Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
File: ruxDT4IchrfuYxZpHXHMYcQMNGw.mft (raw, json)
Hash identifier: B3/VtLoCgVWVe1IQsj2SrYwC/DlIEOuzVdNQZZzmPxI=
Subject key identifier: 55:0B:42:81:86:87:31:FB:CA:0F:3A:61:D0:B6:42:9C:EE:47:58:15
Authority key identifier: AE:EC:43:4F:82:1C:86:B7:EE:63:16:69:1D:71:CC:61:C4:0C:34:6C
Certificate issuer: /CN=aeec434f821c86b7ee6316691d71cc61c40c346c
Certificate serial: 019D9B5075F74F240D3BBE2C034E805C01B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
Manifest number: 0DF1
Signing time: Fri 17 Apr 2026 12:00:34 +0000
Manifest this update: Fri 17 Apr 2026 12:00:34 +0000
Manifest next update: Sat 18 Apr 2026 12:00:34 +0000
Files and hashes: 1: hx04DxiZAHeQYm7pOZmel5U9TOA.roa (hash: AjIfJ2c3ZWWZTkNvhuqTyJOvutKGVYOaZ7ocJjjxqUY=)
2: ruxDT4IchrfuYxZpHXHMYcQMNGw.crl (hash: fjdi3/DP0bpGAftTE58vh+tLrLcfuInK7G39c3/GAWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:75:f7:4f:24:0d:3b:be:2c:03:4e:80:5c:01:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeec434f821c86b7ee6316691d71cc61c40c346c
Validity
Not Before: Apr 17 12:00:34 2026 GMT
Not After : Apr 18 12:00:34 2026 GMT
Subject: CN=550b4281868731fbca0f3a61d0b6429cee475815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:99:6f:fe:cd:69:f0:69:a2:12:be:5e:fb:9d:
b5:41:df:9b:44:a1:51:8c:db:b0:53:dc:f5:06:65:
89:ee:dc:7e:40:8e:2e:0c:d5:4f:5c:19:6c:73:19:
dc:03:e7:da:91:09:74:27:1b:ec:81:df:f2:05:5c:
f5:9a:76:b0:8d:d6:af:3d:3b:9e:20:e1:3a:fe:fc:
66:7f:2d:21:68:35:8e:1f:07:c8:60:53:05:ee:9e:
b0:31:6a:e4:7f:5c:17:ea:57:83:b3:51:76:00:bf:
49:52:cb:29:78:c2:ea:17:34:3d:77:cf:df:25:57:
4c:f2:53:55:03:96:2c:ad:c7:27:6f:fb:91:a8:ff:
90:62:81:ba:57:b0:b9:86:64:11:fa:4e:cc:07:ec:
6f:d3:50:44:91:b1:bf:b1:8e:4a:c9:bd:38:5e:53:
4e:c6:ca:ea:13:a7:4c:eb:da:88:d3:22:df:42:e2:
3b:db:12:df:de:86:83:f9:60:d3:a6:f9:87:0c:bd:
b0:a5:81:df:aa:d5:a1:db:a8:4d:c2:63:9f:bd:30:
5a:1b:0c:8a:b8:b7:c1:9d:c3:c6:26:15:79:7a:51:
5a:1d:60:33:ec:1e:ef:e8:52:76:6f:77:c0:85:c4:
a4:f5:f8:84:eb:8b:b1:25:38:c0:02:36:fe:53:db:
aa:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:0B:42:81:86:87:31:FB:CA:0F:3A:61:D0:B6:42:9C:EE:47:58:15
X509v3 Authority Key Identifier:
keyid:AE:EC:43:4F:82:1C:86:B7:EE:63:16:69:1D:71:CC:61:C4:0C:34:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:97:c8:1b:13:1c:52:a0:f3:6d:94:45:83:82:81:19:a1:75:
cf:76:ea:dc:53:25:f7:a1:84:ae:47:db:d8:aa:cf:ef:96:a8:
bd:e5:08:b7:e9:cf:30:9b:b4:2c:16:4b:67:a1:22:a1:3e:a3:
c3:5c:49:d3:fa:00:60:cc:ee:2a:09:2e:d5:68:ef:c9:90:8e:
ec:9e:98:6b:8a:53:79:74:9e:17:76:3b:52:a8:2d:79:c1:25:
d7:5e:d3:49:8c:74:6a:c6:b2:a4:ab:c8:22:09:fe:a7:d7:d4:
63:63:d4:9e:2f:e5:ee:77:7a:90:47:12:f7:f0:62:a1:6b:a6:
e8:14:29:76:dc:d0:4d:d9:54:04:05:7d:19:f1:93:bf:1e:d7:
38:27:55:1b:02:bc:fb:7d:32:21:94:19:e8:a3:c8:7d:80:5b:
d8:20:44:d7:25:70:f2:4d:a5:3b:6d:b7:c4:70:36:4e:c4:ab:
cc:06:1c:27:cc:b6:9f:97:62:ed:2c:0c:fe:1f:3a:41:0e:d9:
60:7c:91:5d:9e:1a:43:33:43:fc:69:6e:4f:fe:8b:6e:37:75:
19:30:a1:c5:ee:00:8d:68:f9:8e:d8:f0:28:2c:e2:12:67:3f:
02:7b:70:ee:48:74:4c:72:75:0d:b2:d9:45:e2:84:da:31:ce:
0b:3f:df:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:39:08 2026 by rpki-client