Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.mft
File: RUH1XBZZBCT7NMZeDi6sIogkcNs.mft (raw, json)
Hash identifier: MHdos2qzEQCja9glUpgfW3KDph4PLDeAwvX1hlNu7RM=
Subject key identifier: 9D:B3:1E:BA:C9:73:38:1C:BD:49:3A:9E:E4:17:9A:89:F1:34:63:58
Authority key identifier: 45:41:F5:5C:16:59:04:24:FB:34:C6:5E:0E:2E:AC:22:88:24:70:DB
Certificate issuer: /CN=4541f55c16590424fb34c65e0e2eac22882470db
Certificate serial: 019D3865EA2FE1B0AA90403EA58D09321036
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RUH1XBZZBCT7NMZeDi6sIogkcNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.mft
Manifest number: 08CF
Signing time: Sun 29 Mar 2026 07:01:36 +0000
Manifest this update: Sun 29 Mar 2026 07:01:36 +0000
Manifest next update: Mon 30 Mar 2026 07:01:36 +0000
Files and hashes: 1: RUH1XBZZBCT7NMZeDi6sIogkcNs.crl (hash: 7FZTog36+7EDXHgCgGoCMZ0QaAyqat1UQN5De6HpN0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RUH1XBZZBCT7NMZeDi6sIogkcNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:ea:2f:e1:b0:aa:90:40:3e:a5:8d:09:32:10:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4541f55c16590424fb34c65e0e2eac22882470db
Validity
Not Before: Mar 29 07:01:36 2026 GMT
Not After : Mar 30 07:01:36 2026 GMT
Subject: CN=9db31ebac973381cbd493a9ee4179a89f1346358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:75:b0:4f:0c:f6:fa:b0:d8:b2:a9:7b:5a:85:
44:30:28:99:ca:cc:aa:2c:77:42:6a:3c:08:1b:de:
86:bd:83:69:3d:98:92:c4:16:e1:00:11:10:55:1f:
37:03:2b:c8:33:9f:42:59:38:60:01:2a:eb:17:5d:
ec:be:ee:d6:06:c5:e0:b2:ee:38:ef:2e:3a:74:96:
90:9d:e4:21:fb:96:14:a6:c0:cb:fe:6c:c4:ad:19:
63:53:d7:df:15:a8:ed:14:dd:63:63:a0:cd:c1:22:
9c:e7:2d:23:15:7e:ea:62:b4:35:55:4f:14:cc:61:
4a:23:5d:d3:0c:46:02:be:2a:b3:2e:cd:39:2e:c0:
4a:82:26:02:b9:82:a4:9c:bb:c5:a6:31:1a:49:58:
af:6f:4e:a4:fc:4c:91:7a:f2:67:61:96:45:8a:ab:
66:35:84:bf:fa:7b:e0:dc:29:25:2c:b6:3a:c8:c2:
fd:e8:1c:e0:5f:e3:26:48:2e:3f:83:3e:16:d7:85:
e4:7b:5b:41:19:23:1e:bf:ae:e3:e8:6a:6d:f2:33:
19:e1:09:e7:e7:b3:22:13:8b:b6:85:46:6a:ee:7b:
a6:34:11:22:96:88:86:63:3c:c7:9d:20:c3:04:50:
fe:75:b3:9b:5f:6c:0b:03:f0:e1:7d:60:fc:d2:22:
85:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B3:1E:BA:C9:73:38:1C:BD:49:3A:9E:E4:17:9A:89:F1:34:63:58
X509v3 Authority Key Identifier:
keyid:45:41:F5:5C:16:59:04:24:FB:34:C6:5E:0E:2E:AC:22:88:24:70:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RUH1XBZZBCT7NMZeDi6sIogkcNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:01:d4:4a:00:84:f0:a4:e2:90:e9:ce:45:2e:9f:a6:14:15:
ec:76:79:78:73:09:ac:fd:f4:94:74:f7:2f:25:02:6a:a2:4e:
68:4b:f9:b4:23:63:fd:fb:7f:a5:33:41:d5:3b:7e:49:53:4e:
6c:4f:fb:08:28:40:1f:19:14:ab:4f:61:09:ce:0d:6e:a9:02:
0a:27:d3:d3:b9:65:f6:a9:86:e0:94:1c:6b:00:a4:28:1d:ef:
38:62:ef:76:cb:03:5c:b6:6b:ac:4d:4c:9f:a5:e0:a7:c6:5d:
47:58:ad:c5:b5:21:dd:8a:2a:c1:89:05:a7:7b:f3:b0:d1:8e:
61:76:fd:74:34:73:63:41:f3:d3:1a:10:9e:42:35:64:f7:73:
10:8c:61:e6:53:a6:59:3c:45:19:64:27:b9:ed:99:49:0f:00:
29:9b:b8:6f:08:2d:ee:c5:2a:31:96:68:90:48:de:f2:32:ca:
8f:33:82:6f:e6:e6:0a:49:cb:0a:c8:79:8e:59:5d:28:4b:94:
fb:77:73:60:0c:c9:ac:55:16:f4:47:79:a5:55:71:06:eb:57:
57:5b:bd:d5:8c:9a:19:2a:cb:e3:96:4a:5f:d3:5a:06:89:6e:
92:07:c8:89:26:14:59:eb:01:06:76:38:e4:be:b4:12:eb:63:
69:c8:63:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:08 2026 by rpki-client