Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.mft
File: rujl3-xoOuXxoOvg-5b6JWswR2I.mft (raw, json)
Hash identifier: +Qhzxvsj63NlT35SgRLgGkbFfCgLA8E/BYMGlgog6qc=
Subject key identifier: D7:E4:C0:9A:EB:D7:29:26:1B:64:3F:9C:4C:47:6D:2C:D9:7F:E2:8C
Authority key identifier: AE:E8:E5:DF:EC:68:3A:E5:F1:A0:EB:E0:FB:96:FA:25:6B:30:47:62
Certificate issuer: /CN=aee8e5dfec683ae5f1a0ebe0fb96fa256b304762
Certificate serial: 019D25F2092DFA10787E1149DAE33C4CD186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rujl3-xoOuXxoOvg-5b6JWswR2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.mft
Manifest number: 1143
Signing time: Wed 25 Mar 2026 17:01:52 +0000
Manifest this update: Wed 25 Mar 2026 17:01:52 +0000
Manifest next update: Thu 26 Mar 2026 17:01:52 +0000
Files and hashes: 1: rujl3-xoOuXxoOvg-5b6JWswR2I.crl (hash: mS1TM/Yyo3UqwzLzT8FXCGn3dRMkIRg0XV9WTzYqzY0=)
2: xQH4kxn8xBsyaqhIlNPO4xn-4HA.roa (hash: 4c/eyqsX/8YhnNDX8tQhJuM4UkjqguMRdc8B5oNvgSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/rujl3-xoOuXxoOvg-5b6JWswR2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f2:09:2d:fa:10:78:7e:11:49:da:e3:3c:4c:d1:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee8e5dfec683ae5f1a0ebe0fb96fa256b304762
Validity
Not Before: Mar 25 17:01:52 2026 GMT
Not After : Mar 26 17:01:52 2026 GMT
Subject: CN=d7e4c09aebd729261b643f9c4c476d2cd97fe28c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:33:4b:03:81:0c:91:2a:6c:fd:3d:00:e3:71:
3d:7f:d3:c3:12:ae:f9:b9:37:05:49:1f:07:78:6d:
b9:91:78:9e:c7:b1:0d:4a:51:56:eb:67:d2:a3:a9:
04:02:59:4f:e1:8e:bf:e5:08:d0:40:5f:6b:a3:1b:
10:42:c6:7e:ab:20:4e:a9:ff:d4:56:b2:95:18:23:
a4:cb:14:84:5b:64:6d:49:c7:81:aa:3e:57:22:f9:
94:c6:94:b6:2f:3f:a6:17:63:af:7b:22:56:96:e5:
84:97:2b:8d:1c:e9:36:3d:6b:70:93:63:08:68:0d:
12:d1:23:fa:7f:c4:de:18:0e:f3:6c:6f:60:9f:71:
53:e9:8b:19:e6:d1:b5:a6:48:cf:6a:88:8a:87:0c:
74:6c:d1:a7:0b:6a:aa:58:60:18:3e:15:c2:02:42:
87:db:e1:03:6f:4f:01:44:8b:76:af:42:60:a3:e0:
5a:c2:eb:80:39:92:c8:69:67:c2:bb:08:92:27:47:
ed:92:7c:96:6e:d2:66:b1:29:a7:f3:ab:b3:d0:37:
60:c6:a5:bc:d6:28:62:67:92:5d:b9:74:89:d9:97:
7d:bf:c0:67:b3:c9:37:14:af:26:8e:1b:76:78:7c:
71:25:8d:f1:91:ba:f6:71:3b:33:7b:63:af:c4:e1:
34:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E4:C0:9A:EB:D7:29:26:1B:64:3F:9C:4C:47:6D:2C:D9:7F:E2:8C
X509v3 Authority Key Identifier:
keyid:AE:E8:E5:DF:EC:68:3A:E5:F1:A0:EB:E0:FB:96:FA:25:6B:30:47:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rujl3-xoOuXxoOvg-5b6JWswR2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:06:f5:9d:c7:6d:42:9d:60:00:fa:20:4a:2b:5b:46:dd:21:
