Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/18ec59-0b00-4da6-88d8-d4fd3e389536/1/RU_RwEv37B2rvS0h_aAIXiUexzU.mft
File: RU_RwEv37B2rvS0h_aAIXiUexzU.mft (raw, json)
Hash identifier: 5FPi4aGvPSM5FKqmLVIRsMvejbmatFDLM4XySKBrUDI=
Subject key identifier: 38:B1:59:4F:9A:1B:59:AC:62:44:84:52:9B:39:7E:2A:25:30:D9:51
Authority key identifier: 45:4F:D1:C0:4B:F7:EC:1D:AB:BD:2D:21:FD:A0:08:5E:25:1E:C7:35
Certificate issuer: /CN=454fd1c04bf7ec1dabbd2d21fda0085e251ec735
Certificate serial: 019CABD9795E740C5093E22DCF0FF64437FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RU_RwEv37B2rvS0h_aAIXiUexzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/18ec59-0b00-4da6-88d8-d4fd3e389536/1/RU_RwEv37B2rvS0h_aAIXiUexzU.mft
Manifest number: 138A
Signing time: Mon 02 Mar 2026 00:01:22 +0000
Manifest this update: Mon 02 Mar 2026 00:01:22 +0000
Manifest next update: Tue 03 Mar 2026 00:01:22 +0000
Files and hashes: 1: RU_RwEv37B2rvS0h_aAIXiUexzU.crl (hash: V/Ju/8YelRV+XfKdFY4l0qOwTF0ad9xarLArHoL71H8=)
2: vwdCRsg6gfNKt8uQxczBW40AhwA.roa (hash: zQgUR0JAzzWo4SijrJ+Bdd4OF1vyTIeqSDv8ul4PPDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/18ec59-0b00-4da6-88d8-d4fd3e389536/1/RU_RwEv37B2rvS0h_aAIXiUexzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/18ec59-0b00-4da6-88d8-d4fd3e389536/1/RU_RwEv37B2rvS0h_aAIXiUexzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RU_RwEv37B2rvS0h_aAIXiUexzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:79:5e:74:0c:50:93:e2:2d:cf:0f:f6:44:37:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=454fd1c04bf7ec1dabbd2d21fda0085e251ec735
Validity
Not Before: Mar 2 00:01:22 2026 GMT
Not After : Mar 3 00:01:22 2026 GMT
Subject: CN=38b1594f9a1b59ac624484529b397e2a2530d951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ed:bc:9a:62:bf:ef:8b:8c:db:3a:3a:ca:1e:
b7:97:32:bf:7f:06:7c:e6:6b:9b:93:a7:f9:c4:6f:
2d:24:cb:1f:2b:2b:cc:08:86:ac:f4:39:7b:dc:3b:
ca:14:44:af:01:c1:f9:49:58:68:32:c6:41:5f:a1:
36:44:02:b3:66:95:a4:cd:9e:d8:55:2d:b9:94:ae:
c8:34:9b:4e:8c:26:1b:33:0e:1e:80:78:62:4c:c2:
1d:14:e6:85:b9:0e:e5:7f:25:cb:a5:d3:7e:14:43:
ab:a3:c2:a4:5a:dd:8c:be:fc:d3:4f:98:7e:10:aa:
b7:10:e1:14:7c:e0:b4:89:73:d5:5b:1b:76:41:48:
49:58:8d:b8:f1:86:7e:28:85:7f:4a:ab:7f:ab:bf:
ff:55:b3:6d:17:30:8b:62:c9:9a:83:07:d7:ba:8a:
cd:72:13:d3:3b:2b:ce:0d:5f:68:7c:e2:20:2e:e5:
84:bc:e4:ce:b2:0c:5f:37:c0:83:5b:d5:96:22:d9:
50:5d:c1:72:38:b8:5a:61:37:25:4d:31:93:9d:60:
31:5c:7b:9c:32:60:22:97:ad:f9:84:27:86:77:6e:
5f:0e:6f:ad:0d:57:53:3f:f4:12:a1:38:d0:a1:40:
35:e7:8d:1e:34:ec:15:2d:63:c6:34:54:e7:0f:33:
7f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B1:59:4F:9A:1B:59:AC:62:44:84:52:9B:39:7E:2A:25:30:D9:51
X509v3 Authority Key Identifier:
keyid:45:4F:D1:C0:4B:F7:EC:1D:AB:BD:2D:21:FD:A0:08:5E:25:1E:C7:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RU_RwEv37B2rvS0h_aAIXiUexzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/18ec59-0b00-4da6-88d8-d4fd3e389536/1/RU_RwEv37B2rvS0h_aAIXiUexzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/18ec59-0b00-4da6-88d8-d4fd3e389536/1/RU_RwEv37B2rvS0h_aAIXiUexzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:67:f1:b7:65:88:e9:4e:4b:e4:d4:1d:ab:17:26:66:98:e6:
45:b2:ad:bb:cf:0a:79:2a:fc:69:10:78:b9:6d:f0:97:94:51:
f2:25:ca:9e:e0:54:c2:d6:77:26:c8:68:23:c1:38:1c:3e:d9:
68:c1:41:cf:85:be:a1:70:80:1c:cb:5f:ce:f8:32:a1:7d:cb:
5d:b1:53:ec:b7:96:9d:61:23:5a:d9:5f:c7:e3:1f:1f:6d:2c:
d6:46:ba:fc:b5:e7:84:98:39:6c:20:f7:f6:94:e5:59:ba:2e:
a9:fb:80:6e:ad:52:9f:c5:91:6f:c0:02:49:fa:81:5a:f4:5b:
b2:90:5a:d6:97:5e:c3:8e:b1:d8:0f:6f:20:b2:2f:e0:10:6b:
56:f3:42:e4:8a:03:e3:bc:ed:f8:d5:2f:91:e0:d1:d7:86:a2:
c2:fa:8b:c8:c9:75:89:0c:68:5c:e3:cd:a4:a8:a9:6c:0a:73:
48:8b:e4:0f:b2:7d:37:34:ae:ca:35:ca:80:93:ca:4a:93:6e:
d0:20:a9:72:e0:6e:31:db:f2:f6:b6:71:cd:d3:aa:1c:8b:75:
d1:14:f0:de:8b:99:80:6f:5c:08:f3:d2:92:e5:42:77:94:89:
ed:b7:7a:62:c0:41:91:ee:6e:a4:b9:24:a5:6d:c4:66:04:6c:
59:a2:66:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:13:02 2026 by rpki-client