Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
File: ruxDT4IchrfuYxZpHXHMYcQMNGw.mft (raw, json)
Hash identifier: DVYBT9m+8ujBpgePNAl0+0pGan6a3jQaSnk4OiEYvbw=
Subject key identifier: C8:28:5C:AE:68:1A:64:01:1A:25:87:33:B6:F7:35:5E:4A:F8:E5:AA
Authority key identifier: AE:EC:43:4F:82:1C:86:B7:EE:63:16:69:1D:71:CC:61:C4:0C:34:6C
Certificate issuer: /CN=aeec434f821c86b7ee6316691d71cc61c40c346c
Certificate serial: 019FA2CDFBF754F36E2112765674AB208E86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
Manifest number: 0EFE
Signing time: Mon 27 Jul 2026 09:00:35 +0000
Manifest this update: Mon 27 Jul 2026 09:00:35 +0000
Manifest next update: Tue 28 Jul 2026 09:00:35 +0000
Files and hashes: 1: hx04DxiZAHeQYm7pOZmel5U9TOA.roa (hash: AjIfJ2c3ZWWZTkNvhuqTyJOvutKGVYOaZ7ocJjjxqUY=)
2: ruxDT4IchrfuYxZpHXHMYcQMNGw.crl (hash: nkYeDjPgPTWxE44rE+msbu9TTKzNS57kHR1C0r4bMiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:cd:fb:f7:54:f3:6e:21:12:76:56:74:ab:20:8e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeec434f821c86b7ee6316691d71cc61c40c346c
Validity
Not Before: Jul 27 09:00:35 2026 GMT
Not After : Jul 28 09:00:35 2026 GMT
Subject: CN=c8285cae681a64011a258733b6f7355e4af8e5aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1c:26:81:b3:58:85:bd:ac:8e:5f:05:db:1d:
7c:cd:79:15:55:b2:12:23:89:6d:f8:75:e2:33:80:
8f:ab:db:38:eb:ab:d7:99:a5:9d:26:35:06:d0:89:
e9:a2:f9:fb:30:35:7e:ec:1e:db:b0:f5:2b:77:d8:
41:4c:f3:e7:1d:dc:4e:49:e5:4d:9c:48:de:7b:82:
98:20:6e:5e:4a:29:12:06:33:20:5c:51:3a:4e:73:
4d:6a:6f:e0:bc:87:7d:de:20:ce:8d:8e:a4:8e:93:
57:dd:ab:0c:90:66:6d:ff:4a:ac:af:ce:1b:ec:03:
1a:98:6d:85:d0:fd:37:f0:aa:18:3c:0f:55:46:a2:
ef:22:ce:42:8a:60:7a:70:e6:9e:ab:44:0c:d5:2b:
bc:ca:d9:44:77:7c:61:4f:50:9d:9d:e8:28:7d:91:
61:60:7e:06:50:ba:3a:cc:0e:f1:5b:b0:7d:03:de:
f3:f9:a9:87:a7:d8:44:a7:53:29:2b:e2:a1:77:98:
fd:9a:b8:f6:6e:2b:98:56:33:27:ce:0c:80:45:bc:
ee:63:ae:86:72:50:94:04:f8:9a:43:61:74:f3:4e:
f0:28:45:f5:88:eb:dc:58:6c:42:13:54:d9:12:6f:
5e:08:af:3b:da:39:fc:b9:a3:38:8d:45:a7:2d:fa:
02:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:28:5C:AE:68:1A:64:01:1A:25:87:33:B6:F7:35:5E:4A:F8:E5:AA
X509v3 Authority Key Identifier:
keyid:AE:EC:43:4F:82:1C:86:B7:EE:63:16:69:1D:71:CC:61:C4:0C:34:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:f0:e6:22:7e:3b:81:8c:2d:c6:6f:c0:b3:7c:c6:66:70:36:
77:62:d3:ef:66:e3:92:73:1d:22:ec:07:39:90:f2:b0:a4:9a:
1e:fb:e1:21:fe:f6:47:6b:2d:bc:1e:92:fc:15:ea:71:83:18:
54:e4:06:bd:01:d4:f5:a3:0f:77:ec:ee:df:87:f3:49:72:4f:
87:11:82:8d:ce:ad:27:98:dd:4b:73:37:0f:f1:17:47:6c:77:
3d:5a:6a:5d:e6:ce:25:40:97:b1:c4:cd:dd:fa:4d:83:7d:48:
c0:9e:e2:b7:93:d1:18:55:46:82:60:50:bd:9e:aa:b6:0c:4f:
c5:4f:14:66:89:ad:40:72:c4:11:0c:27:d0:0b:0a:81:d5:f1:
40:34:e9:30:a7:2e:05:d3:d9:62:19:61:62:f5:35:4f:19:ca:
29:b0:cf:17:ae:b6:1e:3a:d0:d2:9c:a4:d1:d4:4e:56:ca:89:
d9:1a:ee:e1:d9:ec:80:d6:07:0b:9f:72:77:86:22:87:05:c7:
a3:d9:38:07:64:bf:6b:f4:b0:74:ec:60:0e:d9:f3:fa:f5:e8:
38:eb:f4:e1:ed:99:51:f9:ca:e6:f3:12:c8:cf:33:a2:3a:d2:
e5:28:cb:45:eb:88:8e:53:d0:e6:59:90:f9:b1:65:df:90:51:
50:49:78:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:21:04 2026 by rpki-client