f6:40:ba:da:9c:e9:b6:3d:3a:c8:01:a2:a9:65:06:ab:fb:dc:
17:a1:ba:43:50:4a:3e:70:22:17:a1:45:59:00:1f:0e:a7:c3:
5f:f9:81:74:73:87:4b:27:c3:92:9d:99:88:d4:02:a3:e4:91:
99:f8:58:59:af:13:b6:4b:f8:e5:b7:78:55:04:21:e2:69:9e:
0d:36:c2:6c:e6:36:b7:ac:e0:3c:0c:41:c9:5f:eb:5e:cb:d9:
da:bc:d2:5f:c4:5d:2f:fe:2d:ab:c7:74:7c:1e:d3:f4:9f:90:
9a:5e:94:44:de:64:25:79:a4:a1:66:66:6f:c5:ff:62:a9:3b:
b2:f9:a4:ee:d2:ef:98:3d:8a:c8:b2:d4:02:be:9a:de:18:cb:
2c:42:58:6d:65:db:34:b0:f7:9f:6b:25:60:8b:d1:28:7a:b3:
15:a0:c3:4f:13:59:1f:10:e7:81:38:0c:88:d0:c8:a5:84:8b:
2f:ab:99:d7:fa:e9:85:be:e2:44:ff:b2:73:08:fa:b3:70:b7:
9f:64:44:ee:73:f7:ab:4c:7d:12:7d:79:3d:35:5f:f2:60:29:
71:c4:c7:34:1a:f0:21:82:92:b6:32:6a:ab:cf:e2:47:23:17:
9c:f5:84:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8gkt+hB4fhFJ2uM8TNGGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZThlNWRmZWM2ODNhZTVmMWEwZWJlMGZiOTZmYTI1NmIz
MDQ3NjIwHhcNMjYwMzI1MTcwMTUyWhcNMjYwMzI2MTcwMTUyWjAzMTEwLwYDVQQD
EyhkN2U0YzA5YWViZDcyOTI2MWI2NDNmOWM0YzQ3NmQyY2Q5N2ZlMjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzNLA4EMkSps/T0A43E9f9PDEq75
uTcFSR8HeG25kXiex7ENSlFW62fSo6kEAllP4Y6/5QjQQF9roxsQQsZ+qyBOqf/U
VrKVGCOkyxSEW2RtSceBqj5XIvmUxpS2Lz+mF2OveyJWluWElyuNHOk2PWtwk2MI
aA0S0SP6f8TeGA7zbG9gn3FT6YsZ5tG1pkjPaoiKhwx0bNGnC2qqWGAYPhXCAkKH
2+EDb08BRIt2r0Jgo+BawuuAOZLIaWfCuwiSJ0ftknyWbtJmsSmn86uz0DdgxqW8
1ihiZ5JduXSJ2Zd9v8Bns8k3FK8mjht2eHxxJY3xkbr2cTsze2OvxOE0iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNfkwJrr1ykmG2Q/nExHbSzZf+KMMB8GA1UdIwQY
MBaAFK7o5d/saDrl8aDr4PuW+iVrMEdiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnVqbDMteG9PdVh4b092Zy01YjZKV3N3UjJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8xOGI2OTAtYzVhZS00ZmI0LThiZjgt
NjNhMGJlNmE4ZTVmLzEvcnVqbDMteG9PdVh4b092Zy01YjZKV3N3UjJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS8xOGI2OTAtYzVhZS00ZmI0LThiZjgtNjNhMGJlNmE4ZTVm
LzEvcnVqbDMteG9PdVh4b092Zy01YjZKV3N3UjJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4Ab1ncdt
Qp1gAPogSitbRt0h9kC62pzptj06yAGiqWUGq/vcF6G6Q1BKPnAiF6FFWQAfDqfD
X/mBdHOHSyfDkp2ZiNQCo+SRmfhYWa8Ttkv45bd4VQQh4mmeDTbCbOY2t6zgPAxB
yV/rXsvZ2rzSX8RdL/4tq8d0fB7T9J+Qml6URN5kJXmkoWZmb8X/Yqk7svmk7tLv
mD2KyLLUAr6a3hjLLEJYbWXbNLD3n2slYIvRKHqzFaDDTxNZHxDngTgMiNDIpYSL
L6uZ1/rphb7iRP+ycwj6s3C3n2RE7nP3q0x9En15PTVf8mApccTHNBrwIYKStjJq
q8/iRyMXnPWEcQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:32 2026 by rpki-client