Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
File: RusRr5NV2porXfc-zdf9CWektYw.mft (raw, json)
Hash identifier: WoSnTJdMAlg7qxkCLGr/1/i/Ym9pB7r1CVm5u1wPYPk=
Subject key identifier: 4A:5B:66:4E:E0:D8:37:D2:16:D3:3F:15:E5:59:0F:C7:C7:10:C7:DE
Authority key identifier: 46:EB:11:AF:93:55:DA:9A:2B:5D:F7:3E:CD:D7:FD:09:67:A4:B5:8C
Certificate issuer: /CN=46eb11af9355da9a2b5df73ecdd7fd0967a4b58c
Certificate serial: 019EB65766715DEE43C1EE3C1621FBE15ED5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
Manifest number: 195D
Signing time: Thu 11 Jun 2026 11:00:41 +0000
Manifest this update: Thu 11 Jun 2026 11:00:41 +0000
Manifest next update: Fri 12 Jun 2026 11:00:41 +0000
Files and hashes: 1: RQrjDU4V5o7Y6FMae1KeS7H872g.roa (hash: 8xk+8pGV1p6Nt4ziixJs8iuoymfnnWJ5uoc1S8n08z8=)
2: RusRr5NV2porXfc-zdf9CWektYw.crl (hash: nqYVOw3VKga+/DtBuy9xK88rv60Vheep6MA5CnsDjOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 11:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:57:66:71:5d:ee:43:c1:ee:3c:16:21:fb:e1:5e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46eb11af9355da9a2b5df73ecdd7fd0967a4b58c
Validity
Not Before: Jun 11 11:00:41 2026 GMT
Not After : Jun 12 11:00:41 2026 GMT
Subject: CN=4a5b664ee0d837d216d33f15e5590fc7c710c7de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:87:8d:d3:ef:0f:ae:59:c6:11:fc:7a:42:c6:
62:ce:e7:d8:30:7f:be:86:09:a9:3d:bc:69:95:db:
0e:48:cf:b4:20:f1:d7:5e:81:ed:25:dd:4e:bc:0a:
2c:9e:a4:24:f0:d2:b9:9f:d3:23:be:bf:b0:26:f5:
75:16:24:6c:74:4b:6c:7e:e7:f5:e3:a5:09:6c:0c:
9c:a6:e3:b7:4a:b5:32:43:16:48:9b:96:96:17:fd:
83:c0:93:e5:d5:5c:25:d6:36:b9:d5:55:8c:44:de:
c6:37:a2:c5:37:83:5d:4d:d3:ae:85:1a:df:83:2a:
59:ed:fb:0b:44:14:d5:eb:cb:9f:9c:36:c9:fe:79:
b4:27:7a:cc:41:1e:26:b4:a7:d2:53:a8:ff:04:5e:
c7:ab:bc:c5:92:09:aa:e9:a5:8b:80:62:d3:b8:29:
8f:a1:b7:60:0b:0f:76:3a:15:26:2b:f0:db:5b:92:
85:40:b3:99:01:18:5d:a0:7e:a8:73:fe:c6:ce:38:
fc:e2:6c:37:7e:d0:25:6d:78:ee:18:97:04:35:67:
d9:d7:a7:b0:cc:98:f8:b0:49:a8:ba:1d:15:ff:da:
64:99:49:56:db:b6:57:f5:fe:df:31:7b:db:f3:88:
89:26:cc:99:6d:c0:64:8a:0a:cf:51:af:a2:0a:55:
a1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:5B:66:4E:E0:D8:37:D2:16:D3:3F:15:E5:59:0F:C7:C7:10:C7:DE
X509v3 Authority Key Identifier:
keyid:46:EB:11:AF:93:55:DA:9A:2B:5D:F7:3E:CD:D7:FD:09:67:A4:B5:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:94:08:03:81:1a:74:d2:88:86:0f:ac:23:2e:8b:b5:ef:06:
70:b1:a9:77:5b:1f:8c:55:8d:f2:08:32:85:75:17:38:c9:0f:
7d:54:fa:7c:57:75:84:03:ce:75:78:4a:95:78:78:e6:9c:5b:
a6:a7:3f:b7:20:10:49:93:3c:42:ed:8f:92:f8:09:ab:ac:58:
04:2d:06:46:d6:31:1d:03:8d:1f:0c:84:d2:ed:ed:9c:b9:b9:
32:2d:a1:c9:2b:31:94:1a:b4:9a:ed:c8:3c:c2:a5:7e:18:c6:
cd:e1:62:ec:8d:2d:14:29:94:0e:f9:08:56:69:3f:be:9a:1e:
ee:65:76:81:f6:1f:c8:ee:18:29:49:db:2b:d3:b0:78:63:9e:
53:08:f2:50:e5:ed:dc:f5:a0:a5:98:1f:9d:cf:0a:f1:76:c1:
72:c6:57:56:5d:ff:cc:f5:da:a7:68:8f:14:64:40:0b:b8:72:
84:06:4c:9f:d6:56:ba:83:84:30:ca:a7:ed:16:24:11:45:53:
63:4f:6e:a5:29:86:6f:42:b7:4e:14:39:91:c5:01:5e:11:22:
d1:06:c6:f2:f6:c9:a7:ea:3a:52:13:3f:5e:5f:56:33:41:12:
ae:1a:6c:e1:72:b2:1a:24:27:be:a1:dd:b6:a8:bf:a0:61:9a:
e0:a4:6b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:03:22 2026 by rpki-client