c:e9:c1:c1:
14:7d:b9:61:9a:e5:53:fa:d3:22:5d:3d:18:6d:01:34:ba:6f:
87:37:c6:1b:e3:69:53:58:35:20:8a:e8:29:79:62:22:25:56:
df:52:a1:3c:7a:5a:fe:64:30:80:56:01:59:16:16:b2:88:0a:
34:42:94:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYLhuHZmMNMy9kX6XIaQWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZWM0MzRmODIxYzg2YjdlZTYzMTY2OTFkNzFjYzYxYzQw
YzM0NmMwHhcNMjYwMzI2MDkwMTM3WhcNMjYwMzI3MDkwMTM3WjAzMTEwLwYDVQQD
EyhlN2QyOWY1MDFmNzJkNzA4N2NhNDhlMTE3NmYxMzY5MjdlNzY1OWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5BtFtBGhwn9CiYfUdfakg10t3yuI
gmgH/d8QO7sHsEjWv+bS0SY9IYJPSmWIZrmoTL8QD1/hMlWyXIpLMguDLSyG3XXj
mfbZCLtpjvej0IVPnWwvxaX+1VenpkxmbQ5xRV1oRQC39kAtdZSorzf0OZQ6Q//o
HHXuEiRwf/JAp+NUkyOOSN++dfU5R2afFsTU2zSbcwptjw1UAiRkNUcdJZ0hYR6v
nwcEr6trqrbVZav47pyq6FxvhKb+knFX9oUGwlLeIWqoM8PMZB24aYwoIF04gy/9
QBJr7dM5kZbKspP7wpjcg5n9eQ8HJ+4GoH4oUJfYo0lLsNlQzwS0CMXDVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOfSn1AfctcIfKSOEXbxNpJ+dlm8MB8GA1UdIwQY
MBaAFK7sQ0+CHIa37mMWaR1xzGHEDDRsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnV4RFQ0SWNocmZ1WXhacEhYSE1ZY1FNTkd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny80YjA3OTAtNTc3OC00ZjYxLWEwZWUt
OTEwZTA4MTBjYTk0LzEvcnV4RFQ0SWNocmZ1WXhacEhYSE1ZY1FNTkd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny80YjA3OTAtNTc3OC00ZjYxLWEwZWUtOTEwZTA4MTBjYTk0
LzEvcnV4RFQ0SWNocmZ1WXhacEhYSE1ZY1FNTkd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeWXA9uFG
f/kXWWuR7B+zgc6WLPXquxhJVP189OUaFuOG1qP2Vt491vGv2ZKEVX/FzrZcVtEH
fS0dNixqLnZ0a2UbVYfAY7D3DHvjwMRYzXPifO/9tJKZDIuT2/G1CBEnYtphyJfp
xV95nprdJ/t67oe0fYOvIVNyydeEn6lcbF7S2GYTMBXgskpZv5hflqNpVGgYPvZ8
mQr3sk5CjI2+4dICoqOqy1b3fY4nproDG66Cha1mPy0qOlj2twgYwxOLYoSc6cHB
FH25YZrlU/rTIl09GG0BNLpvhzfGG+NpU1g1IIroKXliIiVW31KhPHpa/mQwgFYB
WRYWsogKNEKUoQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:34:45 2026 by rpki-client