Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.mft
File: RUv1gRnP6Z8XSbzZvRJHArqctxM.mft (raw, json)
Hash identifier: RJ0gUZUKFD3FCrj0SQsOVb1zwauluRFiNY+pKl1F4h4=
Subject key identifier: BB:6C:61:42:1A:21:73:FA:08:74:D4:3E:9E:66:D4:B0:09:54:4F:20
Authority key identifier: 45:4B:F5:81:19:CF:E9:9F:17:49:BC:D9:BD:12:47:02:BA:9C:B7:13
Certificate issuer: /CN=454bf58119cfe99f1749bcd9bd124702ba9cb713
Certificate serial: 01A12B44A5104DDBBF06AFB5EA49897D5619
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RUv1gRnP6Z8XSbzZvRJHArqctxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.mft
Manifest number: 1522
Signing time: Sun 11 Oct 2026 14:01:21 +0000
Manifest this update: Sun 11 Oct 2026 14:01:21 +0000
Manifest next update: Mon 12 Oct 2026 14:01:21 +0000
Files and hashes: 1: RUv1gRnP6Z8XSbzZvRJHArqctxM.crl (hash: 1L9tGSwrE/nRp23k2YPHLXTjnBNhUztAni93z+uy6WA=)
2: UxsbNkBxV5Z06pGcubFBR8uKdLw.roa (hash: tbWLve0j2n3BjQjOZ6pgmALHAdTE4wxSO/sJbmSQFxs=)
3: tTQT4HsHlUWlBxRkYb49ZrBAWtY.roa (hash: +00YrVjwsl/7FXL7Et4Om6euiIMwhs1ab+9m+Zkr+NA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RUv1gRnP6Z8XSbzZvRJHArqctxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:44:a5:10:4d:db:bf:06:af:b5:ea:49:89:7d:56:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=454bf58119cfe99f1749bcd9bd124702ba9cb713
Validity
Not Before: Oct 11 14:01:21 2026 GMT
Not After : Oct 12 14:01:21 2026 GMT
Subject: CN=bb6c61421a2173fa0874d43e9e66d4b009544f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e7:c4:40:8a:68:5b:9f:d1:b7:bf:1d:a7:33:
22:6e:bf:8a:09:bf:e5:b1:fe:64:e5:4d:18:59:ad:
f5:7a:1f:1b:35:e7:0c:31:08:ec:3c:80:91:71:a5:
48:c3:05:ef:fd:af:6c:49:3e:cf:c3:2e:8c:3c:ac:
22:07:b1:db:37:6b:ce:13:83:5d:da:10:69:d0:7d:
a8:54:a8:33:3e:b1:3f:a2:4e:da:08:d9:e7:59:c9:
48:4d:cb:3f:1e:55:38:30:a5:a1:b4:4a:be:5b:7b:
12:8b:42:21:22:e8:b1:0e:b4:ca:d6:86:24:83:28:
4c:b4:76:a2:d1:20:df:19:01:7a:4b:f5:88:b0:51:
07:26:45:b0:b4:04:9b:55:fc:4f:e3:5d:c0:9d:76:
7b:8a:ec:8a:6e:76:7b:d0:0b:f3:95:36:39:26:a0:
1b:0b:63:10:cc:31:44:ff:65:a3:6a:9d:13:f6:e1:
68:fc:1f:2f:27:85:c3:a9:7b:87:29:68:f1:0c:38:
00:b9:6c:a2:11:7b:20:2e:ed:f6:44:f5:75:24:97:
0a:fe:16:21:4a:7c:11:ff:f4:78:ba:5e:34:89:f1:
07:e0:d2:21:d5:f0:fc:fd:5f:0d:9f:a0:09:ab:32:
24:6e:92:a0:33:5d:0e:c1:83:da:df:4b:da:ac:3f:
ce:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:6C:61:42:1A:21:73:FA:08:74:D4:3E:9E:66:D4:B0:09:54:4F:20
X509v3 Authority Key Identifier:
keyid:45:4B:F5:81:19:CF:E9:9F:17:49:BC:D9:BD:12:47:02:BA:9C:B7:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RUv1gRnP6Z8XSbzZvRJHArqctxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:60:8c:af:57:6d:de:ab:31:08:be:09:96:24:b0:e3:e7:ba:
b8:19:84:c6:a7:45:9d:91:cd:34:ec:e5:c0:84:cb:2e:3c:13:
b9:01:d1:83:28:38:73:9e:a8:28:60:e5:16:f3:0f:f8:33:aa:
e8:a9:2e:b1:9f:c1:a8:45:64:ff:60:9f:f2:ab:f9:e6:f2:7e:
e5:8e:54:37:1b:c1:56:f5:6e:68:5c:dc:fe:91:e9:19:f3:8c:
1a:00:41:69:f1:d1:38:39:08:c6:b1:9f:6b:83:66:d1:8b:5f:
cd:b9:a5:cc:86:51:b5:ac:e0:84:bd:cf:67:5f:91:cf:98:ea:
40:a3:89:90:f6:bf:85:57:ee:ae:e6:f6:aa:c5:47:de:b5:08:
e2:f4:ba:e6:75:5e:f6:4d:07:6e:d6:9e:30:e0:e6:cf:95:0f:
ed:6a:03:cf:f3:5c:bc:53:f9:60:0e:34:1b:f9:d5:5f:1a:5c:
f1:72:4f:4f:f7:c6:2b:36:cb:94:ef:c9:56:3e:de:55:5d:cf:
70:81:7a:fa:c8:47:c0:e5:37:6c:c5:57:8e:9c:5a:d1:30:e1:
05:5a:04:19:12:6a:d5:3c:ee:26:15:59:44:c5:9a:87:e5:31:
e9:79:0c:a9:d3:b3:fc:e3:f4:68:0b:ca:68:e1:7b:0a:47:9e:
9a:d2:c1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:10:25 2026 by rpki-client