Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
File: ruxDT4IchrfuYxZpHXHMYcQMNGw.mft (raw, json)
Hash identifier: Z38z+6S9/D9nANxS4k6hUoC0IPpFlWOoZu+CBLe5GTM=
Subject key identifier: 97:5E:D8:46:E7:CB:5C:EF:F7:3C:32:6A:4A:ED:98:77:3C:F0:32:D0
Authority key identifier: AE:EC:43:4F:82:1C:86:B7:EE:63:16:69:1D:71:CC:61:C4:0C:34:6C
Certificate issuer: /CN=aeec434f821c86b7ee6316691d71cc61c40c346c
Certificate serial: 019F935B4167A6E21D8B675E49750DA283B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
Manifest number: 0EF6
Signing time: Fri 24 Jul 2026 09:00:58 +0000
Manifest this update: Fri 24 Jul 2026 09:00:58 +0000
Manifest next update: Sat 25 Jul 2026 09:00:58 +0000
Files and hashes: 1: hx04DxiZAHeQYm7pOZmel5U9TOA.roa (hash: AjIfJ2c3ZWWZTkNvhuqTyJOvutKGVYOaZ7ocJjjxqUY=)
2: ruxDT4IchrfuYxZpHXHMYcQMNGw.crl (hash: nqOQbstaPJ9BW7ONBVeIPHAQCMA53JiVP67VCLIMIsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:41:67:a6:e2:1d:8b:67:5e:49:75:0d:a2:83:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeec434f821c86b7ee6316691d71cc61c40c346c
Validity
Not Before: Jul 24 09:00:58 2026 GMT
Not After : Jul 25 09:00:58 2026 GMT
Subject: CN=975ed846e7cb5ceff73c326a4aed98773cf032d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2d:e9:29:11:6e:0e:ae:cd:89:89:82:a3:0f:
0f:7b:ad:1f:36:0c:5f:6c:a8:b0:97:10:75:f7:10:
60:54:f2:f9:bc:5f:ab:08:27:76:32:dc:cf:57:26:
eb:55:e2:69:09:28:a7:cc:6c:f0:80:2b:cd:a6:ef:
de:3a:c6:17:51:e1:1a:e3:07:3e:2e:37:ca:fa:f3:
36:f3:4c:b2:cb:ca:89:46:cb:bf:b4:25:b1:05:b1:
08:30:12:70:36:53:95:71:2b:07:22:6b:3e:54:83:
b0:84:15:27:04:13:64:06:1f:1a:35:7a:d6:e0:08:
70:73:49:10:c3:25:0b:d7:1c:cf:74:f3:43:ab:05:
2a:0f:4b:aa:1b:63:9f:77:65:a0:2c:c4:9b:39:1f:
7e:24:1d:70:d5:70:74:7a:59:42:54:2e:26:41:38:
e6:22:d3:7e:6a:19:0e:90:9d:8d:4e:55:22:ff:5a:
86:da:29:87:cc:46:a5:21:de:c0:44:8d:79:fb:ec:
92:e3:ad:c6:86:46:d9:81:ae:dc:d7:9e:a2:7d:aa:
02:9a:d3:97:a1:d3:63:3c:40:b0:50:cd:16:03:9f:
17:a5:da:7c:de:bc:44:30:27:a4:60:1b:be:c4:5f:
f5:2b:00:93:99:e6:2d:16:1e:ca:89:8a:08:f1:a1:
0a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:5E:D8:46:E7:CB:5C:EF:F7:3C:32:6A:4A:ED:98:77:3C:F0:32:D0
X509v3 Authority Key Identifier:
keyid:AE:EC:43:4F:82:1C:86:B7:EE:63:16:69:1D:71:CC:61:C4:0C:34:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c5:c7:ee:1a:b8:11:2a:4d:c5:bf:d6:80:01:00:90:d4:68:
