Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft
File: ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft (raw, json)
Hash identifier: tzN1HzeVK542PP2xb0fXXe0FO74lQSxUc6QrgUGcUBQ=
Subject key identifier: 1B:A8:47:3B:F7:A0:E7:C7:D6:71:19:FB:17:7C:8D:77:35:04:7B:90
Authority key identifier: AE:E2:F8:E5:36:27:AD:C2:76:78:06:3B:93:D3:D9:FD:6E:CE:90:02
Certificate issuer: /CN=aee2f8e53627adc27678063b93d3d9fd6ece9002
Certificate serial: 019D25BA7A5452DAA091DB93E3E13FF6E050
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft
Manifest number: 1777
Signing time: Wed 25 Mar 2026 16:01:11 +0000
Manifest this update: Wed 25 Mar 2026 16:01:11 +0000
Manifest next update: Thu 26 Mar 2026 16:01:11 +0000
Files and hashes: 1: 5ZoEo50_xAHK34okKgd5dDUMiUg.roa (hash: LIs7cRQu0NuinXWbbRKXMVEwh8Kej14YFA3/Roh92YA=)
2: DCEcusp2eUGzG1BBOnYxv3yFd44.roa (hash: bfsFhq6ej0vlB2f4W6DclWkdX8tD+q/PCkm2oIBGGDw=)
3: ruL45TYnrcJ2eAY7k9PZ_W7OkAI.crl (hash: wuf4YenW+XcORbehvg8aJ70CNkWDgoKxH4vGgBpyPgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:7a:54:52:da:a0:91:db:93:e3:e1:3f:f6:e0:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee2f8e53627adc27678063b93d3d9fd6ece9002
Validity
Not Before: Mar 25 16:01:11 2026 GMT
Not After : Mar 26 16:01:11 2026 GMT
Subject: CN=1ba8473bf7a0e7c7d67119fb177c8d7735047b90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0e:d8:68:ab:55:88:bf:a5:a5:9d:a2:b5:0f:
bd:c9:4e:8e:1d:dd:06:20:c4:70:0a:0f:81:cb:5d:
17:59:ad:c5:55:22:4f:54:7a:48:f9:be:eb:48:65:
40:b9:0e:ba:f3:84:8b:44:04:dd:95:a1:c7:77:3d:
be:26:80:eb:a8:df:60:b0:d8:ee:a4:50:48:d5:d5:
7d:35:8c:93:bc:15:d8:77:24:09:72:58:e3:29:47:
aa:dc:ed:47:3c:09:74:da:61:d2:64:f8:16:3c:69:
f0:16:20:d9:f2:7f:0c:1b:49:be:83:48:eb:f5:29:
19:c2:fd:1c:a1:09:59:fd:81:d8:8c:24:ae:cd:86:
d5:07:1a:f1:fd:95:f9:63:7f:a9:7d:df:39:0f:8f:
64:7d:2b:69:05:87:71:03:5c:ee:0f:ec:a0:46:ae:
42:9b:e9:72:08:6c:18:c4:61:bd:d6:15:e5:35:c0:
b0:a9:1c:80:b2:ea:da:08:6e:b6:82:72:38:4a:97:
0d:ae:c0:da:f9:f8:59:cb:38:66:55:b8:7a:1e:09:
7b:39:f6:fc:e4:dd:95:89:e0:f4:54:f9:07:cf:ce:
7a:b3:f9:b5:8d:03:c3:da:d6:a1:af:6a:79:db:35:
e7:ef:ab:ea:bb:59:d9:d0:5e:d3:fa:0e:f3:8d:26:
09:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A8:47:3B:F7:A0:E7:C7:D6:71:19:FB:17:7C:8D:77:35:04:7B:90
X509v3 Authority Key Identifier:
keyid:AE:E2:F8:E5:36:27:AD:C2:76:78:06:3B:93:D3:D9:FD:6E:CE:90:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:02:a9:54:e0:34:c4:22:bb:65:a1:22:69:c3:ed:04:bb:14:
db:6d:8d:4f:8a:ef:e7:30:ba:7d:bc:90:f9:60:86:fd:4e:ce:
c4:73:79:31:eb:04:05:c4:fb:58:7a:0a:d0:02:ae:44:98:55:
b5:40:aa:9d:b6:66:e9:d7:5e:af:76:3a:77:ed:0a:da:bd:72:
5a:c6:50:18:88:10:75:f6:52:9b:e2:f0:77:c2:7c:ab:9e:4f:
71:4d:b4:2f:21:fe:75:65:3c:03:c4:f3:bb:93:76:ee:8d:60:
43:4a:47:65:e9:3c:f4:6a:16:3b:f1:f5:a5:5e:22:bd:c4:36:
00:41:65:30:85:33:78:ee:f2:3e:bc:a0:8f:8d:41:5b:91:ce:
d4:9e:fe:89:9a:df:ee:34:0b:71:15:7f:65:9f:31:83:76:5a:
10:ff:22:bf:a3:da:e9:ee:eb:dc:60:c5:6b:ed:58:6d:61:82:
6c:9c:30:91:30:4e:ea:90:49:00:6f:68:ed:5c:52:1e:b9:c5:
6b:47:41:bf:34:f3:83:3e:23:26:99:3f:8e:f8:c5:36:c8:a3:
53:f0:12:ef:0d:13:6a:f3:04:42:ea:f7:ce:23:73:78:01:cf:
2b:73:b3:a6:f8:91:cc:7b:af:7b:99:4d:c9:b0:d9:9d:52:79:
67:7b:dd:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:00:40 2026 by rpki-client