Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.mft
File: ruHTpCXtvZ2K2tBBBqsS18dqwTI.mft (raw, json)
Hash identifier: DUI+2XwhbtfmhomxUe5Mu1+k3aorda/SUKPEd2sdMZs=
Subject key identifier: 7B:D1:8B:CF:5D:A7:02:14:A4:6E:75:26:02:97:EC:7F:32:4F:65:15
Authority key identifier: AE:E1:D3:A4:25:ED:BD:9D:8A:DA:D0:41:06:AB:12:D7:C7:6A:C1:32
Certificate issuer: /CN=aee1d3a425edbd9d8adad04106ab12d7c76ac132
Certificate serial: 01A191D561F5F6A1EF962BFB207C6F14D759
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruHTpCXtvZ2K2tBBBqsS18dqwTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.mft
Manifest number: 08AC
Signing time: Sat 31 Oct 2026 12:00:42 +0000
Manifest this update: Sat 31 Oct 2026 12:00:42 +0000
Manifest next update: Sun 01 Nov 2026 12:00:42 +0000
Files and hashes: 1: KzJ38YtTVUpyFa7KO6sOTmdjUMI.roa (hash: ua65+1lYMoMHdnVY3brws3FwYpdS0rpL21WtR4XZr7U=)
2: ruHTpCXtvZ2K2tBBBqsS18dqwTI.crl (hash: 2DOT16Pmn/agHp1w2/xfzeI4eUdwsRrZJdGQJNEJXuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ruHTpCXtvZ2K2tBBBqsS18dqwTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:91:d5:61:f5:f6:a1:ef:96:2b:fb:20:7c:6f:14:d7:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee1d3a425edbd9d8adad04106ab12d7c76ac132
Validity
Not Before: Oct 31 12:00:42 2026 GMT
Not After : Nov 1 12:00:42 2026 GMT
Subject: CN=7bd18bcf5da70214a46e75260297ec7f324f6515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:52:76:52:a1:d8:62:9e:73:be:84:27:3f:3a:
b6:2b:51:1b:d7:6c:98:70:e7:7b:3a:43:f3:6c:bd:
1b:7a:48:68:32:4d:32:8e:f1:83:78:52:ff:58:54:
44:d4:96:da:e2:5d:43:f5:22:6c:ee:fa:54:a5:3f:
17:e8:5b:0c:50:fe:81:ad:38:12:02:44:8c:7f:60:
7f:2c:67:a1:e9:a9:e9:42:ee:7d:1e:8e:13:31:f7:
aa:5a:6f:5e:61:88:5d:9e:83:cf:58:c0:de:f4:a4:
11:32:e6:c2:ae:0e:e6:20:a8:0e:b0:12:03:ce:4c:
6e:04:a7:6b:16:b2:62:b0:d8:88:94:72:ac:0f:0f:
ae:4e:d3:70:5a:41:33:50:d0:5b:2c:21:30:7b:1e:
b9:10:a3:83:1f:f2:a6:25:fa:d7:84:e5:07:07:ce:
3f:f3:ef:9c:d5:5a:0b:a7:d7:1d:74:4d:a6:f1:09:
20:60:4b:2d:0d:c1:22:3e:7f:be:4f:c1:61:1b:a0:
ee:41:83:6a:44:76:6c:41:82:07:50:fe:40:83:73:
53:4f:c1:4c:14:46:00:ea:c4:d1:16:58:73:31:ee:
2c:27:5a:51:c4:11:a0:47:fb:71:57:45:8a:b3:10:
2c:3b:ae:8a:e6:7e:eb:a8:9a:2d:20:3f:ee:59:6a:
f1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D1:8B:CF:5D:A7:02:14:A4:6E:75:26:02:97:EC:7F:32:4F:65:15
X509v3 Authority Key Identifier:
keyid:AE:E1:D3:A4:25:ED:BD:9D:8A:DA:D0:41:06:AB:12:D7:C7:6A:C1:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruHTpCXtvZ2K2tBBBqsS18dqwTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:8e:b0:23:ef:12:23:46:bf:63:46:ef:10:bc:bf:91:b6:d7:
19:8c:2f:24:ba:94:29:5f:68:c9:18:08:42:b8:9b:d2:11:47:
c7:b8:2c:cb:ab:f2:f1:44:2d:49:a6:4a:7f:b1:e0:2b:57:68:
58:96:94:4b:9d:f6:cb:b7:54:4e:ca:ba:4a:7d:5c:09:48:7b:
17:07:66:96:8c:a3:20:cd:6e:83:84:8f:69:64:5a:57:e8:31:
1e:e7:6d:ab:f7:a3:23:70:33:f7:85:51:85:19:51:4e:da:e0:
d2:e4:88:df:37:cb:aa:07:b7:c6:e6:20:4c:7a:b8:79:09:e3:
d9:d9:f3:d2:60:77:89:c5:ca:ff:4a:91:49:6c:50:fc:73:23:
5e:0c:26:b9:b7:7f:c7:89:1d:11:7d:51:eb:0b:8c:74:f4:54:
ed:4d:b1:30:0c:2e:2d:13:9b:ec:67:1b:fb:48:ba:45:fe:0b:
44:e2:45:9a:5e:86:a6:c1:19:f2:ef:73:b8:40:42:70:e5:bd:
0e:ba:94:82:41:a7:7f:fb:75:a7:a2:30:4e:5c:d2:8f:6e:be:
e8:7a:ab:b5:62:ef:a7:64:6b:28:35:dd:12:08:35:3b:d9:aa:
bd:4d:0e:bc:9f:09:89:98:8c:d6:60:86:cd:4b:b8:2f:00:ab:
20:2f:15:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 18:02:56 2026 by rpki-client