Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.mft
File: ruHTpCXtvZ2K2tBBBqsS18dqwTI.mft (raw, json)
Hash identifier: Xe9bgO1gAhQbTKE31IoOBT2WdMZPKTcLeGCvxKiQZII=
Subject key identifier: 70:83:80:AA:97:5C:51:69:CF:33:2B:AF:93:B7:BA:D8:27:E7:8C:E7
Authority key identifier: AE:E1:D3:A4:25:ED:BD:9D:8A:DA:D0:41:06:AB:12:D7:C7:6A:C1:32
Certificate issuer: /CN=aee1d3a425edbd9d8adad04106ab12d7c76ac132
Certificate serial: 019FA372D9BAC542F2E3DE77B4DDE3275489
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruHTpCXtvZ2K2tBBBqsS18dqwTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.mft
Manifest number: 07AC
Signing time: Mon 27 Jul 2026 12:00:40 +0000
Manifest this update: Mon 27 Jul 2026 12:00:40 +0000
Manifest next update: Tue 28 Jul 2026 12:00:40 +0000
Files and hashes: 1: KzJ38YtTVUpyFa7KO6sOTmdjUMI.roa (hash: ua65+1lYMoMHdnVY3brws3FwYpdS0rpL21WtR4XZr7U=)
2: ruHTpCXtvZ2K2tBBBqsS18dqwTI.crl (hash: EOG1wGpj+YxSrWAWv6jGg+P3csi5RlnUi8sE03q3K14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ruHTpCXtvZ2K2tBBBqsS18dqwTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:72:d9:ba:c5:42:f2:e3:de:77:b4:dd:e3:27:54:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee1d3a425edbd9d8adad04106ab12d7c76ac132
Validity
Not Before: Jul 27 12:00:40 2026 GMT
Not After : Jul 28 12:00:40 2026 GMT
Subject: CN=708380aa975c5169cf332baf93b7bad827e78ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4a:df:26:75:42:69:b0:d6:c5:ab:ac:99:6a:
ea:d2:4f:a4:ba:38:e7:55:8b:7a:b8:30:25:1e:fa:
fb:bb:fd:2a:95:ca:fc:aa:be:57:74:cf:9b:98:16:
7e:13:af:7f:cd:19:b5:98:37:6d:f1:b2:78:7f:e8:
e4:aa:f2:dc:53:46:23:a0:5c:ed:29:41:89:8d:d8:
e7:c3:66:c2:3d:32:f2:28:61:16:1a:03:4a:39:1a:
d1:ca:66:e2:54:50:0b:4a:83:57:7a:2c:0a:d8:b9:
95:37:01:51:96:38:0f:63:4a:8f:b9:b6:55:33:3e:
f9:e5:89:27:22:59:78:d7:31:84:38:b3:f3:77:ab:
3a:42:00:30:6a:ad:57:e5:6f:ff:32:35:e1:9d:32:
42:57:0a:3d:68:67:02:2a:5d:58:d5:b1:87:5c:c7:
a0:65:9f:c1:a4:4e:72:d1:ae:84:39:22:45:31:cf:
53:d2:58:f7:9f:7f:8d:8d:d6:36:44:03:9f:43:aa:
bb:1d:40:f4:0c:d7:cc:7a:9e:78:e9:de:bf:d2:1b:
a1:c2:a3:2a:22:36:f8:09:1a:13:ca:7b:38:f6:84:
9e:65:4a:3a:0d:f8:7d:75:39:51:d7:cf:dd:4a:f6:
98:f4:39:28:c9:f7:6a:3a:00:d2:b3:ef:80:7a:39:
63:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:83:80:AA:97:5C:51:69:CF:33:2B:AF:93:B7:BA:D8:27:E7:8C:E7
X509v3 Authority Key Identifier:
keyid:AE:E1:D3:A4:25:ED:BD:9D:8A:DA:D0:41:06:AB:12:D7:C7:6A:C1:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruHTpCXtvZ2K2tBBBqsS18dqwTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:34:b9:0a:33:df:6d:9f:e0:ca:94:30:0a:2f:bc:c2:ad:9b:
23:70:f1:47:86:9d:23:54:ed:8b:80:f5:6f:c7:55:bb:25:5a:
f3:6b:f0:fd:77:1e:c0:e8:2d:98:0c:e3:32:b9:90:d7:28:9b:
fb:25:15:a6:07:0b:23:ac:ce:ff:93:16:2c:61:33:71:d9:76:
4b:c3:31:aa:a4:95:98:83:1b:5e:7f:7b:b1:d7:7d:03:76:b7:
1e:4b:d4:66:ab:65:af:b5:f8:75:48:e4:c4:e9:4d:36:ef:32:
99:7f:65:2d:2c:09:c3:b4:00:53:3f:f3:7b:ab:b7:19:aa:4a:
df:05:0b:c3:75:08:46:30:96:53:45:a5:d1:c9:52:b8:6b:9b:
7d:51:7a:f0:02:42:28:63:a5:40:00:69:f5:d5:c6:61:9b:f3:
b2:5f:42:88:2b:12:28:f2:68:ac:e7:2a:92:8b:1c:8c:08:3b:
81:42:f9:15:63:92:02:73:ed:a8:b0:7b:ca:c3:b5:54:ad:25:
ba:f5:68:21:96:c2:30:7f:1d:6b:5a:92:b3:10:3e:db:2d:b5:
04:9d:8a:49:e7:48:22:dc:5b:a2:3d:cc:18:87:fe:e2:dd:74:
a6:01:2e:0e:6a:bd:23:97:3f:3a:7f:d2:a9:24:98:06:2e:93:
0d:9d:56:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 14:34:52 2026 by rpki-client