Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
File: RusRr5NV2porXfc-zdf9CWektYw.mft (raw, json)
Hash identifier: 7GbYfe6LCeSnxh3ajUZ+WLSLxtmnUMvDRBVcDrg0LLc=
Subject key identifier: 00:43:E4:AA:46:43:25:75:FD:AF:B7:35:97:1B:B0:04:0D:95:BB:3D
Authority key identifier: 46:EB:11:AF:93:55:DA:9A:2B:5D:F7:3E:CD:D7:FD:09:67:A4:B5:8C
Certificate issuer: /CN=46eb11af9355da9a2b5df73ecdd7fd0967a4b58c
Certificate serial: 019DCCE1B9F4035C9AE0F526566DECAA5F78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
Manifest number: 18E3
Signing time: Mon 27 Apr 2026 03:00:38 +0000
Manifest this update: Mon 27 Apr 2026 03:00:38 +0000
Manifest next update: Tue 28 Apr 2026 03:00:38 +0000
Files and hashes: 1: CBWD_Gg6jndH-l0lM7DiQCVG12k.roa (hash: bubSKRJET0AOhipZBjbkVYrFDX2PKN6HdmciWmyFV4U=)
2: RusRr5NV2porXfc-zdf9CWektYw.crl (hash: JeExazZjdW5XFWGEQlPRztIluiXjvwmdcitHpIMJQ6Q=)
3: p4Qr1o_GUP493TOzGiHvqAvpKvw.roa (hash: c+UryGANglbxgDwdQW/A1l8yeFJXbMxh9x0ZlreWqlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:e1:b9:f4:03:5c:9a:e0:f5:26:56:6d:ec:aa:5f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46eb11af9355da9a2b5df73ecdd7fd0967a4b58c
Validity
Not Before: Apr 27 03:00:38 2026 GMT
Not After : Apr 28 03:00:38 2026 GMT
Subject: CN=0043e4aa46432575fdafb735971bb0040d95bb3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:90:69:f7:ba:1c:08:c6:71:e3:45:78:95:9e:
d9:ad:67:21:dd:3c:30:a7:82:0e:99:50:75:12:71:
cc:87:7f:9b:2e:ca:e8:14:07:08:f0:d6:81:43:c5:
c0:6d:f6:4f:b0:64:e4:ab:5e:22:cc:00:92:74:48:
6b:65:c2:14:8d:4b:e7:31:20:bc:8b:d6:ad:1f:30:
0e:38:ed:10:3c:6e:2c:2c:84:ae:f2:b0:1d:c6:bf:
47:58:94:67:ab:b2:57:2e:78:b2:60:61:a1:74:55:
9f:fb:9b:3f:54:4d:0b:11:a5:2a:3f:f3:2d:14:ec:
e2:ba:cf:84:e3:30:81:62:63:02:d7:28:9f:43:bc:
82:37:0e:5d:22:8a:7d:e6:da:64:47:e7:12:0c:9b:
76:e5:0b:17:9c:19:7b:76:0c:33:19:2e:fe:1f:41:
bf:cd:1c:91:a3:76:29:f9:d3:23:0e:f0:2c:2b:55:
00:08:92:5c:b9:45:1f:e4:44:16:3d:d8:d7:85:9e:
94:ae:ed:7b:23:23:42:40:84:96:3b:84:a1:5d:60:
60:f2:df:00:b8:ac:e9:19:d2:9f:35:b1:df:36:c6:
5d:f1:c8:1c:52:9b:e7:6c:d9:20:5a:07:59:27:77:
2d:11:84:0a:76:e5:9d:9e:b9:dc:f3:65:fe:92:c1:
49:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:43:E4:AA:46:43:25:75:FD:AF:B7:35:97:1B:B0:04:0D:95:BB:3D
X509v3 Authority Key Identifier:
keyid:46:EB:11:AF:93:55:DA:9A:2B:5D:F7:3E:CD:D7:FD:09:67:A4:B5:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:0d:f4:da:40:bc:ce:15:d2:b0:15:0c:23:c4:c9:62:01:57:
6e:ec:c4:9c:a2:83:7f:90:84:80:46:09:4b:2b:bf:3b:56:fb:
95:6f:f5:a5:87:02:ca:af:b9:cc:11:1f:80:09:c0:dd:bf:3a:
f3:84:5c:eb:63:96:e1:bf:3b:06:80:2f:b4:86:db:be:c9:da:
39:2b:d7:42:f5:f9:61:ff:72:e0:ad:49:66:42:e7:cb:fb:9d:
eb:9f:45:e6:3f:b3:77:f0:34:64:8e:0f:46:aa:bf:77:98:44:
a2:c4:a5:e7:19:b3:9b:7c:74:0b:d0:0c:b6:59:0b:49:48:04:
8e:9d:1c:41:73:48:a0:5c:a8:25:d5:3f:6c:91:c6:0f:7f:37:
3c:e7:14:c3:4f:93:61:94:cb:4e:38:f9:d4:78:54:7d:e0:56:
ac:71:0e:65:f0:c3:31:70:98:52:d2:60:42:85:93:07:79:93:
76:f0:e6:2b:b9:52:67:47:45:0f:7c:f1:13:80:f5:72:c5:c0:
bd:08:fb:b0:95:9d:8f:14:98:cd:d2:56:21:97:13:6b:5f:b0:
4c:f4:78:4f:24:ca:70:27:6e:72:ba:57:ae:e8:08:e5:a0:c4:
8d:2c:9e:1f:2b:fd:0f:03:94:be:6b:29:66:e9:60:5c:fb:52:
89:af:18:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:17:11 2026 by rpki-client