Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/13a432-9db6-431f-a24c-1f323637cc48/1/r_RU7PyWgoYqe12-TzubDvxMV9w.mft
File: r_RU7PyWgoYqe12-TzubDvxMV9w.mft (raw, json)
Hash identifier: P/GLurLykw9HoMsJ2uPxxpJygjOFL784KIxXRwWDOUw=
Subject key identifier: 1E:D8:14:8A:D8:9E:BF:4D:F1:EE:7F:81:E9:58:6E:8A:B4:42:08:4D
Authority key identifier: AF:F4:54:EC:FC:96:82:86:2A:7B:5D:BE:4F:3B:9B:0E:FC:4C:57:DC
Certificate issuer: /CN=aff454ecfc9682862a7b5dbe4f3b9b0efc4c57dc
Certificate serial: 019D2628696B8EF78A309609639B9DA200DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_RU7PyWgoYqe12-TzubDvxMV9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/13a432-9db6-431f-a24c-1f323637cc48/1/r_RU7PyWgoYqe12-TzubDvxMV9w.mft
Manifest number: 0853
Signing time: Wed 25 Mar 2026 18:01:15 +0000
Manifest this update: Wed 25 Mar 2026 18:01:15 +0000
Manifest next update: Thu 26 Mar 2026 18:01:15 +0000
Files and hashes: 1: HwtTC3YUf8jq6_H27JD49Pjb0ng.roa (hash: sb42h8FogST26VCdNkE81RX0jvXh+uDiJHb1KL1vWxI=)
2: r_RU7PyWgoYqe12-TzubDvxMV9w.crl (hash: ymA0xKbZhcUG8C4qoiS90+UJrqE2c5btosR/6PNrgro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/13a432-9db6-431f-a24c-1f323637cc48/1/r_RU7PyWgoYqe12-TzubDvxMV9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/13a432-9db6-431f-a24c-1f323637cc48/1/r_RU7PyWgoYqe12-TzubDvxMV9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_RU7PyWgoYqe12-TzubDvxMV9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:69:6b:8e:f7:8a:30:96:09:63:9b:9d:a2:00:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff454ecfc9682862a7b5dbe4f3b9b0efc4c57dc
Validity
Not Before: Mar 25 18:01:15 2026 GMT
Not After : Mar 26 18:01:15 2026 GMT
Subject: CN=1ed8148ad89ebf4df1ee7f81e9586e8ab442084d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:55:fc:c0:b3:21:b9:10:6e:bb:92:30:22:7a:
4d:d7:48:d1:81:a3:f3:f6:64:eb:80:5c:ee:bf:52:
68:50:a3:fe:9e:c0:75:7b:dc:fa:d1:b0:fa:50:63:
d0:76:8d:49:3a:0b:62:e7:c0:1d:61:f5:9f:ba:44:
5d:9f:67:9d:b8:7a:cb:1c:93:97:f0:2e:9d:af:6d:
cd:ae:ff:8d:cf:e8:29:5c:64:31:80:5d:e3:83:9d:
d7:f7:9d:05:69:e0:34:fa:68:52:c9:06:41:a5:aa:
1a:e0:e4:e4:e2:b0:db:fc:3f:ec:f9:4c:a8:be:08:
79:9b:80:37:f7:40:e2:1c:a3:31:d6:f6:b5:83:9a:
78:b3:34:9a:63:27:6d:5e:b2:be:9d:06:d9:70:71:
7f:89:94:c0:c4:b7:98:34:ad:a3:67:f2:48:a3:8e:
ad:5b:bb:f9:c0:ea:8e:70:ef:d5:bc:f9:4e:37:f4:
f5:69:46:1a:62:db:6f:06:49:14:e3:12:62:50:55:
7e:0d:48:e7:c0:49:9e:89:d1:c5:c1:38:32:bb:4e:
88:e6:80:9e:5c:43:a9:7a:c5:93:80:b7:99:d4:b0:
d7:14:c7:57:a9:ee:0e:f0:b4:ec:70:a2:24:10:a3:
67:14:34:cc:e3:41:54:3a:97:12:d3:9a:91:4e:8d:
41:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D8:14:8A:D8:9E:BF:4D:F1:EE:7F:81:E9:58:6E:8A:B4:42:08:4D
X509v3 Authority Key Identifier:
keyid:AF:F4:54:EC:FC:96:82:86:2A:7B:5D:BE:4F:3B:9B:0E:FC:4C:57:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_RU7PyWgoYqe12-TzubDvxMV9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/13a432-9db6-431f-a24c-1f323637cc48/1/r_RU7PyWgoYqe12-TzubDvxMV9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/13a432-9db6-431f-a24c-1f323637cc48/1/r_RU7PyWgoYqe12-TzubDvxMV9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:8c:fa:45:8b:1c:c4:d5:90:29:5d:e8:1e:90:d3:b1:89:88:
26:29:8c:86:a9:ef:94:63:6d:e6:36:94:75:4b:2f:d0:ae:1d:
91:bb:16:bd:26:eb:35:64:e6:45:fb:3c:3e:ed:1b:11:a0:aa:
28:b5:0b:bd:27:d1:4e:c6:a2:02:5c:62:b4:52:b6:89:d2:02:
d0:ea:60:22:23:fe:36:d7:38:c5:2f:33:8e:ff:d0:de:2d:37:
6e:02:da:3a:f4:4e:05:89:8d:0f:3b:c4:c8:72:ce:4c:dd:f6:
c7:bb:08:ba:30:77:87:3e:79:c5:57:e9:93:66:9d:07:c7:60:
85:09:4c:d8:de:a7:2f:16:e6:32:77:38:dd:99:df:c6:26:ed:
40:bb:8e:a6:5c:27:66:02:7b:d1:9b:3d:9f:25:d2:66:04:dd:
80:f8:04:71:01:7b:fb:16:7d:31:50:ef:d0:b0:24:b6:ac:9b:
a5:70:8d:40:0f:8b:7c:b4:db:05:1f:e6:7f:d5:83:ce:42:fc:
16:46:5c:e3:9f:61:ba:c0:b2:32:c9:04:67:a8:e0:9b:b1:66:
51:96:94:4c:fb:51:e8:22:f1:0f:1d:7f:e2:bb:8d:64:c3:81:
4e:40:99:00:cc:2b:14:a6:be:89:1a:a2:07:6c:1d:72:96:2a:
38:96:5e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:32:08 2026 by rpki-client