Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
File: ruxDT4IchrfuYxZpHXHMYcQMNGw.mft (raw, json)
Hash identifier: 3EK1MtOztFYF6B5nxwinXucP6aV3H7HmWdIO8ZQSSUM=
Subject key identifier: CE:7A:90:2E:B9:9E:C4:FC:0A:7D:E0:8C:93:11:57:58:9C:AE:E1:C0
Authority key identifier: AE:EC:43:4F:82:1C:86:B7:EE:63:16:69:1D:71:CC:61:C4:0C:34:6C
Certificate issuer: /CN=aeec434f821c86b7ee6316691d71cc61c40c346c
Certificate serial: 01A17DE1E81E2B35BF8DAC5E5043D39CF8FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
Manifest number: 0FF4
Signing time: Tue 27 Oct 2026 15:01:59 +0000
Manifest this update: Tue 27 Oct 2026 15:01:59 +0000
Manifest next update: Wed 28 Oct 2026 15:01:59 +0000
Files and hashes: 1: hx04DxiZAHeQYm7pOZmel5U9TOA.roa (hash: AjIfJ2c3ZWWZTkNvhuqTyJOvutKGVYOaZ7ocJjjxqUY=)
2: ruxDT4IchrfuYxZpHXHMYcQMNGw.crl (hash: LQep62CO4QS4a3DiEWblnNcc1/k8qEaQOqtGcRC0ONo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 15:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:e1:e8:1e:2b:35:bf:8d:ac:5e:50:43:d3:9c:f8:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeec434f821c86b7ee6316691d71cc61c40c346c
Validity
Not Before: Oct 27 15:01:59 2026 GMT
Not After : Oct 28 15:01:59 2026 GMT
Subject: CN=ce7a902eb99ec4fc0a7de08c931157589caee1c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ee:35:a0:cb:cc:f7:24:b5:3d:4a:c6:35:2b:
c7:b0:3d:c3:d3:60:17:b3:f4:62:a9:9c:0b:f3:9d:
5f:fa:9d:05:c8:59:b2:3c:83:ef:d5:85:5c:a0:6f:
26:98:58:80:ec:aa:08:64:82:01:15:35:02:06:72:
fd:95:ae:8d:8f:30:b1:c0:6b:66:9e:5f:53:2c:e2:
4b:a1:f2:eb:07:8c:91:23:83:80:7e:e3:41:f7:6d:
dc:d8:ce:96:ab:e3:8f:b7:eb:b4:ff:27:4c:4f:d0:
92:f6:e6:f7:dc:18:9c:4c:54:52:ab:90:54:e3:4d:
6c:e4:d2:ca:83:ea:51:34:d8:78:ae:49:2c:23:15:
99:27:91:a9:d3:d7:d9:f2:64:ac:8c:b8:57:4b:17:
51:05:21:dd:fb:2b:3e:6a:39:8c:62:18:f8:12:75:
d1:0f:42:8d:c6:4b:59:d4:cf:9b:58:4f:89:ea:7e:
7c:7e:6b:df:15:41:88:d7:a2:87:f1:37:23:59:11:
f1:49:35:79:c2:f7:c8:39:e7:3b:d6:04:f3:1d:28:
d3:e8:67:05:18:46:03:5d:4f:57:9d:a4:ac:1f:ed:
8e:d9:5d:bb:9b:46:a5:d1:8a:03:d8:97:80:f1:8e:
4e:3d:eb:f2:0a:c5:e0:55:83:8c:c4:7f:cc:54:35:
d8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:7A:90:2E:B9:9E:C4:FC:0A:7D:E0:8C:93:11:57:58:9C:AE:E1:C0
X509v3 Authority Key Identifier:
keyid:AE:EC:43:4F:82:1C:86:B7:EE:63:16:69:1D:71:CC:61:C4:0C:34:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:fe:ff:0f:54:12:f1:4c:db:89:0a:04:40:08:29:21:22:b0:
94:93:23:91:66:4b:2b:cd:92:19:96:67:f9:93:62:ff:99:99:
56:8b:91:f1:2b:ef:c6:57:9f:96:1e:59:60:a3:32:70:2c:ae:
97:1e:bb:28:1a:be:e1:ae:51:a9:33:97:f4:dc:4a:84:67:3a:
d8:6c:3e:91:db:f4:ad:7e:8b:e9:b7:08:a3:36:42:84:c2:91:
72:3e:6d:0e:c3:2f:2d:39:d0:64:66:41:7f:f2:f6:d4:df:fc:
71:35:50:46:3c:2c:61:24:7a:a9:3b:39:56:4f:80:56:06:ee:
2d:f5:67:b0:0e:bd:81:b5:e1:ae:b9:90:66:7e:f2:96:ef:9d:
d6:f6:69:5f:b9:fa:5a:85:56:e3:db:1d:dd:2f:ff:02:4e:b3:
5d:fb:e7:24:63:85:e4:46:4f:a5:01:dc:16:1b:5f:9f:5c:08:
54:55:6f:49:c0:aa:15:f8:67:46:6e:41:e4:a0:14:21:d1:cf:
6f:f9:48:28:b3:78:87:1c:94:2d:ee:60:bb:af:46:1e:b8:73:
ed:69:5a:c6:6d:33:b6:f9:38:d8:b4:a2:4a:0d:6d:10:45:c0:
12:e5:de:3c:90:ee:8e:6a:d5:a3:6b:4b:a7:bc:33:86:ed:69:
72:2f:e6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:52:52 2026 by rpki-client