Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
File: ruxDT4IchrfuYxZpHXHMYcQMNGw.mft (raw, json)
Hash identifier: WIVBqrfxw/Fw3isO/t87sVEN2DdhrAoekooScsOid4k=
Subject key identifier: 33:01:6D:0E:8E:15:CF:A3:84:EC:7A:F3:3C:F8:27:EF:36:B8:3C:27
Authority key identifier: AE:EC:43:4F:82:1C:86:B7:EE:63:16:69:1D:71:CC:61:C4:0C:34:6C
Certificate issuer: /CN=aeec434f821c86b7ee6316691d71cc61c40c346c
Certificate serial: 019ED42B111F03D00A2CB137C97BCFF864F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
Manifest number: 0E93
Signing time: Wed 17 Jun 2026 06:00:52 +0000
Manifest this update: Wed 17 Jun 2026 06:00:52 +0000
Manifest next update: Thu 18 Jun 2026 06:00:52 +0000
Files and hashes: 1: hx04DxiZAHeQYm7pOZmel5U9TOA.roa (hash: AjIfJ2c3ZWWZTkNvhuqTyJOvutKGVYOaZ7ocJjjxqUY=)
2: ruxDT4IchrfuYxZpHXHMYcQMNGw.crl (hash: iHyzrC6tucGu8YZM1qezjK4yLeKBoXKhYOKHaeSlZsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:2b:11:1f:03:d0:0a:2c:b1:37:c9:7b:cf:f8:64:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeec434f821c86b7ee6316691d71cc61c40c346c
Validity
Not Before: Jun 17 06:00:52 2026 GMT
Not After : Jun 18 06:00:52 2026 GMT
Subject: CN=33016d0e8e15cfa384ec7af33cf827ef36b83c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:62:a8:0b:c5:0e:ca:f3:58:4c:0b:27:f6:0c:
e1:b5:5b:20:3b:89:53:78:34:29:c5:be:6d:73:4a:
76:20:ec:1e:47:b8:5a:91:b6:17:c1:a6:30:c1:9b:
56:29:e6:a8:94:9b:03:42:d2:6c:a2:72:20:6e:ef:
43:22:c6:28:e4:d8:34:3e:1e:28:4e:16:d2:78:69:
31:10:b7:21:91:8a:8c:14:a6:4d:43:cb:9c:d4:6f:
31:64:e8:8c:79:00:b2:7c:b8:b2:c8:0c:ae:87:c7:
cd:62:e4:59:18:ad:8e:99:bf:70:ac:4c:0e:78:04:
97:09:cd:cf:d8:5b:b8:45:06:1f:99:b0:08:3b:c2:
b0:4d:fc:6d:c5:c1:43:d7:52:f8:ac:f4:2e:c6:4e:
77:15:55:e9:5b:40:99:12:da:44:b7:90:59:2e:93:
99:10:dc:64:22:32:33:30:ba:c1:ad:8e:13:5c:95:
df:82:1a:79:3b:36:48:19:7a:1f:1e:11:87:76:9a:
22:25:af:d1:b1:a9:bc:bf:46:80:aa:ad:9d:cc:a8:
1e:09:83:95:b0:3a:d8:65:f8:07:d1:3d:76:4e:91:
0d:10:93:b8:17:bf:42:a5:0f:68:c2:79:eb:de:a6:
2a:fc:68:f4:73:eb:d6:7a:df:c3:a7:92:6d:3f:68:
eb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:01:6D:0E:8E:15:CF:A3:84:EC:7A:F3:3C:F8:27:EF:36:B8:3C:27
X509v3 Authority Key Identifier:
keyid:AE:EC:43:4F:82:1C:86:B7:EE:63:16:69:1D:71:CC:61:C4:0C:34:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:3b:1c:3d:d9:67:0e:e8:9d:af:cd:54:35:96:ec:1d:bc:00:
e3:5d:12:73:9f:0c:f8:e6:de:03:09:58:0f:01:f6:1d:01:ab:
a8:db:86:30:b6:32:8e:22:93:82:31:df:e8:cc:39:d8:71:7a:
5b:00:c1:c9:97:c0:38:11:0a:80:6c:af:af:6c:70:66:6c:b1:
88:1e:28:36:97:88:dd:5b:60:95:8b:9f:15:09:6c:98:b7:be:
1e:41:69:ec:83:f1:9e:89:86:ea:54:f8:ef:6e:34:78:b4:0a:
50:cb:4d:49:a5:a2:f0:3a:11:17:90:df:ac:4c:ce:d8:fc:38:
d7:ed:a9:9a:ce:c0:4f:23:e5:4a:b8:bd:00:8c:2e:ff:a5:0e:
60:1b:48:df:e9:40:ce:b3:56:17:09:af:b6:90:ae:7c:31:3c:
ac:20:b4:f0:7a:dd:7c:37:ea:ae:da:79:df:cc:c6:4e:07:d2:
2b:f8:fc:21:69:85:cb:df:e7:1f:b2:92:c1:8f:44:4c:57:9b:
3c:cb:05:ac:16:7a:c3:39:5b:8b:5e:77:93:b4:11:ff:89:c1:
53:c4:de:77:43:0c:42:13:48:34:94:34:1c:98:f6:48:09:99:
ae:3d:73:48:25:76:e8:aa:25:08:b7:01:57:65:2c:c9:e1:34:
20:79:c4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 13:01:15 2026 by rpki-client