Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
File: ruxDT4IchrfuYxZpHXHMYcQMNGw.mft (raw, json)
Hash identifier: ZEE1VR9VFXwidHcezDEwqSW6N2f0fFcmY1EmB3t/FP8=
Subject key identifier: 84:5D:C8:26:F3:98:2A:95:FA:F6:D4:C8:56:63:CA:9E:2C:95:F8:9F
Authority key identifier: AE:EC:43:4F:82:1C:86:B7:EE:63:16:69:1D:71:CC:61:C4:0C:34:6C
Certificate issuer: /CN=aeec434f821c86b7ee6316691d71cc61c40c346c
Certificate serial: 019CE5C8C773A1F8B138903FF48FD7761DFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
Manifest number: 0D93
Signing time: Fri 13 Mar 2026 06:01:06 +0000
Manifest this update: Fri 13 Mar 2026 06:01:06 +0000
Manifest next update: Sat 14 Mar 2026 06:01:06 +0000
Files and hashes: 1: hx04DxiZAHeQYm7pOZmel5U9TOA.roa (hash: AjIfJ2c3ZWWZTkNvhuqTyJOvutKGVYOaZ7ocJjjxqUY=)
2: ruxDT4IchrfuYxZpHXHMYcQMNGw.crl (hash: 2e8WY/hn3GZXmKtuudRZ9IPMSJPmNvTHYPeBWavYF90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:c8:c7:73:a1:f8:b1:38:90:3f:f4:8f:d7:76:1d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeec434f821c86b7ee6316691d71cc61c40c346c
Validity
Not Before: Mar 13 06:01:06 2026 GMT
Not After : Mar 14 06:01:06 2026 GMT
Subject: CN=845dc826f3982a95faf6d4c85663ca9e2c95f89f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:75:25:e4:da:6f:3e:3b:ba:e1:f3:c1:61:1f:
df:36:d2:7a:16:6b:5e:8b:10:3b:e3:c6:ab:3b:98:
80:91:a7:f6:42:f3:ca:92:15:ce:42:fe:c2:96:e2:
5c:18:43:e7:8a:85:04:24:4b:6e:1e:fd:ce:e9:a7:
d7:5f:5a:b0:0d:f5:62:97:0c:94:7f:4a:83:3e:cd:
cf:10:41:b8:23:d8:58:5d:26:73:3c:6c:c3:9b:2e:
f4:35:a9:48:97:53:e3:62:78:28:ae:b6:b8:cc:25:
17:85:14:c2:58:a7:a7:14:f9:96:40:1d:dd:87:3e:
d2:0f:7a:5b:f8:3d:e0:87:f0:f9:ae:c6:91:da:66:
a4:c5:72:90:c7:91:56:df:ec:91:99:f3:4a:a3:d5:
88:8e:a2:c5:c8:67:ab:42:75:5b:5c:5f:e2:7f:a6:
f4:03:8f:88:f2:ce:69:e3:80:04:fb:21:7c:80:0f:
ed:09:b1:33:6b:df:1e:65:79:06:4e:a7:0b:f2:86:
82:2f:a2:12:8c:db:05:74:71:ce:db:d2:c2:b5:2e:
4a:5a:4f:36:0b:48:55:fc:65:72:8d:03:66:54:6b:
83:f4:57:1a:6b:25:35:af:32:fe:55:a2:46:c6:70:
56:15:ec:02:36:92:7b:e0:fb:d4:45:d6:65:0f:54:
1a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:5D:C8:26:F3:98:2A:95:FA:F6:D4:C8:56:63:CA:9E:2C:95:F8:9F
X509v3 Authority Key Identifier:
keyid:AE:EC:43:4F:82:1C:86:B7:EE:63:16:69:1D:71:CC:61:C4:0C:34:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:3e:0c:8d:6c:0c:91:dc:c1:c5:a4:18:7f:5c:da:d1:8c:24:
e9:c3:20:1d:c6:36:fe:0e:ee:f4:1c:54:14:bd:d9:7c:ca:05:
1e:50:70:f4:7f:43:6a:73:37:59:47:3a:37:3e:bf:dc:f5:1a:
c5:e8:41:2f:05:09:a8:86:49:36:7a:4f:0c:8c:95:7e:a8:a2:
5f:f5:b5:ff:82:6f:76:48:90:1d:69:c1:0f:19:50:b8:c9:62:
74:a0:83:31:0b:9a:09:56:00:0a:94:72:23:75:3c:8d:f2:49:
6d:3f:7f:ee:9e:29:88:47:b2:b4:ac:80:97:7e:54:50:02:6f:
8c:e4:b8:1f:29:58:5b:4c:86:3d:4d:81:b5:7b:c6:b3:eb:4f:
b4:43:3c:1f:e3:3b:0e:9b:46:5e:bd:49:73:9a:a6:d4:e0:6e:
dc:1b:b1:d5:bd:7a:bd:6d:2b:ce:a9:e4:af:97:d0:0c:bc:ea:
a9:ce:5d:75:8c:8b:d6:db:be:15:8f:75:6e:0b:b3:9b:5c:22:
25:a1:a4:de:25:d1:40:53:bc:22:a4:66:27:05:5f:d0:94:f5:
b5:fe:b5:c8:f6:dc:27:fe:64:44:19:84:c2:38:2b:5c:11:86:
f7:a9:f2:2a:a2:6c:77:cc:91:74:3e:bf:77:b2:93:97:62:f1:
0b:e4:eb:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 15:13:46 2026 by rpki-client