Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft
File: ruCNkzby5s0WXrcwKX_m0gyDw5o.mft (raw, json)
Hash identifier: HvFmSC2Fg/3Z8ieITEWM6gmmUJDlvEbo3l24sO/DM/I=
Subject key identifier: FE:68:F9:F6:59:16:B1:EE:25:1B:86:65:C4:B9:0B:BF:01:12:02:AB
Authority key identifier: AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A
Certificate issuer: /CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a
Certificate serial: 01A1822B81B82CC0F29349595E43521AF2D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft
Manifest number: 1813
Signing time: Wed 28 Oct 2026 11:00:51 +0000
Manifest this update: Wed 28 Oct 2026 11:00:51 +0000
Manifest next update: Thu 29 Oct 2026 11:00:51 +0000
Files and hashes: 1: 123WXGbRTZdeisXrE-k_3g3EMvk.roa (hash: PVrjq81b7ONxfTHO259I9HIBssHsthuK6wCJzCfRRBw=)
2: 3JLEaN47mFd4AJ1ulcTajHwX46Q.roa (hash: 7nuv0xJK6J/Wz9ZBABmkHA68zDZCu6LbMkw8k4JA0aY=)
3: 3m4ZcWe4AoRitpxIdoHTfvPCTz4.roa (hash: R1IDNKkyr2PRIrfMe44b/uoEQJhofAwIdcVDkSZ0J1s=)
4: ktGWBH_rz8CZASP_zJHcbXXlp7Y.roa (hash: WQj8sJ8bysuFkPbFG5oVPz6oUf8fVBbz+1mkOQXAzAY=)
5: qmwlU-LpszPGm_f_AiX4jfEipIU.roa (hash: eBcbl11HwyKBKgKCJIYPrcRxwRYlzqQyOytUqmTgqj8=)
6: ruCNkzby5s0WXrcwKX_m0gyDw5o.crl (hash: ovP50S364HV8E7dSUBdGWeMQFWOyqN3I2wc9ZhJOqik=)
7: wwateRuj040-ENpDYQ6qLA2XVl0.roa (hash: NH6PZI4atftudx1FEvFD8kdIjwc++XEY3pey7kw2zFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:2b:81:b8:2c:c0:f2:93:49:59:5e:43:52:1a:f2:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a
Validity
Not Before: Oct 28 11:00:51 2026 GMT
Not After : Oct 29 11:00:51 2026 GMT
Subject: CN=fe68f9f65916b1ee251b8665c4b90bbf011202ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:62:4d:b2:34:7e:ed:dc:d3:eb:4b:b5:c6:43:
9a:23:4e:bf:a9:89:21:a1:eb:67:fe:0c:3a:b3:d1:
15:23:1b:5c:e7:75:ee:4f:8d:51:7d:e3:a6:2e:ae:
29:3b:23:0b:66:f5:6b:ba:55:4e:76:b9:50:13:7e:
5e:ae:47:93:9d:c0:26:a7:0e:10:43:e0:5b:31:8f:
0e:01:2d:b9:5e:42:e0:16:91:ff:c1:15:0c:34:93:
52:0a:1d:5d:1b:01:56:a1:4f:82:bd:23:51:0d:77:
23:d6:52:ed:c0:22:55:77:68:20:a5:43:21:00:98:
a7:a6:71:76:20:ff:d7:f2:88:80:f1:a6:04:a9:94:
fd:b3:41:dc:97:78:cb:9c:04:7b:35:a1:b7:4a:d0:
7a:3c:48:6e:5c:fa:19:6a:f9:3e:26:71:60:20:f7:
54:10:22:b6:1f:e3:12:ea:d9:82:bc:69:33:e7:11:
bb:e2:8b:a9:c4:57:8d:b5:54:fe:a0:e2:f6:dd:87:
31:9f:58:d0:8e:5a:40:06:dd:d9:fc:8a:31:2f:b3:
77:5d:3d:da:7b:d7:a3:50:f0:15:44:3f:5f:20:fa:
f3:bc:72:5a:39:5d:eb:8d:17:bf:6e:09:b0:35:44:
a5:dc:27:cc:62:0e:93:2a:58:e0:f2:99:c0:b8:02:
b4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:68:F9:F6:59:16:B1:EE:25:1B:86:65:C4:B9:0B:BF:01:12:02:AB
X509v3 Authority Key Identifier:
keyid:AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:13:c6:e6:a4:77:25:9c:45:bf:1a:6a:87:5b:43:76:49:78:
2e:3d:9b:ef:cc:8b:4e:49:56:74:9c:2b:aa:e0:5f:b7:e6:2b:
e9:65:19:8d:fe:7c:55:ab:e3:c3:d6:82:3d:3e:b0:d9:df:87:
4b:5e:4c:9d:85:5a:7b:0d:ee:f6:cd:28:68:64:bf:22:e9:ea:
bb:37:02:2c:c7:25:72:5a:63:94:68:3e:15:48:d5:ed:65:ea:
fb:7e:36:3f:b4:c7:4a:a0:b7:83:08:a1:ce:e2:e1:d6:ea:8b:
d8:1e:67:8a:25:a7:ca:9b:3c:6f:ea:e5:2c:64:8c:9a:40:9a:
41:8c:ab:e1:6c:8d:bc:43:a3:29:27:46:d6:1c:52:14:eb:9b:
11:36:ee:c1:f8:7d:b5:ad:32:42:61:26:a7:27:d1:4f:53:14:
04:b4:09:55:d1:cd:e8:dc:cb:cd:c2:b1:e8:a7:69:7a:32:f2:
e3:a1:6d:41:53:98:28:86:86:a1:ce:b3:bd:2f:eb:63:65:bb:
92:2a:c3:b8:a3:9b:e2:3c:dc:f1:12:44:67:cd:af:f4:98:1a:
41:6e:e9:01:c9:44:1d:0f:89:2d:50:bd:21:3a:77:f3:6a:43:
86:f9:88:be:90:cd:87:f8:10:31:fb:30:74:c7:27:8f:f4:b8:
a1:86:dd:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:29:01 2026 by rpki-client