Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft
File: ruCNkzby5s0WXrcwKX_m0gyDw5o.mft (raw, json)
Hash identifier: ll/lt27EmcjDaXEiiONv9tn8rC5qYv6sEKE+y25fDf4=
Subject key identifier: DE:51:94:AD:9C:24:5C:AB:FA:F7:6D:8E:85:6A:09:76:27:01:5B:E4
Authority key identifier: AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A
Certificate issuer: /CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a
Certificate serial: 019CAC4797FFF24D00797FEC655BCC321461
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft
Manifest number: 1592
Signing time: Mon 02 Mar 2026 02:01:38 +0000
Manifest this update: Mon 02 Mar 2026 02:01:38 +0000
Manifest next update: Tue 03 Mar 2026 02:01:38 +0000
Files and hashes: 1: 123WXGbRTZdeisXrE-k_3g3EMvk.roa (hash: PVrjq81b7ONxfTHO259I9HIBssHsthuK6wCJzCfRRBw=)
2: 3JLEaN47mFd4AJ1ulcTajHwX46Q.roa (hash: 7nuv0xJK6J/Wz9ZBABmkHA68zDZCu6LbMkw8k4JA0aY=)
3: 3m4ZcWe4AoRitpxIdoHTfvPCTz4.roa (hash: R1IDNKkyr2PRIrfMe44b/uoEQJhofAwIdcVDkSZ0J1s=)
4: ktGWBH_rz8CZASP_zJHcbXXlp7Y.roa (hash: WQj8sJ8bysuFkPbFG5oVPz6oUf8fVBbz+1mkOQXAzAY=)
5: qmwlU-LpszPGm_f_AiX4jfEipIU.roa (hash: eBcbl11HwyKBKgKCJIYPrcRxwRYlzqQyOytUqmTgqj8=)
6: ruCNkzby5s0WXrcwKX_m0gyDw5o.crl (hash: ZlgOrFkjC0xMkqeEwg9kGZ36zsG2qy29WbBaiP6up7g=)
7: wwateRuj040-ENpDYQ6qLA2XVl0.roa (hash: NH6PZI4atftudx1FEvFD8kdIjwc++XEY3pey7kw2zFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:97:ff:f2:4d:00:79:7f:ec:65:5b:cc:32:14:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a
Validity
Not Before: Mar 2 02:01:38 2026 GMT
Not After : Mar 3 02:01:38 2026 GMT
Subject: CN=de5194ad9c245cabfaf76d8e856a097627015be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:08:26:6b:38:74:ca:d4:eb:79:c2:cf:b1:a8:
69:59:d4:0c:52:9c:e9:60:10:fd:16:17:5d:23:de:
8b:f8:b8:a5:1f:4c:c3:b3:85:53:cf:04:ed:c5:73:
09:48:fe:a0:26:80:c7:0b:0e:90:59:63:a7:20:05:
2c:f8:b1:38:a7:c7:2f:13:9d:50:24:2d:ff:25:4a:
62:7f:6f:cd:ea:48:0d:d8:94:d2:99:b0:a2:2a:b5:
a5:28:f3:bc:a0:b1:29:c6:a4:68:db:f1:42:3e:3e:
71:b4:d0:47:33:aa:d3:f0:ab:b4:4d:ab:8f:ff:f9:
47:04:3a:c2:8f:29:9e:4e:4d:16:4c:d5:3d:cc:60:
c4:2a:90:13:e1:6d:e5:1b:ff:76:90:1a:19:c5:c1:
9f:09:12:8e:13:1f:11:e4:9d:6a:ac:1b:5c:d0:29:
39:44:37:37:2b:12:29:a0:69:8f:f3:01:38:04:38:
46:0b:19:d4:96:53:71:c2:72:43:ec:f7:66:26:14:
ab:9c:13:91:41:0e:a5:e3:c1:91:bf:39:0d:ea:8f:
17:c5:44:1d:54:e4:4a:c0:a9:2d:60:ab:c7:f7:36:
73:d6:4c:94:50:a7:9a:f0:ea:d8:1c:85:84:18:d5:
e8:b1:27:20:b0:7b:68:74:61:a6:6e:78:32:fd:db:
e8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:51:94:AD:9C:24:5C:AB:FA:F7:6D:8E:85:6A:09:76:27:01:5B:E4
X509v3 Authority Key Identifier:
keyid:AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:0f:b2:6e:a5:c3:e1:ee:21:b4:d8:0d:15:c7:a6:04:83:0f:
ad:8e:fc:25:f4:14:14:2c:09:34:54:ca:49:ed:ad:fa:7b:4d:
e8:15:aa:3b:a9:fe:2c:95:89:0f:47:4e:c4:e9:3b:67:a1:a0:
bc:25:8a:8a:e5:58:00:4f:0d:ca:59:d4:87:f9:52:91:ab:0f:
02:ab:22:79:1b:76:b4:1e:c6:e8:56:7f:73:60:b4:72:6d:1b:
86:eb:2a:51:3d:b8:42:bb:1e:f4:36:94:70:d7:75:ae:57:a6:
8f:49:44:9f:33:44:f4:5f:9d:91:97:c1:de:9e:b2:21:0f:42:
ac:bd:8b:b6:1a:64:4f:02:dd:db:78:f7:18:8f:2b:11:b5:31:
11:85:d3:3f:ad:9c:59:46:f3:f8:db:da:56:1e:42:ca:e8:7d:
26:27:fa:c5:02:29:21:8e:74:01:72:b7:32:4f:1f:a6:d3:63:
14:39:bc:ff:cb:dc:4a:f0:b9:5f:78:42:3c:33:88:0d:cf:d7:
83:ef:85:22:26:df:2c:a5:e9:9b:21:9a:c5:71:af:00:81:66:
43:53:c0:e9:97:9f:4c:95:b3:5d:72:06:89:fa:46:83:7a:94:
7d:fd:9c:85:0a:4e:0d:06:bd:8f:74:42:dd:76:01:cc:a7:38:
7c:9c:e9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:55:27 2026 by rpki-client