Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
File: ruxDT4IchrfuYxZpHXHMYcQMNGw.mft (raw, json)
Hash identifier: fol9eQADWafbM2dvDc6Zcggbx+kKvwxa87pdIF5Fnuw=
Subject key identifier: 25:E7:D7:BD:1D:4D:AE:7A:96:5E:C1:CB:57:8E:CB:D0:CB:22:81:5E
Authority key identifier: AE:EC:43:4F:82:1C:86:B7:EE:63:16:69:1D:71:CC:61:C4:0C:34:6C
Certificate issuer: /CN=aeec434f821c86b7ee6316691d71cc61c40c346c
Certificate serial: 019E1EA2A86E23E2CB9510EF05107353A928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
Manifest number: 0E35
Signing time: Wed 13 May 2026 00:00:36 +0000
Manifest this update: Wed 13 May 2026 00:00:36 +0000
Manifest next update: Thu 14 May 2026 00:00:36 +0000
Files and hashes: 1: hx04DxiZAHeQYm7pOZmel5U9TOA.roa (hash: AjIfJ2c3ZWWZTkNvhuqTyJOvutKGVYOaZ7ocJjjxqUY=)
2: ruxDT4IchrfuYxZpHXHMYcQMNGw.crl (hash: bVYgY3iKuDuSTVzlND6Wcv6q/+THDmzqfXACYxsXFQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 00:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:a8:6e:23:e2:cb:95:10:ef:05:10:73:53:a9:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeec434f821c86b7ee6316691d71cc61c40c346c
Validity
Not Before: May 13 00:00:36 2026 GMT
Not After : May 14 00:00:36 2026 GMT
Subject: CN=25e7d7bd1d4dae7a965ec1cb578ecbd0cb22815e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2a:16:09:fc:d9:b6:b3:5e:e7:8f:a0:fb:7d:
13:50:61:6f:e4:36:7e:86:d4:5a:ab:56:12:5e:0d:
e2:3e:e4:a5:3b:ac:95:4b:fd:6b:78:99:20:3b:57:
73:d5:3b:90:f4:11:b2:1a:10:47:b4:17:21:d4:0b:
fd:23:cf:10:f0:6e:24:ec:59:99:7d:6b:94:7e:c7:
d2:b0:ad:96:d0:e3:af:94:1b:a3:b7:41:29:cb:0d:
f7:ae:37:38:bc:32:d2:c1:4a:ed:f8:ab:51:51:23:
3a:bc:e8:04:05:cc:15:5a:34:0a:2c:38:b2:8b:da:
b3:22:b8:eb:ea:16:da:4c:9e:cc:b1:d8:f0:6f:6e:
a6:7d:96:03:2c:3d:01:5d:b4:d0:55:3e:53:16:72:
d1:3f:61:9f:32:10:23:0d:6a:e9:74:34:58:f5:03:
67:03:aa:cc:00:20:4f:56:93:d6:18:79:62:40:27:
92:2b:d5:85:a7:b2:88:84:ee:1f:77:f8:57:42:f8:
26:70:88:49:32:d8:ed:4a:68:cc:02:af:37:58:54:
59:79:da:39:0a:fc:df:91:ad:3a:2a:46:e0:3d:a6:
57:67:f6:a3:d4:96:42:26:2d:60:b4:ed:f8:0c:b6:
1c:ab:ec:55:73:a5:1b:8e:fa:7b:b5:ff:02:75:16:
1f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E7:D7:BD:1D:4D:AE:7A:96:5E:C1:CB:57:8E:CB:D0:CB:22:81:5E
X509v3 Authority Key Identifier:
keyid:AE:EC:43:4F:82:1C:86:B7:EE:63:16:69:1D:71:CC:61:C4:0C:34:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:aa:eb:98:d8:bf:a2:19:8e:0e:79:a8:61:c3:9f:3d:23:47:
83:14:d2:85:a3:d6:99:c9:b9:db:4a:a3:b5:43:0e:e5:fc:8c:
c2:59:7a:01:17:f8:8f:29:67:f4:e0:e2:70:aa:a4:b1:e9:a2:
ec:4b:63:23:63:cf:e2:e4:e3:d1:f4:43:1b:3f:1d:af:72:1b:
fb:ad:8a:d4:0e:be:3b:b4:2e:4c:cf:64:d9:db:94:2a:e7:0c:
be:2c:de:ab:e7:4a:4c:04:08:dd:cf:b1:9d:26:43:57:57:25:
6f:ad:d1:cb:48:86:54:6e:cd:e2:ba:5a:2f:c9:f5:0c:05:4f:
f0:03:bd:e9:3a:f5:57:30:f4:94:d6:c4:bb:c8:2c:4d:bb:12:
a7:33:8d:1d:4e:46:fd:89:2c:2a:1c:86:98:e1:43:23:28:69:
86:dd:12:67:8c:8e:b3:b7:7a:c0:e4:7b:f8:5b:f8:38:8e:1a:
d4:66:41:e2:21:d1:94:53:19:80:75:7a:f9:ac:1f:ba:eb:3d:
02:a9:95:4d:b7:1f:92:77:d4:bc:89:2e:72:48:23:d1:4b:e1:
04:91:de:38:14:eb:2f:47:48:c6:75:d2:2c:e1:f2:4f:dd:6f:
ad:b1:82:ba:4d:57:ea:1b:7c:06:59:fb:65:f6:b9:3e:7a:3e:
18:ef:eb:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:03:20 2026 by rpki-client