Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
File: RusRr5NV2porXfc-zdf9CWektYw.mft (raw, json)
Hash identifier: YfOxWSnuzjQJKnsgIxCsD3xt/eTnrghvdIYI4s89qeg=
Subject key identifier: 3D:25:D1:73:25:45:C8:6C:F2:E3:F5:42:3A:AF:03:BD:96:C7:A0:F1
Authority key identifier: 46:EB:11:AF:93:55:DA:9A:2B:5D:F7:3E:CD:D7:FD:09:67:A4:B5:8C
Certificate issuer: /CN=46eb11af9355da9a2b5df73ecdd7fd0967a4b58c
Certificate serial: 019F9E15DD1B104686D87FD5405167D393A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
Manifest number: 19D5
Signing time: Sun 26 Jul 2026 11:01:00 +0000
Manifest this update: Sun 26 Jul 2026 11:01:00 +0000
Manifest next update: Mon 27 Jul 2026 11:01:00 +0000
Files and hashes: 1: RQrjDU4V5o7Y6FMae1KeS7H872g.roa (hash: 8xk+8pGV1p6Nt4ziixJs8iuoymfnnWJ5uoc1S8n08z8=)
2: RusRr5NV2porXfc-zdf9CWektYw.crl (hash: HyfRaoA9ebFgG8pMSEs5HcTnwmLNgWXQNInHNNnVm4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 11:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:15:dd:1b:10:46:86:d8:7f:d5:40:51:67:d3:93:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46eb11af9355da9a2b5df73ecdd7fd0967a4b58c
Validity
Not Before: Jul 26 11:01:00 2026 GMT
Not After : Jul 27 11:01:00 2026 GMT
Subject: CN=3d25d1732545c86cf2e3f5423aaf03bd96c7a0f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8a:f2:d3:cf:a2:49:21:48:f5:c3:46:d2:26:
69:71:67:c4:7f:5c:f7:a6:63:ce:b6:9b:f4:46:cd:
36:5e:4d:cf:da:6b:27:c9:7f:6e:d3:51:ce:8f:44:
b1:99:b4:42:25:4a:a6:82:bb:ba:dd:77:99:76:52:
ba:bf:d8:9d:88:d9:63:aa:80:51:f6:13:df:5c:23:
ee:0d:97:ef:12:dd:32:48:e2:fa:08:e3:56:46:03:
12:95:67:72:5a:2d:e1:42:f0:9b:1a:de:31:a3:81:
15:03:47:f8:99:76:ee:2d:a9:71:aa:b3:cf:d8:aa:
c0:97:a4:15:47:97:1b:35:e2:41:07:00:92:8e:c2:
f0:55:3a:b1:6b:ac:0e:21:5d:9a:cc:a8:dc:17:f2:
d6:35:37:c7:31:b8:bf:1c:cb:51:d5:5a:e9:38:3a:
07:2b:8a:bd:0d:fe:97:5c:86:98:f8:47:d5:e1:e5:
c7:05:7e:ac:d4:e1:4e:81:15:71:95:af:f4:3f:17:
72:c2:ec:20:45:bd:29:1a:eb:0f:ca:74:3f:d1:c9:
ab:4f:70:ad:7b:e7:ce:bc:ba:8f:e8:77:94:91:bf:
54:44:16:e0:c1:15:9d:4d:61:a1:db:56:fd:3f:ab:
8e:88:3f:1d:2e:ec:42:d9:6e:65:5d:ac:01:54:7d:
61:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:25:D1:73:25:45:C8:6C:F2:E3:F5:42:3A:AF:03:BD:96:C7:A0:F1
X509v3 Authority Key Identifier:
keyid:46:EB:11:AF:93:55:DA:9A:2B:5D:F7:3E:CD:D7:FD:09:67:A4:B5:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:d6:f0:6c:4d:bc:f6:60:85:31:03:da:d4:a1:c8:ce:06:80:
08:5c:bf:13:72:be:49:e1:e8:1a:6d:fe:94:60:5e:ca:90:d6:
8f:aa:90:66:d5:e6:21:af:a2:2c:ac:eb:1c:87:ec:08:ef:69:
78:1c:24:7e:4c:83:7d:e1:4d:a0:e0:96:3c:7e:2e:7e:d9:d3:
08:83:df:53:c8:47:ad:83:ec:67:33:3b:0a:72:97:00:1d:06:
49:e2:07:5a:12:2a:1e:f1:fa:79:e4:0b:32:ce:58:c6:34:39:
c8:81:bc:c6:af:24:83:ee:1c:66:77:29:41:5a:27:73:cb:a0:
9b:a4:14:eb:7e:ee:5f:30:4e:08:68:96:0b:0e:a8:db:dd:38:
98:f9:e2:a5:4e:f5:1e:77:6c:d0:38:35:12:97:49:83:f2:2a:
d0:30:a9:2e:d4:1d:66:02:43:e7:32:8e:c1:6d:f2:e5:02:fb:
06:61:49:31:a7:29:cb:23:80:63:5d:13:89:ce:0d:b5:b6:ff:
29:7d:3c:57:c3:e2:e0:25:a1:30:f8:8c:e5:58:6b:a1:63:d1:
68:e6:d3:42:08:f5:6d:80:6d:06:40:4b:7a:41:e4:16:cd:08:
bd:d6:24:89:ee:b3:10:66:8d:76:7e:0c:81:fe:3c:bb:8a:5e:
32:e2:85:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 20:17:49 2026 by rpki-client