Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.mft
File: rujl3-xoOuXxoOvg-5b6JWswR2I.mft (raw, json)
Hash identifier: PPckOwOAKc6BhiJUNuZshuWc21xLsXCnXHbMVfS7Z0M=
Subject key identifier: 52:8F:61:EB:72:62:09:8E:6B:76:94:4A:E0:2D:AD:1B:69:A2:C2:E1
Authority key identifier: AE:E8:E5:DF:EC:68:3A:E5:F1:A0:EB:E0:FB:96:FA:25:6B:30:47:62
Certificate issuer: /CN=aee8e5dfec683ae5f1a0ebe0fb96fa256b304762
Certificate serial: 019D375325AE3A0FFAABF8C2395879B4A969
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rujl3-xoOuXxoOvg-5b6JWswR2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.mft
Manifest number: 114C
Signing time: Sun 29 Mar 2026 02:01:29 +0000
Manifest this update: Sun 29 Mar 2026 02:01:29 +0000
Manifest next update: Mon 30 Mar 2026 02:01:29 +0000
Files and hashes: 1: rujl3-xoOuXxoOvg-5b6JWswR2I.crl (hash: qI37eTob5KhSBhvMRits2cIfDDQIxD2aJqET+KsjC8s=)
2: xQH4kxn8xBsyaqhIlNPO4xn-4HA.roa (hash: 4c/eyqsX/8YhnNDX8tQhJuM4UkjqguMRdc8B5oNvgSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/rujl3-xoOuXxoOvg-5b6JWswR2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:25:ae:3a:0f:fa:ab:f8:c2:39:58:79:b4:a9:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee8e5dfec683ae5f1a0ebe0fb96fa256b304762
Validity
Not Before: Mar 29 02:01:29 2026 GMT
Not After : Mar 30 02:01:29 2026 GMT
Subject: CN=528f61eb7262098e6b76944ae02dad1b69a2c2e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e4:a7:0f:e5:0a:02:bb:4c:5f:d3:02:a0:12:
56:88:82:f8:87:9d:c4:d4:18:01:49:67:60:00:3c:
c7:d1:cb:4f:9b:fe:70:46:66:86:63:85:e2:17:9f:
ae:9d:c7:cb:bb:03:13:28:3d:30:e5:27:87:96:a9:
24:26:24:1b:48:32:1c:21:b4:75:4c:b6:d9:d5:e7:
a9:13:32:d4:ae:9a:fc:46:e0:35:ca:7d:b2:e7:de:
9d:7d:e4:72:f0:99:1b:87:dc:ae:b8:f0:65:35:55:
78:86:0c:88:02:d3:3a:72:d2:05:e3:58:db:15:c9:
6e:c5:46:f1:50:ce:95:f7:f4:23:5b:dc:00:22:73:
6f:b9:d2:3d:f7:99:3b:0c:62:c0:56:a2:b4:5b:90:
c0:6e:59:f9:8a:f4:17:52:92:63:59:aa:6c:0f:c5:
14:bc:a6:d2:d2:c6:0b:fd:e5:23:bd:c1:b8:d1:87:
b6:45:cb:34:38:bf:9d:27:8d:09:ff:88:a1:38:d3:
0d:00:10:31:d0:b9:84:47:ef:c9:d8:3c:07:30:63:
b7:cb:46:c9:36:1d:65:7d:a9:14:a9:34:95:ea:e4:
0f:50:08:90:0a:cf:ab:80:71:a4:67:20:a6:e5:5c:
45:fb:ce:22:5e:2b:05:8d:3f:ac:8c:9d:2d:e2:9e:
88:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:8F:61:EB:72:62:09:8E:6B:76:94:4A:E0:2D:AD:1B:69:A2:C2:E1
X509v3 Authority Key Identifier:
keyid:AE:E8:E5:DF:EC:68:3A:E5:F1:A0:EB:E0:FB:96:FA:25:6B:30:47:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rujl3-xoOuXxoOvg-5b6JWswR2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:8e:dc:42:a8:86:46:41:96:ac:ec:93:2f:7d:8f:59:27:53:
63:3a:bb:f6:85:57:29:aa:8e:42:22:75:b2:15:e1:84:a6:70:
4a:c2:c9:31:eb:81:bf:02:ee:88:09:89:a0:d4:ab:bf:63:be:
22:0f:1c:b5:eb:89:2b:82:b2:8a:df:b3:d5:7c:76:de:06:bd:
d3:d1:96:19:65:0b:c6:35:f4:5c:38:d8:76:4f:b7:36:f8:09:
a4:41:10:80:dc:9e:35:e4:9f:5d:af:73:f0:f3:42:dc:22:57:
c9:b7:1b:86:fd:6e:bd:fb:83:94:33:61:70:70:a6:82:7e:51:
e0:c8:e6:1c:d7:3f:d5:3e:95:05:cb:be:3c:44:47:3f:60:ba:
32:0a:df:f6:0a:b8:4c:4a:90:e5:d6:2e:17:13:3c:cb:30:fb:
1c:17:bd:84:14:63:eb:a1:b7:6d:82:36:f3:ff:b5:af:6f:1c:
ac:f0:72:2c:d7:7f:a1:75:b9:2b:7a:44:7f:64:a1:2c:38:61:
21:17:2b:54:e5:cc:ab:2c:cf:8a:d5:36:41:7c:05:9d:12:4b:
5d:20:d3:a2:f3:66:39:18:17:8c:5b:53:05:ac:32:3b:a0:d7:
37:d2:38:85:c6:f3:8d:a3:ab:01:21:74:d7:c6:6e:e3:d6:ff:
9e:b8:32:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:30 2026 by rpki-client