Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft
File: ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft (raw, json)
Hash identifier: 8MLiGSdsNmYjybMtDGcJZkEq9xMqkHq1xPWWcSXlFRc=
Subject key identifier: B8:EE:F6:43:65:C7:16:10:13:91:6D:D9:4B:9D:86:11:D5:1C:4B:3B
Authority key identifier: AE:E2:F8:E5:36:27:AD:C2:76:78:06:3B:93:D3:D9:FD:6E:CE:90:02
Certificate issuer: /CN=aee2f8e53627adc27678063b93d3d9fd6ece9002
Certificate serial: 019D371B85395635A025E3CB730731AEC259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft
Manifest number: 1780
Signing time: Sun 29 Mar 2026 01:00:43 +0000
Manifest this update: Sun 29 Mar 2026 01:00:43 +0000
Manifest next update: Mon 30 Mar 2026 01:00:43 +0000
Files and hashes: 1: 5ZoEo50_xAHK34okKgd5dDUMiUg.roa (hash: LIs7cRQu0NuinXWbbRKXMVEwh8Kej14YFA3/Roh92YA=)
2: DCEcusp2eUGzG1BBOnYxv3yFd44.roa (hash: bfsFhq6ej0vlB2f4W6DclWkdX8tD+q/PCkm2oIBGGDw=)
3: ruL45TYnrcJ2eAY7k9PZ_W7OkAI.crl (hash: KvhraMkuhxINW01EUJp1tNhJ4FG5OVKBBZ1ZDbOe/WE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:85:39:56:35:a0:25:e3:cb:73:07:31:ae:c2:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee2f8e53627adc27678063b93d3d9fd6ece9002
Validity
Not Before: Mar 29 01:00:43 2026 GMT
Not After : Mar 30 01:00:43 2026 GMT
Subject: CN=b8eef64365c7161013916dd94b9d8611d51c4b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2b:33:9a:23:7d:a1:b2:54:8c:eb:aa:1c:01:
02:98:e7:c8:18:22:8c:78:25:1a:15:46:3a:f7:c8:
b9:77:f5:28:fb:97:c5:1d:65:e0:b6:13:85:5a:be:
be:fd:fc:12:3e:20:8a:2d:e6:c9:7d:0d:83:3e:86:
c5:e6:fa:7d:da:cd:d9:57:41:c2:9e:59:e9:df:c9:
99:94:04:a9:e3:1a:a6:9c:89:ea:42:aa:78:8e:71:
4c:b0:64:22:42:59:d1:41:d7:4c:b3:f3:98:67:c4:
21:cf:b6:4e:e0:43:36:60:79:ba:ad:8c:ca:74:39:
3d:05:7e:76:c8:fb:e8:8f:54:f6:70:57:f5:84:ef:
70:4b:0b:9b:8f:71:de:3d:45:2b:94:37:24:0c:13:
dc:02:64:53:2e:74:e9:9c:4d:c4:16:f0:15:79:ab:
1c:23:66:2a:2c:38:8b:9f:98:92:53:c5:33:f9:74:
c5:92:cd:e5:02:a7:99:97:28:d4:46:f9:cb:51:0f:
1b:9c:7a:e5:86:07:55:92:2e:02:4c:93:78:99:aa:
8a:e0:f9:40:99:26:e1:2d:c7:79:74:3d:62:d9:78:
9d:5d:d2:1c:2a:f0:aa:31:3c:7f:47:66:54:1d:87:
e2:e7:87:58:c5:82:a3:80:34:ca:b8:15:de:3a:2e:
3a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:EE:F6:43:65:C7:16:10:13:91:6D:D9:4B:9D:86:11:D5:1C:4B:3B
X509v3 Authority Key Identifier:
keyid:AE:E2:F8:E5:36:27:AD:C2:76:78:06:3B:93:D3:D9:FD:6E:CE:90:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:db:c7:12:07:5d:26:83:35:e6:1c:d2:da:d3:b0:a9:70:a1:
dc:d6:9b:76:d5:59:d1:48:3d:cd:35:45:1b:be:e3:6f:00:92:
e3:d2:1f:61:d5:fe:1b:44:e1:5b:8b:89:66:32:a7:c1:c2:6f:
f8:61:b1:26:56:94:81:11:e7:fe:f1:f6:5a:ea:2c:06:22:6c:
55:4f:cd:9f:a2:1d:f6:6c:a0:b5:c1:e8:f4:b5:ef:44:1c:b2:
95:82:cc:6f:9f:6e:fb:d6:54:aa:3d:52:87:27:f4:22:5b:48:
9f:97:00:7c:b8:17:c8:4e:e1:f9:be:45:d1:ff:42:a3:e5:38:
f8:9c:23:bd:c6:14:20:65:4e:43:c9:54:a0:bd:6e:66:a3:95:
1a:f4:05:f0:5b:d1:29:e6:22:79:57:f2:52:20:2f:80:48:24:
f4:87:de:f4:0b:fd:49:74:08:44:f7:a3:d6:f2:3d:93:fd:84:
0e:71:b2:e2:2b:eb:ad:27:1f:be:8d:c1:23:d7:db:c4:7c:0a:
8e:4e:01:22:80:ec:26:b9:b8:3a:67:f5:47:12:79:54:7b:8e:
e5:53:8b:b5:b1:6e:01:2a:2a:fb:0e:33:98:b4:d6:0e:4f:1c:
1e:28:f7:15:2b:d9:5c:e9:23:49:05:eb:49:5b:91:f4:ee:d4:
a6:93:c5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:36 2026 by rpki-client