Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.mft
File: ruHTpCXtvZ2K2tBBBqsS18dqwTI.mft (raw, json)
Hash identifier: EkChuE8ghdTWiDZ6kDEfmaU8dupyLTJWqWnh/w0Sf9k=
Subject key identifier: 1A:7D:D7:96:FD:15:16:60:B5:60:21:AE:B9:1A:42:1A:B4:96:13:90
Authority key identifier: AE:E1:D3:A4:25:ED:BD:9D:8A:DA:D0:41:06:AB:12:D7:C7:6A:C1:32
Certificate issuer: /CN=aee1d3a425edbd9d8adad04106ab12d7c76ac132
Certificate serial: 01A08B311CB22326D2EDC97B48505E0B96AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruHTpCXtvZ2K2tBBBqsS18dqwTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.mft
Manifest number: 0824
Signing time: Thu 10 Sep 2026 12:00:46 +0000
Manifest this update: Thu 10 Sep 2026 12:00:46 +0000
Manifest next update: Fri 11 Sep 2026 12:00:46 +0000
Files and hashes: 1: KzJ38YtTVUpyFa7KO6sOTmdjUMI.roa (hash: ua65+1lYMoMHdnVY3brws3FwYpdS0rpL21WtR4XZr7U=)
2: ruHTpCXtvZ2K2tBBBqsS18dqwTI.crl (hash: 0pEK34LIg//LG/h9c26nwEupbiJzs+YBXalN1KVqyMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ruHTpCXtvZ2K2tBBBqsS18dqwTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:31:1c:b2:23:26:d2:ed:c9:7b:48:50:5e:0b:96:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee1d3a425edbd9d8adad04106ab12d7c76ac132
Validity
Not Before: Sep 10 12:00:46 2026 GMT
Not After : Sep 11 12:00:46 2026 GMT
Subject: CN=1a7dd796fd151660b56021aeb91a421ab4961390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:22:eb:3f:4b:16:ab:64:8f:d0:17:66:bc:b4:
7e:59:13:0f:15:d3:e8:5e:2c:50:d9:4f:b2:5d:91:
d5:a2:c7:d9:2b:f6:5f:0d:c9:1c:1d:ad:57:db:50:
2b:23:20:56:ce:2b:c9:e5:ae:f4:8f:4c:b3:22:fc:
ab:8f:0c:f9:4a:e1:21:0e:1c:f9:ef:cc:a2:84:16:
63:9a:95:dd:75:5a:2c:ba:10:a1:68:b8:e8:38:36:
61:b7:84:a9:40:e8:07:1f:16:86:87:74:a8:41:2d:
84:80:dc:ca:5f:02:d2:fc:e4:98:3b:80:9d:f5:f1:
3a:e5:f6:38:f6:38:5f:6c:89:97:ed:08:98:19:f0:
88:b3:e9:ed:aa:71:c7:91:de:da:c0:6e:9d:01:f3:
ef:14:77:5d:b4:ab:e2:6c:38:5b:e0:f0:d5:78:ba:
54:fe:4b:25:52:25:38:a1:69:1d:f2:33:4b:e8:6a:
fb:1f:df:76:8a:58:19:09:a2:5f:27:f8:b5:2e:ef:
1d:e2:d3:7f:7a:56:66:af:40:74:b9:1e:0c:60:a5:
71:a8:b1:7c:47:86:c5:5b:3d:8a:70:34:74:40:b6:
12:37:89:ae:aa:d5:eb:86:ee:0e:5d:99:61:05:6e:
69:fd:33:78:2f:ca:b0:f1:d7:5e:c8:a5:9a:da:fc:
e1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:7D:D7:96:FD:15:16:60:B5:60:21:AE:B9:1A:42:1A:B4:96:13:90
X509v3 Authority Key Identifier:
keyid:AE:E1:D3:A4:25:ED:BD:9D:8A:DA:D0:41:06:AB:12:D7:C7:6A:C1:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruHTpCXtvZ2K2tBBBqsS18dqwTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:cb:4f:e4:1d:77:17:1c:c0:c4:d5:ea:d0:79:3b:0f:99:10:
57:1f:8d:da:c0:38:da:0c:4a:c0:e1:71:7d:11:2a:01:8d:fc:
a5:2a:98:48:3b:5a:fd:9d:f7:f8:a0:cf:94:d1:8e:8c:c7:b4:
52:73:71:d5:01:b6:7f:ea:99:96:8f:46:34:6e:5e:97:6a:3c:
79:1b:a0:d2:78:95:f1:b9:38:2d:4b:2e:fa:44:02:40:5e:51:
ce:68:45:4c:00:b6:2f:7f:41:c1:db:86:dd:21:3f:6b:3c:e9:
60:83:be:6a:63:d0:b7:4e:b0:43:c4:96:e2:ea:17:08:cb:ad:
05:cd:45:36:b1:85:9d:52:92:97:e1:1e:79:20:06:c6:84:a9:
9c:a5:0b:58:89:8e:e5:71:d0:47:c0:d6:a1:6b:2e:a3:69:6d:
f8:bf:c8:85:4a:bc:d9:60:d5:e6:47:29:02:e3:6e:56:33:43:
a9:aa:36:6c:34:38:cb:c7:de:b9:3f:86:8c:fe:fc:6d:d6:2b:
04:10:40:81:22:9c:af:e8:e0:06:8e:6a:ff:ac:98:48:ac:69:
b5:ff:7c:c1:a2:83:8f:63:08:67:b7:da:7a:70:4f:59:7e:dd:
d2:4b:48:2c:3b:b1:2e:37:9f:59:b0:e4:5e:48:3f:21:95:47:
22:06:d0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:28:49 2026 by rpki-client