Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/d2036a-27a7-4cdb-b4fe-9311275f38ea/1/ru85tCEAXzAraRD5Y5P0tlR6j-w.mft
File: ru85tCEAXzAraRD5Y5P0tlR6j-w.mft (raw, json)
Hash identifier: ESJf39x3AWdBcMXccHkD/clTGXmzWjuVteo1AxbE/Xw=
Subject key identifier: 44:F5:10:8F:5D:06:DA:60:C4:83:77:BF:2C:DD:72:64:D2:64:7B:26
Authority key identifier: AE:EF:39:B4:21:00:5F:30:2B:69:10:F9:63:93:F4:B6:54:7A:8F:EC
Certificate issuer: /CN=aeef39b421005f302b6910f96393f4b6547a8fec
Certificate serial: 019D277201C4EC990B4CAD7AE887D6480CF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ru85tCEAXzAraRD5Y5P0tlR6j-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/d2036a-27a7-4cdb-b4fe-9311275f38ea/1/ru85tCEAXzAraRD5Y5P0tlR6j-w.mft
Manifest number: 0327
Signing time: Thu 26 Mar 2026 00:01:15 +0000
Manifest this update: Thu 26 Mar 2026 00:01:15 +0000
Manifest next update: Fri 27 Mar 2026 00:01:15 +0000
Files and hashes: 1: ru85tCEAXzAraRD5Y5P0tlR6j-w.crl (hash: Jhkn7jB0RrgPvvI8w5pnOzXEMctZ5tMi/UOtQVNqC/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/d2036a-27a7-4cdb-b4fe-9311275f38ea/1/ru85tCEAXzAraRD5Y5P0tlR6j-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/d2036a-27a7-4cdb-b4fe-9311275f38ea/1/ru85tCEAXzAraRD5Y5P0tlR6j-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ru85tCEAXzAraRD5Y5P0tlR6j-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:01:c4:ec:99:0b:4c:ad:7a:e8:87:d6:48:0c:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeef39b421005f302b6910f96393f4b6547a8fec
Validity
Not Before: Mar 26 00:01:15 2026 GMT
Not After : Mar 27 00:01:15 2026 GMT
Subject: CN=44f5108f5d06da60c48377bf2cdd7264d2647b26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:87:8b:0c:28:0a:d0:cd:e2:57:f7:97:f0:39:
2b:a3:de:d5:06:92:94:b3:d0:12:99:b6:47:39:6b:
50:22:26:37:4e:b8:00:36:a4:fa:59:ba:b2:86:2e:
29:bf:d4:fe:e4:10:b7:18:db:2b:b3:25:72:c3:6a:
9b:d3:6d:ef:0e:fe:9e:44:6e:82:dd:d6:89:5b:29:
c0:e6:96:1e:e1:c4:aa:d0:67:ce:40:38:b3:96:0b:
6d:4e:b4:3a:f4:fd:b3:f8:a0:83:82:cb:79:75:75:
b4:e9:4e:7e:21:32:59:aa:86:87:a0:d0:9e:88:4d:
ef:50:ab:81:c2:89:59:65:43:d8:bf:b8:0d:01:c7:
c9:27:50:39:d5:a7:8f:1c:f9:e5:59:b2:33:78:d0:
28:bb:ff:74:b0:3f:55:16:59:b2:2b:0e:d8:24:c5:
f0:8c:89:fb:5c:67:d2:e6:4e:d9:87:56:1d:85:34:
49:70:b2:8d:5a:74:32:7e:1e:ef:78:e2:6a:78:af:
6a:a0:58:78:a9:3b:c4:f5:a8:43:20:d3:5b:9d:dc:
05:ba:e6:b4:ef:9b:23:73:cf:ec:2d:2f:db:ff:bf:
76:cc:1f:1b:d4:c2:33:1e:d7:8d:0d:1b:52:47:a5:
37:eb:3d:25:3e:46:24:1b:48:b5:a7:4e:a2:46:8b:
68:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F5:10:8F:5D:06:DA:60:C4:83:77:BF:2C:DD:72:64:D2:64:7B:26
X509v3 Authority Key Identifier:
keyid:AE:EF:39:B4:21:00:5F:30:2B:69:10:F9:63:93:F4:B6:54:7A:8F:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ru85tCEAXzAraRD5Y5P0tlR6j-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/d2036a-27a7-4cdb-b4fe-9311275f38ea/1/ru85tCEAXzAraRD5Y5P0tlR6j-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/d2036a-27a7-4cdb-b4fe-9311275f38ea/1/ru85tCEAXzAraRD5Y5P0tlR6j-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:a9:83:68:ac:09:e7:99:74:bc:ec:65:e0:7a:3c:32:ef:85:
43:ee:7d:74:29:4c:0e:1e:14:91:9f:4f:62:ef:ca:b8:61:22:
ca:cd:10:4e:f4:54:d4:3a:4c:42:48:08:0b:93:fd:44:d6:9a:
60:7e:c8:9c:6f:e5:b3:cc:d1:ec:e3:f4:7e:3e:e0:5a:8a:1a:
7f:7b:cc:4f:02:c3:fe:27:3d:d3:b2:06:83:c5:98:8f:09:8c:
3f:82:6a:10:a6:17:5e:7f:66:a6:02:29:f4:a4:8a:3a:9f:e6:
48:5d:31:e3:be:9f:84:74:f8:e5:e6:59:67:5b:81:16:1d:87:
e8:83:42:a2:43:6d:b3:6a:20:e0:6e:1f:5d:aa:ab:fd:e8:b1:
00:60:7d:eb:e9:17:c1:e4:a6:4b:49:07:b7:30:6a:81:34:ba:
5a:3b:a0:a2:49:64:1b:03:2a:4d:da:03:1f:ef:ee:11:c9:ee:
42:ec:10:9a:22:53:49:82:e4:62:c0:d5:0b:93:29:05:34:bb:
cf:8c:a9:85:1e:76:35:22:3f:3c:1e:d3:96:9b:9b:ee:51:f2:
37:e0:d1:d3:fa:8a:fc:4b:a5:fc:96:78:9b:d9:f6:54:3a:bb:
e8:8d:d8:05:54:ed:55:29:1d:64:b7:16:0f:0b:8b:0d:d3:0f:
05:e8:40:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:06:03 2026 by rpki-client