Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/c0e7b4-f369-4b8e-b3c3-1771b83d67e8/1/RUDlIposcpXSHzrf863UCZUBQJU.mft
File: RUDlIposcpXSHzrf863UCZUBQJU.mft (raw, json)
Hash identifier: Z786g8e32xddHN7hwUifWookjnKW/xD7OJaZ+gTyElI=
Subject key identifier: 3C:4C:89:21:DB:B5:0A:3C:D7:5D:5B:DA:65:6A:B8:F4:22:7F:3C:4F
Authority key identifier: 45:40:E5:22:9A:2C:72:95:D2:1F:3A:DF:F3:AD:D4:09:95:01:40:95
Certificate issuer: /CN=4540e5229a2c7295d21f3adff3add40995014095
Certificate serial: 01A03F3BC868DDF8AC4AD3CACA8EE0346A91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RUDlIposcpXSHzrf863UCZUBQJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c0e7b4-f369-4b8e-b3c3-1771b83d67e8/1/RUDlIposcpXSHzrf863UCZUBQJU.mft
Manifest number: 01CC
Signing time: Wed 26 Aug 2026 18:01:17 +0000
Manifest this update: Wed 26 Aug 2026 18:01:17 +0000
Manifest next update: Thu 27 Aug 2026 18:01:17 +0000
Files and hashes: 1: RUDlIposcpXSHzrf863UCZUBQJU.crl (hash: /tE420Cv8cVQhSZEJDCnnq3UUDImkJghvQZgh9MOKs8=)
2: bSnYLh_sdKv-fT36fgkvzsG8JLk.roa (hash: 20udIgeLD06sWX5dR8ZV0DTU0ygzLALglysJkYPihrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c0e7b4-f369-4b8e-b3c3-1771b83d67e8/1/RUDlIposcpXSHzrf863UCZUBQJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/c0e7b4-f369-4b8e-b3c3-1771b83d67e8/1/RUDlIposcpXSHzrf863UCZUBQJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RUDlIposcpXSHzrf863UCZUBQJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 18:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:3b:c8:68:dd:f8:ac:4a:d3:ca:ca:8e:e0:34:6a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4540e5229a2c7295d21f3adff3add40995014095
Validity
Not Before: Aug 26 18:01:17 2026 GMT
Not After : Aug 27 18:01:17 2026 GMT
Subject: CN=3c4c8921dbb50a3cd75d5bda656ab8f4227f3c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c1:79:0d:23:c0:ce:6f:77:7f:6e:b9:6f:73:
cd:20:aa:99:40:8e:d8:1b:60:85:4e:67:9f:9c:95:
4b:b6:4f:a8:57:e0:dd:68:df:17:11:73:72:1a:3f:
2e:34:02:10:f2:a4:fc:86:3e:fb:aa:c9:3f:bd:43:
91:ac:2a:49:39:c0:0f:e3:fa:62:63:2d:b7:0d:3d:
de:e3:cb:2a:11:8c:cd:28:4d:ea:c6:1a:77:f0:6b:
70:d0:b7:19:b1:6c:c8:f8:5d:92:46:f4:c2:4c:75:
de:80:91:4f:59:93:a4:45:7a:64:79:01:8c:59:61:
87:75:d6:45:01:37:a9:85:fc:2e:a3:d1:10:2b:b8:
23:f0:49:d5:47:5f:bb:37:03:d1:23:22:b1:95:62:
72:48:92:e5:ea:a3:01:02:5e:d2:ae:48:20:0b:cf:
94:a1:ca:92:dd:d5:b4:4e:79:59:0c:a3:be:22:ef:
f1:af:f0:7e:68:16:5f:46:f6:f8:af:d0:cd:40:6e:
1b:e7:5a:23:dd:c1:fa:e8:b7:3b:d1:20:12:28:ae:
31:7a:08:0e:08:66:a2:28:d2:81:66:95:fd:2a:10:
76:07:0b:c8:37:09:0f:e9:e1:41:0b:3e:8c:fd:76:
e0:f0:13:8e:85:6d:55:89:89:9e:35:96:05:ac:f8:
7c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:4C:89:21:DB:B5:0A:3C:D7:5D:5B:DA:65:6A:B8:F4:22:7F:3C:4F
X509v3 Authority Key Identifier:
