Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.mft
File: ruHTpCXtvZ2K2tBBBqsS18dqwTI.mft (raw, json)
Hash identifier: j77Ox6U1R1Mn9maGe5w0+x+MZ282hVsGromoKG0IeaE=
Subject key identifier: 15:50:EB:F2:9F:C5:9E:6C:49:4B:63:06:DD:A8:FC:75:3B:E4:06:64
Authority key identifier: AE:E1:D3:A4:25:ED:BD:9D:8A:DA:D0:41:06:AB:12:D7:C7:6A:C1:32
Certificate issuer: /CN=aee1d3a425edbd9d8adad04106ab12d7c76ac132
Certificate serial: 019D2A046AE8E1674168C5586733E25C7072
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruHTpCXtvZ2K2tBBBqsS18dqwTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.mft
Manifest number: 0664
Signing time: Thu 26 Mar 2026 12:00:25 +0000
Manifest this update: Thu 26 Mar 2026 12:00:25 +0000
Manifest next update: Fri 27 Mar 2026 12:00:25 +0000
Files and hashes: 1: KzJ38YtTVUpyFa7KO6sOTmdjUMI.roa (hash: ua65+1lYMoMHdnVY3brws3FwYpdS0rpL21WtR4XZr7U=)
2: ruHTpCXtvZ2K2tBBBqsS18dqwTI.crl (hash: yHKFvNgZxJd444Xxz+Czu1jOBZeu6OHO1UOpBiX5KZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ruHTpCXtvZ2K2tBBBqsS18dqwTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:6a:e8:e1:67:41:68:c5:58:67:33:e2:5c:70:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee1d3a425edbd9d8adad04106ab12d7c76ac132
Validity
Not Before: Mar 26 12:00:25 2026 GMT
Not After : Mar 27 12:00:25 2026 GMT
Subject: CN=1550ebf29fc59e6c494b6306dda8fc753be40664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ef:f9:42:03:90:68:32:3a:f7:b4:2c:15:b5:
67:0d:c3:bc:2e:00:78:08:58:81:95:32:5c:39:39:
29:69:40:9b:3c:c5:97:4b:29:2b:89:f1:ff:4e:ac:
9e:fc:c4:5c:b2:43:b8:f7:ae:32:c3:34:51:30:ac:
dc:22:27:84:07:83:07:9e:eb:a6:08:57:02:18:24:
25:1c:5e:b2:3a:41:76:d3:01:d3:da:a4:8a:5f:bd:
ef:d9:6d:4d:22:b0:4b:f6:04:67:09:1d:fc:90:51:
32:cc:80:6b:fa:c4:aa:0a:b4:c7:cc:f9:c8:fc:28:
b5:47:ac:54:2d:b0:a5:52:eb:45:a1:c9:95:12:6d:
ac:76:63:9c:c8:9b:f7:b6:51:f9:42:8a:7c:13:36:
64:bd:88:88:a5:41:e6:64:21:fb:a1:d0:e9:6c:ca:
b3:91:4e:fe:69:23:27:35:0b:31:3d:24:c5:84:b3:
ce:e7:62:ec:51:dd:cc:9f:92:68:0e:70:93:63:5e:
0f:71:67:86:63:8f:eb:95:09:34:19:73:b3:da:3b:
0e:c4:da:e0:f7:6f:c4:d1:65:8a:72:2f:29:84:99:
e5:4a:a7:08:3e:44:83:31:58:8c:40:9b:44:2d:9e:
08:df:74:46:0c:70:ad:92:e5:fb:38:c9:55:db:08:
b4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:50:EB:F2:9F:C5:9E:6C:49:4B:63:06:DD:A8:FC:75:3B:E4:06:64
X509v3 Authority Key Identifier:
keyid:AE:E1:D3:A4:25:ED:BD:9D:8A:DA:D0:41:06:AB:12:D7:C7:6A:C1:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruHTpCXtvZ2K2tBBBqsS18dqwTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:31:18:17:44:78:28:77:fd:8b:c9:ae:42:c0:d6:cc:19:b9:
54:40:30:8f:fc:51:8b:f1:0b:e1:2c:49:59:ec:74:a0:e2:fc:
ed:b8:fb:ce:6d:81:3e:17:06:c2:3d:3b:77:52:6d:68:3d:dc:
3e:ab:d4:dd:da:f7:4d:b4:7f:27:d1:6d:09:78:13:8d:7b:fa:
a3:7b:3c:1d:36:f7:ab:06:7f:c3:ff:63:22:44:bb:01:59:8c:
e6:48:e1:90:95:5d:f3:12:7a:19:41:09:69:c2:e8:1b:97:84:
bc:88:6c:86:94:ea:3c:37:e3:97:a1:ed:76:c6:50:3b:45:7b:
c8:1c:d8:13:fc:57:48:1a:ad:b4:a4:18:31:d8:9d:f4:e8:bc:
50:f3:45:b6:7e:85:5a:24:2c:4f:96:4f:6b:6c:5f:6e:14:7e:
35:23:4b:ce:66:32:03:6d:6c:47:eb:ec:2b:51:77:e0:f8:ff:
43:37:bd:ed:a1:b0:ae:cf:40:0d:ed:1e:ca:a2:b6:9d:5f:90:
8e:10:ef:09:4d:dd:81:42:87:1b:50:03:a9:75:85:b7:84:f8:
57:d3:4b:40:42:80:85:4a:63:e8:fe:05:99:35:58:89:9b:7a:
a8:cd:59:9b:ca:e1:0f:85:04:30:fd:6c:b7:09:80:d8:d4:ed:
eb:05:0f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:08:15 2026 by rpki-client