Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
File: RusRr5NV2porXfc-zdf9CWektYw.mft (raw, json)
Hash identifier: hTP0nukf52OUjgZRdddXOju/mO9xdM6PN1M5crwy4xo=
Subject key identifier: 7A:58:98:C5:11:BC:7B:C1:45:0B:51:EE:BC:6A:AD:79:EC:7B:A1:7E
Authority key identifier: 46:EB:11:AF:93:55:DA:9A:2B:5D:F7:3E:CD:D7:FD:09:67:A4:B5:8C
Certificate issuer: /CN=46eb11af9355da9a2b5df73ecdd7fd0967a4b58c
Certificate serial: 01A110DFCFD785B7721E3AF0C21064B9015F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
Manifest number: 1A95
Signing time: Tue 06 Oct 2026 11:01:05 +0000
Manifest this update: Tue 06 Oct 2026 11:01:05 +0000
Manifest next update: Wed 07 Oct 2026 11:01:05 +0000
Files and hashes: 1: RQrjDU4V5o7Y6FMae1KeS7H872g.roa (hash: 8xk+8pGV1p6Nt4ziixJs8iuoymfnnWJ5uoc1S8n08z8=)
2: RusRr5NV2porXfc-zdf9CWektYw.crl (hash: fCg9tAPeGZLBv0iQrXavoH/fRYLRo0bbQlxtZhTjYP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:df:cf:d7:85:b7:72:1e:3a:f0:c2:10:64:b9:01:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46eb11af9355da9a2b5df73ecdd7fd0967a4b58c
Validity
Not Before: Oct 6 11:01:05 2026 GMT
Not After : Oct 7 11:01:05 2026 GMT
Subject: CN=7a5898c511bc7bc1450b51eebc6aad79ec7ba17e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:46:9b:fe:69:ce:7b:22:24:3c:9f:9d:5e:1a:
ce:cb:16:2e:31:93:9f:fa:4c:af:d3:2c:97:fc:2a:
90:c0:42:33:ec:49:f9:73:e9:d4:40:22:a8:c5:f4:
c5:2a:18:88:86:33:f3:16:5a:80:fe:33:94:05:c5:
54:b3:73:bb:b0:ac:5a:ab:8c:ea:f0:62:06:da:05:
a8:a8:bf:9c:18:dc:c7:1f:d6:5a:89:51:6e:b4:a9:
bd:57:3a:e4:30:90:94:a5:62:20:3c:b5:89:95:93:
70:24:65:15:3f:1c:3f:77:ed:fc:6a:b2:30:c7:47:
96:95:18:81:98:a1:c2:10:4d:71:d5:71:ae:39:c5:
76:17:bb:19:81:1a:1f:c6:46:6a:7d:b3:45:a1:6c:
f6:8c:76:5e:d6:ee:fb:f7:fe:c5:1e:3c:72:a0:d5:
36:35:78:36:99:eb:5a:5d:d0:10:08:63:4a:e4:c2:
a4:a3:04:59:44:dc:19:6b:27:80:f8:cb:74:f6:71:
ff:6e:a1:ae:2f:2f:0e:72:f8:c2:45:85:a9:0e:84:
87:d2:32:07:f5:d1:60:b5:c8:3b:d6:1d:56:2a:ae:
67:43:7d:b7:91:f8:d4:21:ba:f4:76:17:15:2f:cb:
fc:74:5b:8a:f7:13:d9:5d:20:d1:31:93:6a:63:85:
4d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:58:98:C5:11:BC:7B:C1:45:0B:51:EE:BC:6A:AD:79:EC:7B:A1:7E
X509v3 Authority Key Identifier:
keyid:46:EB:11:AF:93:55:DA:9A:2B:5D:F7:3E:CD:D7:FD:09:67:A4:B5:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:49:e7:77:57:c2:37:cc:0a:23:dd:86:fb:83:8e:a6:9b:1c:
8e:51:7c:5a:8c:63:9a:8e:4f:8a:e9:e8:61:c2:85:2e:5f:aa:
3c:78:d3:20:d1:80:d5:91:4a:d1:d8:e5:e4:c1:c2:4a:fd:b9:
6b:6b:ed:04:a5:0f:b3:05:ff:2d:c7:49:51:a9:dc:73:f6:da:
a9:14:47:77:38:01:1c:db:ab:02:7f:27:79:02:a4:64:9b:f6:
e5:ec:70:69:4e:31:b4:3a:58:00:c0:6c:2c:07:a4:e1:c4:86:
21:6f:19:bf:b3:4a:fc:41:97:e4:cc:51:5b:69:3e:79:b0:0c:
96:92:98:81:8d:36:78:17:6b:d2:75:fe:11:68:38:ed:85:18:
76:f9:57:f5:e5:43:6d:ea:20:93:3e:40:67:8a:69:a4:09:d2:
89:97:c7:59:0c:94:51:e8:18:d3:5f:66:ee:1e:16:7e:af:ed:
15:1a:c4:9b:19:76:7a:8d:e2:7c:42:41:4b:82:45:a6:36:81:
ae:a8:12:ec:21:bc:c5:0d:8e:1e:ac:5e:6b:4a:d3:65:4c:fb:
39:03:af:f7:a1:0a:85:2c:78:37:2c:75:08:c9:dc:f6:9f:6b:
ad:26:4d:c3:f8:ca:25:69:77:5e:9e:09:db:1f:28:77:fe:74:
78:43:6d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:45:06 2026 by rpki-client