7c:32:ea:25:16:72:8b:94:f0:64:ff:ea:3e:ab:ed:f1:3c:a0:
83:46:b8:2a:b1:16:2a:61:6c:57:2b:fd:a7:57:57:42:01:03:
98:0c:2c:19:4f:ed:19:f3:d4:1f:3c:be:b0:99:58:e9:a0:df:
57:41:f6:9e:19:cb:2e:7d:7b:c4:1f:1c:5f:b0:b9:86:b4:07:
0a:2e:9d:bc:fb:dd:62:c6:5d:34:f0:4f:51:6c:16:72:af:7e:
b9:70:56:1c:7b:8c:a1:de:6a:ca:51:87:0b:6e:d4:f4:cd:cc:
c9:e8:06:a8:12:9a:e3:43:73:47:d4:03:a0:e3:f8:42:45:cd:
9e:d5:07:8d:ff:61:e8:4e:d5:fe:1c:e4:27:2e:e4:73:10:47:
c0:bc:74:74:97:ed:e6:34:ac:42:20:e0:7f:74:f0:d2:ff:32:
00:3e:df:d4:a2:f6:d9:0c:a5:c6:1b:2b:ce:9a:5f:42:7d:81:
14:97:f8:48:18:d0:64:95:53:21:19:f9:88:85:55:2b:39:f8:
94:c7:b9:ae:0e:a2:b6:34:8c:51:4d:84:c5:dc:87:b7:fc:c0:
eb:ed:a8:60:35:5c:bf:8d:a6:13:e8:ad:d2:40:b7:f2:99:ea:
85:7e:6c:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TW0FnpuIdi2deSXUNooO3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZWM0MzRmODIxYzg2YjdlZTYzMTY2OTFkNzFjYzYxYzQw
YzM0NmMwHhcNMjYwNzI0MDkwMDU4WhcNMjYwNzI1MDkwMDU4WjAzMTEwLwYDVQQD
Eyg5NzVlZDg0NmU3Y2I1Y2VmZjczYzMyNmE0YWVkOTg3NzNjZjAzMmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0i3pKRFuDq7NiYmCow8Pe60fNgxf
bKiwlxB19xBgVPL5vF+rCCd2MtzPVybrVeJpCSinzGzwgCvNpu/eOsYXUeEa4wc+
LjfK+vM280yyy8qJRsu/tCWxBbEIMBJwNlOVcSsHIms+VIOwhBUnBBNkBh8aNXrW
4Ahwc0kQwyUL1xzPdPNDqwUqD0uqG2Ofd2WgLMSbOR9+JB1w1XB0ellCVC4mQTjm
ItN+ahkOkJ2NTlUi/1qG2imHzEalId7ARI15++yS463GhkbZga7c156ifaoCmtOX
odNjPECwUM0WA58Xpdp83rxEMCekYBu+xF/1KwCTmeYtFh7KiYoI8aEKYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJde2Ebny1zv9zwyakrtmHc88DLQMB8GA1UdIwQY
MBaAFK7sQ0+CHIa37mMWaR1xzGHEDDRsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnV4RFQ0SWNocmZ1WXhacEhYSE1ZY1FNTkd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny80YjA3OTAtNTc3OC00ZjYxLWEwZWUt
OTEwZTA4MTBjYTk0LzEvcnV4RFQ0SWNocmZ1WXhacEhYSE1ZY1FNTkd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny80YjA3OTAtNTc3OC00ZjYxLWEwZWUtOTEwZTA4MTBjYTk0
LzEvcnV4RFQ0SWNocmZ1WXhacEhYSE1ZY1FNTkd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATMXH7hq4
ESpNxb/WgAEAkNRofDLqJRZyi5TwZP/qPqvt8Tygg0a4KrEWKmFsVyv9p1dXQgED
mAwsGU/tGfPUHzy+sJlY6aDfV0H2nhnLLn17xB8cX7C5hrQHCi6dvPvdYsZdNPBP
UWwWcq9+uXBWHHuMod5qylGHC27U9M3MyegGqBKa40NzR9QDoOP4QkXNntUHjf9h
6E7V/hzkJy7kcxBHwLx0dJft5jSsQiDgf3Tw0v8yAD7f1KL22QylxhsrzppfQn2B
FJf4SBjQZJVTIRn5iIVVKzn4lMe5rg6itjSMUU2ExdyHt/zA6+2oYDVcv42mE+it
0kC38pnqhX5sJg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:17:16 2026 by rpki-client