Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.mft
File: ruHTpCXtvZ2K2tBBBqsS18dqwTI.mft (raw, json)
Hash identifier: JioNDr+N1EZWEtG+Nmw/owDuTx76Ea/RlNRCNLen07A=
Subject key identifier: 4A:7E:50:48:A8:52:CB:F3:FD:C4:AD:05:37:EF:CF:31:D1:54:DB:0F
Authority key identifier: AE:E1:D3:A4:25:ED:BD:9D:8A:DA:D0:41:06:AB:12:D7:C7:6A:C1:32
Certificate issuer: /CN=aee1d3a425edbd9d8adad04106ab12d7c76ac132
Certificate serial: 01A12B7B821835BBE7A32A8434D9188FE7D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruHTpCXtvZ2K2tBBBqsS18dqwTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.mft
Manifest number: 0877
Signing time: Sun 11 Oct 2026 15:01:16 +0000
Manifest this update: Sun 11 Oct 2026 15:01:16 +0000
Manifest next update: Mon 12 Oct 2026 15:01:16 +0000
Files and hashes: 1: KzJ38YtTVUpyFa7KO6sOTmdjUMI.roa (hash: ua65+1lYMoMHdnVY3brws3FwYpdS0rpL21WtR4XZr7U=)
2: ruHTpCXtvZ2K2tBBBqsS18dqwTI.crl (hash: nQMJGubzEsUFLcjX9n7e1U6TALBhMm36xM7Q66VfB0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ruHTpCXtvZ2K2tBBBqsS18dqwTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:7b:82:18:35:bb:e7:a3:2a:84:34:d9:18:8f:e7:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee1d3a425edbd9d8adad04106ab12d7c76ac132
Validity
Not Before: Oct 11 15:01:16 2026 GMT
Not After : Oct 12 15:01:16 2026 GMT
Subject: CN=4a7e5048a852cbf3fdc4ad0537efcf31d154db0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a7:0a:bf:89:6f:8c:6b:1f:9c:9d:c3:fd:ef:
db:db:14:07:20:12:15:f7:61:a6:5e:23:0b:e6:ef:
ce:a3:5d:a7:86:57:a3:cf:98:7c:f0:94:e0:2f:45:
80:b3:76:89:66:52:f0:8e:62:4f:40:1d:dd:b4:e3:
ee:3d:62:97:7f:3d:b3:d0:26:0e:29:26:db:6a:27:
e4:08:5b:d4:04:a3:7e:26:01:a7:58:5d:e3:a1:7f:
f3:69:50:a2:a1:bc:c8:bf:1d:5b:50:1d:8e:06:30:
0c:72:84:b4:28:48:57:0e:f1:a1:60:87:df:b3:6b:
63:f4:cf:b1:ff:25:86:c6:38:0e:4c:7a:fb:99:07:
01:a5:f5:5a:c5:73:40:a4:af:10:d2:a2:94:70:a3:
5f:69:8b:73:71:81:12:9e:51:83:1f:3f:c0:0e:96:
25:07:1c:08:ee:43:52:fb:34:c4:86:be:f1:8d:42:
41:a2:75:a5:80:eb:15:f2:b9:16:51:67:4c:d0:e2:
fa:ff:3b:4b:a6:ea:e3:6f:c4:e5:6a:63:e1:eb:e7:
8f:8a:eb:a1:d7:52:45:13:fa:eb:ac:18:fd:40:a7:
3c:f1:eb:74:69:13:29:4b:4f:89:c9:08:53:8d:95:
ff:93:cb:8d:ab:17:25:5c:d7:57:d8:c0:d2:c9:15:
fe:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:7E:50:48:A8:52:CB:F3:FD:C4:AD:05:37:EF:CF:31:D1:54:DB:0F
X509v3 Authority Key Identifier:
keyid:AE:E1:D3:A4:25:ED:BD:9D:8A:DA:D0:41:06:AB:12:D7:C7:6A:C1:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruHTpCXtvZ2K2tBBBqsS18dqwTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:46:94:a9:97:8a:49:15:3f:71:fa:f0:7d:b4:eb:1d:df:48:
91:f4:e2:d5:26:83:f5:13:8b:f6:28:22:9c:5d:44:7e:5b:73:
c8:d6:6d:0f:ba:76:36:4a:53:24:74:1e:5a:77:73:e6:42:d3:
48:40:ee:cd:d4:94:eb:e4:c3:1f:a9:85:fe:77:9d:c2:1c:03:
a4:d4:08:e7:7d:80:8e:2b:6d:b2:49:8e:99:17:a8:94:90:ff:
51:52:e0:5f:ae:b8:d0:7b:a1:78:7b:d7:00:00:6b:21:e7:43:
4b:78:78:6a:68:a1:21:f1:5f:5c:a1:8a:5b:82:82:08:4d:6a:
d1:aa:8b:04:86:e0:07:93:1f:a9:0b:ff:d6:95:a1:f8:5a:8c:
df:ec:cf:62:e0:0a:fb:69:84:d6:d2:ef:da:50:9b:63:4d:79:
65:ba:32:06:92:e2:9a:76:f4:00:9a:c2:41:06:08:6e:c7:d2:
c4:ad:fc:db:00:82:ef:8c:2a:e8:24:d4:22:79:4e:d0:86:7c:
8c:03:65:de:6b:8f:75:51:ff:f2:c7:e5:79:50:af:79:76:80:
bb:fd:3d:19:ae:07:c5:69:ad:d3:5c:ab:ef:55:00:09:47:aa:
b9:5c:b2:69:b8:05:13:f6:dd:82:24:58:63:a7:7d:ea:5b:d4:
5b:fe:5c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:01:36 2026 by rpki-client