
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
File: ruxDT4IchrfuYxZpHXHMYcQMNGw.mft (raw, json)
Hash identifier: YrXMfhXwyk0eR2+Dd039n3NF8yb5Q1FppvF0KFEcluM=
Subject key identifier: 4B:BD:73:54:2C:A2:2E:2A:6C:0B:D4:8A:64:B0:FD:E7:83:AE:E9:5D
Authority key identifier: AE:EC:43:4F:82:1C:86:B7:EE:63:16:69:1D:71:CC:61:C4:0C:34:6C
Certificate issuer: /CN=aeec434f821c86b7ee6316691d71cc61c40c346c
Certificate serial: 019EB921B4F9BDF72EFDE39B445A4B0DFE08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
Manifest number: 0E85
Signing time: Fri 12 Jun 2026 00:00:54 +0000
Manifest this update: Fri 12 Jun 2026 00:00:54 +0000
Manifest next update: Sat 13 Jun 2026 00:00:54 +0000
Files and hashes: 1: hx04DxiZAHeQYm7pOZmel5U9TOA.roa (hash: AjIfJ2c3ZWWZTkNvhuqTyJOvutKGVYOaZ7ocJjjxqUY=)
2: ruxDT4IchrfuYxZpHXHMYcQMNGw.crl (hash: e4FIeMa5/UBU5VbYhMqE294WivJGyvPceV+BfkLzMJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:21:b4:f9:bd:f7:2e:fd:e3:9b:44:5a:4b:0d:fe:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeec434f821c86b7ee6316691d71cc61c40c346c
Validity
Not Before: Jun 12 00:00:54 2026 GMT
Not After : Jun 13 00:00:54 2026 GMT
Subject: CN=4bbd73542ca22e2a6c0bd48a64b0fde783aee95d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:46:66:30:f3:ec:35:d7:a4:bf:10:4c:6a:31:
ad:e7:99:96:3f:bb:c0:b6:d2:36:a8:30:39:48:dc:
eb:d9:20:8b:27:50:55:86:bb:5c:26:42:df:3f:78:
e5:df:52:78:a8:ac:90:86:cb:3d:c4:6e:ec:9d:85:
ff:c2:50:2b:76:dc:33:f4:c2:1f:f5:a3:35:56:79:
c1:08:1a:0c:c4:e3:94:bc:9f:7e:97:93:ab:d3:9f:
c5:d7:07:67:a6:76:5d:bd:0f:83:f4:f8:67:97:53:
19:3b:29:ac:73:18:6f:03:8c:e4:9a:0d:1b:3c:49:
ad:0f:9d:ec:da:46:3f:f2:d9:15:fa:cc:3a:ac:23:
d6:f6:57:84:4c:d8:d4:c6:2a:f0:49:df:d4:e4:3f:
41:b8:eb:e3:97:d7:73:70:77:45:39:85:46:aa:00:
13:c1:bb:82:44:74:98:db:4a:5e:b2:bf:30:7c:70:
74:f2:1d:9a:4a:95:4f:55:37:ae:28:e7:d7:8d:67:
e3:64:17:95:23:91:4d:74:8b:d5:0f:df:37:90:7a:
11:83:cf:e8:1a:fc:af:bc:8f:5d:d9:87:55:7d:50:
e3:dc:7f:88:6e:ce:76:0a:f3:30:d8:c0:8b:fc:81:
31:d9:53:c5:2c:9f:c5:f0:99:ef:31:ae:e4:e4:53:
98:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:BD:73:54:2C:A2:2E:2A:6C:0B:D4:8A:64:B0:FD:E7:83:AE:E9:5D
X509v3 Authority Key Identifier:
keyid:AE:EC:43:4F:82:1C:86:B7:EE:63:16:69:1D:71:CC:61:C4:0C:34:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:9e:70:c5:34:08:c4:1e:f2:9f:1b:3e:81:5e:ec:f6:82:91:
f6:ee:0c:50:6e:75:83:a9:dd:88:45:fe:46:24:2b:70:78:54:
e5:6a:f8:f2:42:8e:2b:aa:6e:f2:8e:21:55:4d:db:d6:6e:80:
b4:44:70:43:0c:fa:91:29:2a:01:9f:5b:7d:b8:9a:80:49:d6:
24:43:70:80:0a:59:61:66:9c:62:7c:1a:5a:fd:85:1c:b5:45:
18:d8:8f:81:9e:db:52:8c:4a:1b:90:30:80:4a:04:1f:cf:c6:
63:75:3f:33:b4:bc:67:95:e6:c0:7a:9e:e2:db:18:92:f9:06:
e5:56:68:e3:a9:74:0d:b4:4e:bc:ba:3c:d6:8c:aa:1c:8c:02:
e4:47:60:54:03:60:01:6a:10:11:10:b6:b9:88:3e:63:3e:2e:
28:5d:f4:fb:67:ae:53:37:4d:73:79:39:0f:6e:08:23:7b:8a:
4e:9f:34:7a:08:d5:1e:a4:3c:65:d5:a9:55:c3:f7:22:f9:38:
d4:c8:f9:38:e3:ee:cb:2f:bb:68:9a:7a:7e:ed:ca:81:f8:84:
59:2a:93:f5:0e:40:70:7d:18:51:d6:0d:b9:f6:78:e9:9c:39:
f0:c8:a3:56:70:cc:2f:1e:93:bf:3b:99:bc:ba:f4:cf:08:a2:
4e:35:32:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:24:13 2026 by rpki-client