keyid:45:40:E5:22:9A:2C:72:95:D2:1F:3A:DF:F3:AD:D4:09:95:01:40:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RUDlIposcpXSHzrf863UCZUBQJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c0e7b4-f369-4b8e-b3c3-1771b83d67e8/1/RUDlIposcpXSHzrf863UCZUBQJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c0e7b4-f369-4b8e-b3c3-1771b83d67e8/1/RUDlIposcpXSHzrf863UCZUBQJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:12:51:1a:d3:a9:93:e9:47:96:5a:69:9d:9f:bf:c5:0c:37:
d8:78:89:a6:a9:49:46:f9:29:41:ce:91:9c:55:73:a5:64:cb:
16:d9:bb:c7:b0:6c:4d:6f:d3:bb:73:ce:28:25:e0:7d:6f:91:
66:f1:ef:00:b4:5b:aa:76:b7:71:5a:82:5d:47:63:63:8c:a0:
07:ed:66:da:3f:bf:4f:6e:57:85:ec:bc:93:d0:84:91:44:b7:
ea:64:da:53:02:79:4f:ba:d9:ab:09:3a:b3:1b:cd:6b:82:81:
83:d9:cb:eb:2d:99:44:05:8c:c3:ae:2b:95:c1:e8:51:5f:dc:
45:e4:3b:ef:88:2c:6b:7a:c3:f0:e0:ab:7d:09:63:dc:a9:d6:
ef:64:30:21:bf:b7:15:45:2f:48:57:da:72:1b:e2:97:e0:b6:
ef:6a:85:15:ee:b0:be:12:8f:9e:26:3c:44:c0:a6:82:3b:83:
58:ec:75:dc:38:19:a7:67:ea:ea:51:89:a9:95:63:2e:e3:01:
11:06:29:0a:9c:a9:ff:fa:e9:42:9e:f6:2e:ac:9b:bb:1a:da:
ad:18:2b:f9:f4:dc:f9:a4:10:14:a3:97:40:b0:6c:31:69:90:
1c:4b:09:41:7d:41:5f:f9:c6:51:ec:89:5c:29:b2:d5:9a:0b:
01:96:ef:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA/O8ho3fisStPKyo7gNGqRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1NDBlNTIyOWEyYzcyOTVkMjFmM2FkZmYzYWRkNDA5OTUw
MTQwOTUwHhcNMjYwODI2MTgwMTE3WhcNMjYwODI3MTgwMTE3WjAzMTEwLwYDVQQD
EygzYzRjODkyMWRiYjUwYTNjZDc1ZDViZGE2NTZhYjhmNDIyN2YzYzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38F5DSPAzm93f265b3PNIKqZQI7Y
G2CFTmefnJVLtk+oV+DdaN8XEXNyGj8uNAIQ8qT8hj77qsk/vUORrCpJOcAP4/pi
Yy23DT3e48sqEYzNKE3qxhp38Gtw0LcZsWzI+F2SRvTCTHXegJFPWZOkRXpkeQGM
WWGHddZFATephfwuo9EQK7gj8EnVR1+7NwPRIyKxlWJySJLl6qMBAl7SrkggC8+U
ocqS3dW0TnlZDKO+Iu/xr/B+aBZfRvb4r9DNQG4b51oj3cH66Lc70SASKK4xeggO
CGaiKNKBZpX9KhB2BwvINwkP6eFBCz6M/Xbg8BOOhW1ViYmeNZYFrPh8swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDxMiSHbtQo8111b2mVquPQifzxPMB8GA1UdIwQY
MBaAFEVA5SKaLHKV0h863/Ot1AmVAUCVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlVEbElwb3NjcFhTSHpyZjg2M1VDWlVCUUpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jMGU3YjQtZjM2OS00YjhlLWIzYzMt
MTc3MWI4M2Q2N2U4LzEvUlVEbElwb3NjcFhTSHpyZjg2M1VDWlVCUUpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9jMGU3YjQtZjM2OS00YjhlLWIzYzMtMTc3MWI4M2Q2N2U4
LzEvUlVEbElwb3NjcFhTSHpyZjg2M1VDWlVCUUpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFRJRGtOp
k+lHllppnZ+/xQw32HiJpqlJRvkpQc6RnFVzpWTLFtm7x7BsTW/Tu3POKCXgfW+R
ZvHvALRbqna3cVqCXUdjY4ygB+1m2j+/T25Xhey8k9CEkUS36mTaUwJ5T7rZqwk6
sxvNa4KBg9nL6y2ZRAWMw64rlcHoUV/cReQ774gsa3rD8OCrfQlj3KnW72QwIb+3
FUUvSFfachvil+C272qFFe6wvhKPniY8RMCmgjuDWOx13DgZp2fq6lGJqZVjLuMB
EQYpCpyp//rpQp72LqybuxrarRgr+fTc+aQQFKOXQLBsMWmQHEsJQX1BX/nGUeyJ
XCmy1ZoLAZbvag==
-----END CERTIFICATE-----
Generated at Thu Aug 27 03:59:27 2026 by rpki-client