Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
File: RusRr5NV2porXfc-zdf9CWektYw.mft (raw, json)
Hash identifier: kAt4M15hnmnSZZNht4k08uQttNGHb/GS9DeQmo6l5Lw=
Subject key identifier: 97:12:71:01:4A:E0:13:FD:48:19:CE:33:9E:BF:49:52:14:02:FB:D4
Authority key identifier: 46:EB:11:AF:93:55:DA:9A:2B:5D:F7:3E:CD:D7:FD:09:67:A4:B5:8C
Certificate issuer: /CN=46eb11af9355da9a2b5df73ecdd7fd0967a4b58c
Certificate serial: 019CE3353F0418452FFCB07BE22B64401441
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
Manifest number: 186A
Signing time: Thu 12 Mar 2026 18:00:43 +0000
Manifest this update: Thu 12 Mar 2026 18:00:43 +0000
Manifest next update: Fri 13 Mar 2026 18:00:43 +0000
Files and hashes: 1: CBWD_Gg6jndH-l0lM7DiQCVG12k.roa (hash: bubSKRJET0AOhipZBjbkVYrFDX2PKN6HdmciWmyFV4U=)
2: RusRr5NV2porXfc-zdf9CWektYw.crl (hash: mH79S9l3oUv93skvxCkFsq/GdqDTRc7jF6brwITeKpY=)
3: p4Qr1o_GUP493TOzGiHvqAvpKvw.roa (hash: c+UryGANglbxgDwdQW/A1l8yeFJXbMxh9x0ZlreWqlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:35:3f:04:18:45:2f:fc:b0:7b:e2:2b:64:40:14:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46eb11af9355da9a2b5df73ecdd7fd0967a4b58c
Validity
Not Before: Mar 12 18:00:43 2026 GMT
Not After : Mar 13 18:00:43 2026 GMT
Subject: CN=971271014ae013fd4819ce339ebf49521402fbd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:01:cd:8d:83:c5:d9:bb:74:77:2c:a2:6f:2e:
e1:21:27:c8:07:24:c0:24:ec:49:fc:fe:94:ca:41:
cb:79:a4:f9:4a:9e:1a:e2:6d:21:c9:ba:90:e4:6c:
3a:f1:a7:cb:89:11:a9:e7:50:ff:89:5d:a1:1d:ce:
22:1f:df:3a:31:6b:eb:42:01:aa:c1:9a:73:01:98:
a1:de:c8:18:aa:b4:a2:22:a4:f3:3f:82:d7:4f:09:
10:ba:34:36:7b:aa:51:ce:a0:4a:88:44:b9:9e:3a:
58:30:3f:d0:2b:49:ae:bc:82:04:35:4a:eb:0f:31:
12:2a:71:6f:99:2a:6f:aa:d5:a4:f8:d0:f5:4a:81:
28:0a:0c:43:9e:e6:06:15:42:a5:7f:7d:40:97:5a:
8b:77:44:e7:14:4d:9f:c7:5a:52:35:74:50:74:ba:
29:ad:f8:a7:9f:85:6e:51:bc:7d:bd:c6:64:84:58:
c3:ea:14:92:96:da:ea:8b:4a:29:2f:6f:4d:28:2e:
8d:b3:da:9d:8c:08:79:ec:e4:9f:11:17:c8:43:7d:
bf:67:9d:e3:65:e1:c6:a8:b5:02:38:22:94:3d:05:
a5:e5:27:95:85:80:92:89:13:4c:e4:40:99:0c:e1:
86:c5:3f:bb:ef:70:bc:24:9e:80:7e:dd:52:83:e5:
96:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:12:71:01:4A:E0:13:FD:48:19:CE:33:9E:BF:49:52:14:02:FB:D4
X509v3 Authority Key Identifier:
keyid:46:EB:11:AF:93:55:DA:9A:2B:5D:F7:3E:CD:D7:FD:09:67:A4:B5:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:4b:ae:6f:9a:d5:1b:73:f5:32:2e:42:04:28:50:8d:1f:13:
3b:14:f4:e5:b7:41:60:38:ba:8a:18:73:16:dd:1a:27:1f:5e:
ec:cd:f7:c8:d9:d8:49:05:2e:fc:ee:d6:eb:53:84:c3:56:a7:
0d:72:e8:6c:d5:0c:3d:d4:59:51:d4:80:39:1f:70:08:f0:b5:
2f:8b:86:3a:64:66:9d:35:25:2d:d7:50:b2:ee:26:bd:f3:03:
41:5b:7c:4b:49:c8:e5:35:8f:a2:50:a4:4e:98:02:a8:89:08:
71:1a:fd:ed:7e:ec:ee:fd:59:c1:d7:51:72:7b:e4:b0:e7:b8:
0b:7b:77:16:8a:62:14:ff:91:b4:f3:00:b6:20:f4:16:24:8a:
6e:51:53:ea:34:53:2e:f9:d5:d5:47:5f:d5:91:1e:5d:bf:2b:
de:e0:05:86:ed:2d:bd:c8:fa:4e:d4:b2:3e:49:d5:f6:8e:dc:
12:20:42:ae:f4:c0:a3:22:23:f1:00:92:7b:28:ca:88:71:08:
d8:53:c2:98:20:91:8c:6a:15:2c:ce:f7:1b:b6:8c:7d:a1:08:
d5:85:fb:65:49:34:23:c1:66:a9:d2:71:4b:99:a4:dc:55:5a:
db:44:71:11:ac:ec:a1:8f:4b:a4:a3:61:f9:28:ec:7b:80:ec:
ed:41:58:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 00:35:35 2026 by rpki-client