Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft
File: ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft (raw, json)
Hash identifier: ybHMDwSD57HHtRgrFo2nDC+EPFGqREHdBSOEEZFjvPg=
Subject key identifier: 32:8C:1B:C5:7B:A6:1B:11:B0:EC:68:67:26:0D:5A:05:4E:0B:74:65
Authority key identifier: AE:E2:F8:E5:36:27:AD:C2:76:78:06:3B:93:D3:D9:FD:6E:CE:90:02
Certificate issuer: /CN=aee2f8e53627adc27678063b93d3d9fd6ece9002
Certificate serial: 019DA341697B1AE945488B121C4CA0EF3CBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft
Manifest number: 17B8
Signing time: Sun 19 Apr 2026 01:01:05 +0000
Manifest this update: Sun 19 Apr 2026 01:01:05 +0000
Manifest next update: Mon 20 Apr 2026 01:01:05 +0000
Files and hashes: 1: 5ZoEo50_xAHK34okKgd5dDUMiUg.roa (hash: LIs7cRQu0NuinXWbbRKXMVEwh8Kej14YFA3/Roh92YA=)
2: DCEcusp2eUGzG1BBOnYxv3yFd44.roa (hash: bfsFhq6ej0vlB2f4W6DclWkdX8tD+q/PCkm2oIBGGDw=)
3: ruL45TYnrcJ2eAY7k9PZ_W7OkAI.crl (hash: Z7STQe5PQwgvnoarhnTw6IP0cppHbET55+uFu5mMXMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:41:69:7b:1a:e9:45:48:8b:12:1c:4c:a0:ef:3c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee2f8e53627adc27678063b93d3d9fd6ece9002
Validity
Not Before: Apr 19 01:01:05 2026 GMT
Not After : Apr 20 01:01:05 2026 GMT
Subject: CN=328c1bc57ba61b11b0ec6867260d5a054e0b7465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:37:5f:54:51:10:62:30:ad:dc:bc:d6:10:a1:
2a:5f:62:1f:00:f1:97:2e:3e:16:34:38:f6:e6:fe:
c7:bb:33:59:b3:1a:7e:20:7b:18:48:ad:89:c4:64:
35:51:8c:1d:df:79:3b:7a:c3:60:18:2f:0c:4e:7d:
01:8f:e7:5b:48:e6:fb:77:0c:d9:19:62:0d:7f:22:
89:e7:f8:8b:91:7d:cc:95:17:6b:58:21:74:b0:52:
9c:c2:8c:d1:30:ea:d4:d5:de:ce:b3:60:ab:5c:05:
d2:e6:cd:9e:31:b3:0d:3b:ac:aa:1b:0e:8a:15:5c:
63:8e:41:2e:57:6b:7d:27:d6:c7:41:ab:31:3b:e8:
80:bb:78:4d:14:37:da:7b:41:49:09:19:2a:12:5a:
5d:bc:f9:8c:4d:ce:3a:f8:a4:94:33:4b:b7:9d:b6:
39:b9:aa:b5:b4:bb:11:06:9d:c7:cb:ee:6d:81:16:
73:78:07:2c:1c:52:2d:b8:1e:50:bb:be:eb:52:7c:
a5:2b:43:df:86:fb:8b:6b:97:f9:6e:fe:ea:ab:4b:
4c:78:1f:c8:93:eb:a2:18:fc:e7:1f:b0:5f:01:e7:
c0:e6:af:19:79:25:09:cb:ee:c3:4b:8b:d4:5f:27:
97:cf:3f:64:cc:c2:d8:9c:5f:ee:81:81:5f:c4:6d:
46:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:8C:1B:C5:7B:A6:1B:11:B0:EC:68:67:26:0D:5A:05:4E:0B:74:65
X509v3 Authority Key Identifier:
keyid:AE:E2:F8:E5:36:27:AD:C2:76:78:06:3B:93:D3:D9:FD:6E:CE:90:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:81:c1:4a:32:20:87:8b:48:a1:7f:d2:18:68:db:09:9b:03:
