Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
File: ruxDT4IchrfuYxZpHXHMYcQMNGw.mft (raw, json)
Hash identifier: RHXhDZLV2gj7k01ae7qt4PnJC5s9hx7PfnGToJ9SqVc=
Subject key identifier: 12:4F:DB:87:23:3B:07:1A:AC:92:47:BD:79:05:FB:41:5C:E7:A6:C2
Authority key identifier: AE:EC:43:4F:82:1C:86:B7:EE:63:16:69:1D:71:CC:61:C4:0C:34:6C
Certificate issuer: /CN=aeec434f821c86b7ee6316691d71cc61c40c346c
Certificate serial: 019DCF75AA7CEE97496ECE6196049E9F729A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
Manifest number: 0E0C
Signing time: Mon 27 Apr 2026 15:01:28 +0000
Manifest this update: Mon 27 Apr 2026 15:01:28 +0000
Manifest next update: Tue 28 Apr 2026 15:01:28 +0000
Files and hashes: 1: hx04DxiZAHeQYm7pOZmel5U9TOA.roa (hash: AjIfJ2c3ZWWZTkNvhuqTyJOvutKGVYOaZ7ocJjjxqUY=)
2: ruxDT4IchrfuYxZpHXHMYcQMNGw.crl (hash: ZGFcUntQ6vOiD45kL5jnu3DkJJHeCn/UdwsdQRsxjjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 15:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:75:aa:7c:ee:97:49:6e:ce:61:96:04:9e:9f:72:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeec434f821c86b7ee6316691d71cc61c40c346c
Validity
Not Before: Apr 27 15:01:28 2026 GMT
Not After : Apr 28 15:01:28 2026 GMT
Subject: CN=124fdb87233b071aac9247bd7905fb415ce7a6c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bb:08:7c:2c:e5:51:19:26:7d:01:3b:e4:5b:
7b:ca:51:15:b7:cf:43:44:45:5e:a6:08:2f:f2:2f:
52:71:9f:3b:25:f6:91:78:5e:7f:e5:b1:43:47:4a:
c4:a3:5c:dd:a3:ad:85:26:db:48:28:96:af:53:ab:
a5:0f:19:15:8b:1c:59:af:5b:b0:b7:90:28:e0:31:
20:5f:86:03:54:32:28:4a:5d:00:89:23:ab:5a:3d:
8a:8c:c9:3f:7e:d3:2a:ed:3e:3a:a8:6e:9c:24:18:
4c:6c:03:c1:c5:02:af:03:9f:4f:a6:56:54:23:95:
41:5f:16:e3:3f:97:29:a4:88:f6:60:98:61:bf:bb:
38:33:f6:31:c9:99:03:07:38:09:04:13:0b:8a:2e:
14:18:d0:9d:1c:d9:95:2a:ba:65:e3:c9:2c:f2:79:
c7:90:ed:41:88:99:70:b5:63:81:63:c2:c5:68:b4:
0d:09:d8:4b:9e:21:02:3a:28:77:7d:31:58:f9:df:
09:b6:34:01:cf:6a:7f:85:44:09:33:c7:1c:b2:59:
4c:20:8f:f6:13:ec:ef:df:a2:b0:e3:99:ed:58:a2:
a7:1b:42:59:51:c2:d5:c3:eb:aa:d5:6f:bb:72:1b:
55:7b:4f:45:d2:de:cb:cb:a1:47:c7:17:bd:d9:af:
b4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:4F:DB:87:23:3B:07:1A:AC:92:47:BD:79:05:FB:41:5C:E7:A6:C2
X509v3 Authority Key Identifier:
keyid:AE:EC:43:4F:82:1C:86:B7:EE:63:16:69:1D:71:CC:61:C4:0C:34:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ab:ca:5d:20:35:fa:2c:c5:af:cb:32:97:48:0e:07:48:9d:
e9:44:58:1b:2c:01:3f:ef:4d:a6:d0:f2:bb:08:07:d8:46:ca:
ba:ca:be:7f:67:c8:71:c8:48:29:d5:be:8c:b9:94:46:3c:88:
9e:0b:c8:64:07:b2:56:53:e0:eb:ae:68:8c:b1:63:f6:b2:d6:
d3:ec:92:23:a3:0a:3a:6f:25:a3:3f:0a:b2:69:f9:db:51:54:
83:5f:f2:9e:54:bd:c7:01:df:bb:00:96:fb:2f:d9:d5:a7:83:
53:49:82:90:ae:13:1d:07:65:7f:41:18:10:1d:ed:aa:20:48:
32:3f:2d:c9:5d:52:2c:85:0b:fc:8a:62:1e:b1:1c:17:8a:e6:
fa:8a:34:25:4d:ec:05:84:aa:ab:e8:68:d7:09:01:f8:ff:dc:
38:84:d7:ee:e5:13:ec:7e:06:85:9b:90:e2:73:a4:a7:33:56:
05:ca:e5:7e:fe:33:aa:2a:ca:f6:fa:70:69:d5:bb:19:63:f5:
85:65:00:e4:17:38:e0:53:13:2f:1d:ad:b9:a9:da:bb:72:e2:
3d:29:da:92:f1:05:83:2e:3d:33:a6:13:6f:7c:b1:3f:bd:67:
dd:b5:e6:35:45:c3:e8:62:7b:87:17:2c:05:33:8a:1c:81:ca:
6b:f6:50:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3Pdap87pdJbs5hlgSen3KaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZWM0MzRmODIxYzg2YjdlZTYzMTY2OTFkNzFjYzYxYzQw
YzM0NmMwHhcNMjYwNDI3MTUwMTI4WhcNMjYwNDI4MTUwMTI4WjAzMTEwLwYDVQQD
EygxMjRmZGI4NzIzM2IwNzFhYWM5MjQ3YmQ3OTA1ZmI0MTVjZTdhNmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprsIfCzlURkmfQE75Ft7ylEVt89D
REVepggv8i9ScZ87JfaReF5/5bFDR0rEo1zdo62FJttIKJavU6ulDxkVixxZr1uw
t5Ao4DEgX4YDVDIoSl0AiSOrWj2KjMk/ftMq7T46qG6cJBhMbAPBxQKvA59PplZU
I5VBXxbjP5cppIj2YJhhv7s4M/YxyZkDBzgJBBMLii4UGNCdHNmVKrpl48ks8nnH
kO1BiJlwtWOBY8LFaLQNCdhLniECOih3fTFY+d8JtjQBz2p/hUQJM8ccsllMII/2
E+zv36Kw45ntWKKnG0JZUcLVw+uq1W+7chtVe09F0t7Ly6FHxxe92a+0XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBJP24cjOwcarJJHvXkF+0Fc56bCMB8GA1UdIwQY
MBaAFK7sQ0+CHIa37mMWaR1xzGHEDDRsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnV4RFQ0SWNocmZ1WXhacEhYSE1ZY1FNTkd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny80YjA3OTAtNTc3OC00ZjYxLWEwZWUt
OTEwZTA4MTBjYTk0LzEvcnV4RFQ0SWNocmZ1WXhacEhYSE1ZY1FNTkd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny80YjA3OTAtNTc3OC00ZjYxLWEwZWUtOTEwZTA4MTBjYTk0
LzEvcnV4RFQ0SWNocmZ1WXhacEhYSE1ZY1FNTkd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPavKXSA1
+izFr8syl0gOB0id6URYGywBP+9NptDyuwgH2EbKusq+f2fIcchIKdW+jLmURjyI
ngvIZAeyVlPg665ojLFj9rLW0+ySI6MKOm8loz8Ksmn521FUg1/ynlS9xwHfuwCW
+y/Z1aeDU0mCkK4THQdlf0EYEB3tqiBIMj8tyV1SLIUL/IpiHrEcF4rm+oo0JU3s
BYSqq+ho1wkB+P/cOITX7uUT7H4GhZuQ4nOkpzNWBcrlfv4zqirK9vpwadW7GWP1
hWUA5Bc44FMTLx2tuanau3LiPSnakvEFgy49M6YTb3yxP71n3bXmNUXD6GJ7hxcs
BTOKHIHKa/ZQAA==
-----END CERTIFICATE-----
Generated at Mon Apr 27 21:05:30 2026 by rpki-client