Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/d2036a-27a7-4cdb-b4fe-9311275f38ea/1/ru85tCEAXzAraRD5Y5P0tlR6j-w.mft
File: ru85tCEAXzAraRD5Y5P0tlR6j-w.mft (raw, json)
Hash identifier: nQSuwDS9tbfupB6vwbvDxKRJq0dF6OHTrPO0WkhKWpY=
Subject key identifier: E8:19:42:05:3F:60:B7:FB:26:EA:88:47:69:8E:54:DA:9C:7B:28:88
Authority key identifier: AE:EF:39:B4:21:00:5F:30:2B:69:10:F9:63:93:F4:B6:54:7A:8F:EC
Certificate issuer: /CN=aeef39b421005f302b6910f96393f4b6547a8fec
Certificate serial: 019D38D3361F825AE626FDDFF127DB58324E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ru85tCEAXzAraRD5Y5P0tlR6j-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/d2036a-27a7-4cdb-b4fe-9311275f38ea/1/ru85tCEAXzAraRD5Y5P0tlR6j-w.mft
Manifest number: 0330
Signing time: Sun 29 Mar 2026 09:00:59 +0000
Manifest this update: Sun 29 Mar 2026 09:00:59 +0000
Manifest next update: Mon 30 Mar 2026 09:00:59 +0000
Files and hashes: 1: ru85tCEAXzAraRD5Y5P0tlR6j-w.crl (hash: 0j9cHn5jYv42ZnpZfnhwTdPpJteztyai8Ifo2Qws3qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/d2036a-27a7-4cdb-b4fe-9311275f38ea/1/ru85tCEAXzAraRD5Y5P0tlR6j-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/d2036a-27a7-4cdb-b4fe-9311275f38ea/1/ru85tCEAXzAraRD5Y5P0tlR6j-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ru85tCEAXzAraRD5Y5P0tlR6j-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:36:1f:82:5a:e6:26:fd:df:f1:27:db:58:32:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeef39b421005f302b6910f96393f4b6547a8fec
Validity
Not Before: Mar 29 09:00:59 2026 GMT
Not After : Mar 30 09:00:59 2026 GMT
Subject: CN=e81942053f60b7fb26ea8847698e54da9c7b2888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:71:ce:e8:5f:bb:9d:74:da:61:d6:26:36:b8:
66:b5:4d:ab:af:b0:78:63:f5:8a:06:4e:bb:44:17:
bb:55:58:b4:80:f3:8f:9d:e1:5a:e7:c2:70:be:b9:
0e:bb:d3:60:5d:9a:65:0d:86:93:4e:fb:31:78:53:
7c:5f:0d:be:a9:fd:57:3d:6b:ff:d9:e6:1d:55:83:
58:0b:64:ff:82:33:cc:0a:70:c4:eb:40:4b:7e:a7:
6f:43:28:4b:e8:76:08:e3:09:e6:58:8f:00:8d:44:
df:27:02:45:4d:7e:eb:29:29:fd:1a:8d:db:53:69:
63:7b:8f:70:59:ee:21:05:90:8b:4e:1d:a7:5f:a2:
b2:eb:1a:b7:a2:26:77:1f:d1:60:bb:6c:fc:e5:d7:
59:c2:12:0b:b3:a5:fd:91:d9:a7:7f:0f:af:10:df:
07:79:fd:61:a3:5f:6c:68:a4:28:86:eb:83:7b:88:
2f:78:bd:b3:8c:fa:54:38:7d:ee:f0:bd:41:1e:21:
7c:a6:10:38:96:75:f2:74:7d:ab:a5:22:b6:d9:03:
df:0c:96:f8:c9:6f:37:80:2c:23:50:ae:95:6a:6f:
49:48:5f:4f:eb:64:06:f0:e6:d2:54:1a:d8:a4:4d:
f3:5b:8b:3a:3a:3a:d8:8e:d4:cd:1d:7f:2a:eb:85:
8b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:19:42:05:3F:60:B7:FB:26:EA:88:47:69:8E:54:DA:9C:7B:28:88
X509v3 Authority Key Identifier:
keyid:AE:EF:39:B4:21:00:5F:30:2B:69:10:F9:63:93:F4:B6:54:7A:8F:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ru85tCEAXzAraRD5Y5P0tlR6j-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/d2036a-27a7-4cdb-b4fe-9311275f38ea/1/ru85tCEAXzAraRD5Y5P0tlR6j-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/d2036a-27a7-4cdb-b4fe-9311275f38ea/1/ru85tCEAXzAraRD5Y5P0tlR6j-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:5b:c8:a9:0b:ff:28:60:10:62:e6:3c:83:a7:7a:9e:82:91:
1d:f4:91:de:93:b0:92:af:fb:66:9d:73:05:e4:7a:ab:86:aa:
c4:75:a1:8a:4b:99:f2:b5:de:99:e7:ce:de:f3:3b:68:90:25:
6b:6c:f3:bd:e8:32:0f:df:16:5d:76:b1:c1:50:33:1b:8f:1b:
2f:2d:a9:3a:1b:bf:9a:94:5c:0b:a4:bf:55:f4:d7:ff:92:cd:
4e:6a:61:a2:3f:50:68:8a:4b:30:90:6b:83:1a:88:3e:90:74:
ac:07:c0:5a:f8:ca:c2:48:50:83:a2:e8:00:ed:a6:73:76:4e:
11:67:c8:52:f4:10:b9:95:aa:cb:4d:8f:82:ef:d7:a9:d3:6a:
7a:76:76:d9:7c:31:96:a9:38:ca:9d:c5:3d:28:72:53:b3:16:
e6:d3:0d:99:8b:72:52:f6:d5:78:d8:c7:94:cf:64:f6:d2:66:
09:c0:d6:bd:3c:c9:7b:2f:b1:79:ad:b4:ab:61:6c:bc:bd:f9:
5e:54:bb:ee:3b:cf:ad:4b:e6:e6:69:96:1d:9e:98:aa:7a:40:
55:1f:80:67:62:d6:37:f5:15:65:5c:3d:38:f9:9e:eb:a0:bf:
4b:ef:e0:6f:42:63:ff:06:ee:38:c0:7f:d0:3d:95:b3:50:81:
46:a4:fe:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:01:02 2026 by rpki-client