4f:61:67:8e:19:f9:07:4e:ee:71:a6:26:c0:5a:b4:de:f4:a9:
38:9e:e7:81:32:9b:f3:3c:c0:b0:e9:a8:97:ba:a7:42:e9:d2:
a0:9f:18:33:bf:c3:e3:cf:40:20:83:94:9a:fa:36:25:3d:9a:
c6:cc:da:e0:5a:cd:02:cb:2c:81:a1:1b:b2:e5:52:51:1f:10:
a3:52:27:91:9f:14:49:58:c0:4f:43:b5:37:12:74:11:6b:ea:
48:aa:96:b7:18:f9:8e:72:78:61:dd:d8:16:a9:d1:5f:66:cb:
e2:57:6c:cf:b3:87:8f:89:ee:c3:75:e3:0f:e3:20:bf:37:3a:
97:37:69:38:5c:bc:2b:26:b1:6e:50:c0:1e:84:9b:02:86:95:
e4:4f:60:06:46:8a:83:34:0e:37:fa:9b:95:5b:c3:fc:df:aa:
fc:bd:cc:b7:7b:ae:5b:35:f1:ec:30:e4:cc:c5:e8:be:a7:36:
81:49:c5:55:c4:69:d6:14:b3:8f:56:b5:7d:44:4d:33:61:63:
9d:19:62:5d:4f:8c:db:36:34:81:b6:f0:7c:44:09:bc:ee:52:
09:5a:35:74:e1:72:b4:e7:5e:ec:73:6f:d8:5f:d1:ba:e9:4e:
e3:30:44:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jQWl7GulFSIsSHEyg7zy+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZTJmOGU1MzYyN2FkYzI3Njc4MDYzYjkzZDNkOWZkNmVj
ZTkwMDIwHhcNMjYwNDE5MDEwMTA1WhcNMjYwNDIwMDEwMTA1WjAzMTEwLwYDVQQD
EygzMjhjMWJjNTdiYTYxYjExYjBlYzY4NjcyNjBkNWEwNTRlMGI3NDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DdfVFEQYjCt3LzWEKEqX2IfAPGX
Lj4WNDj25v7HuzNZsxp+IHsYSK2JxGQ1UYwd33k7esNgGC8MTn0Bj+dbSOb7dwzZ
GWINfyKJ5/iLkX3MlRdrWCF0sFKcwozRMOrU1d7Os2CrXAXS5s2eMbMNO6yqGw6K
FVxjjkEuV2t9J9bHQasxO+iAu3hNFDfae0FJCRkqElpdvPmMTc46+KSUM0u3nbY5
uaq1tLsRBp3Hy+5tgRZzeAcsHFItuB5Qu77rUnylK0PfhvuLa5f5bv7qq0tMeB/I
k+uiGPznH7BfAefA5q8ZeSUJy+7DS4vUXyeXzz9kzMLYnF/ugYFfxG1GLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDKMG8V7phsRsOxoZyYNWgVOC3RlMB8GA1UdIwQY
MBaAFK7i+OU2J63CdngGO5PT2f1uzpACMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnVMNDVUWW5yY0oyZUFZN2s5UFpfVzdPa0FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8xOTNlZDItYjc3NC00MmYwLWFhM2Yt
YTQ2NTY0MWE0OGZhLzEvcnVMNDVUWW5yY0oyZUFZN2s5UFpfVzdPa0FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8xOTNlZDItYjc3NC00MmYwLWFhM2YtYTQ2NTY0MWE0OGZh
LzEvcnVMNDVUWW5yY0oyZUFZN2s5UFpfVzdPa0FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe4HBSjIg
h4tIoX/SGGjbCZsDT2Fnjhn5B07ucaYmwFq03vSpOJ7ngTKb8zzAsOmol7qnQunS
oJ8YM7/D489AIIOUmvo2JT2axsza4FrNAsssgaEbsuVSUR8Qo1InkZ8USVjAT0O1
NxJ0EWvqSKqWtxj5jnJ4Yd3YFqnRX2bL4ldsz7OHj4nuw3XjD+Mgvzc6lzdpOFy8
KyaxblDAHoSbAoaV5E9gBkaKgzQON/qblVvD/N+q/L3Mt3uuWzXx7DDkzMXovqc2
gUnFVcRp1hSzj1a1fURNM2FjnRliXU+M2zY0gbbwfEQJvO5SCVo1dOFytOde7HNv
2F/RuulO4zBEdg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:02:05 2026 by rpki-client