Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft
File: ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft (raw, json)
Hash identifier: 4HRCCftbNUvlcbcrm0htnhKddB9M8OsWaNGmrDDfysI=
Subject key identifier: 3C:EC:BF:FE:FC:73:E2:F4:BE:00:0D:29:94:69:52:B9:1C:95:84:3A
Authority key identifier: AE:E2:F8:E5:36:27:AD:C2:76:78:06:3B:93:D3:D9:FD:6E:CE:90:02
Certificate issuer: /CN=aee2f8e53627adc27678063b93d3d9fd6ece9002
Certificate serial: 019CAA218F7ED813ABA06CB4A5AFF6403B5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft
Manifest number: 1737
Signing time: Sun 01 Mar 2026 16:00:51 +0000
Manifest this update: Sun 01 Mar 2026 16:00:51 +0000
Manifest next update: Mon 02 Mar 2026 16:00:51 +0000
Files and hashes: 1: 5ZoEo50_xAHK34okKgd5dDUMiUg.roa (hash: LIs7cRQu0NuinXWbbRKXMVEwh8Kej14YFA3/Roh92YA=)
2: DCEcusp2eUGzG1BBOnYxv3yFd44.roa (hash: bfsFhq6ej0vlB2f4W6DclWkdX8tD+q/PCkm2oIBGGDw=)
3: ruL45TYnrcJ2eAY7k9PZ_W7OkAI.crl (hash: q/u42PkToej5mntmfqD7VVQXhjfAOe6Au1o9rKFNwRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:8f:7e:d8:13:ab:a0:6c:b4:a5:af:f6:40:3b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee2f8e53627adc27678063b93d3d9fd6ece9002
Validity
Not Before: Mar 1 16:00:51 2026 GMT
Not After : Mar 2 16:00:51 2026 GMT
Subject: CN=3cecbffefc73e2f4be000d29946952b91c95843a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7a:f1:86:2e:fe:d1:d3:1f:77:91:b3:a3:d3:
f3:a9:60:34:01:a6:cb:23:5c:20:2b:b9:5c:00:10:
f7:34:3e:8a:94:83:1e:3d:ee:cf:d5:6b:da:c1:13:
7c:ea:3d:91:f3:96:06:2c:ab:9f:e4:ce:0b:5d:e9:
8f:a0:c0:10:3c:fc:17:1e:6e:ee:b3:ca:1a:a7:78:
cd:c6:2a:1c:93:1f:3e:3a:9e:96:4d:9a:d7:ac:43:
86:09:77:b1:e5:13:4c:b6:10:0f:ea:9d:f3:04:e6:
03:45:4d:18:bc:6d:4c:1e:22:f7:42:90:c9:f8:f7:
51:09:44:6f:fa:37:87:56:29:a3:16:34:bd:d2:e3:
96:35:3e:81:50:06:3b:55:0e:c9:80:43:5c:06:2c:
b6:37:f0:00:66:a1:be:53:78:da:99:93:8c:90:6c:
3f:5b:12:24:c8:40:8a:14:ce:d3:69:87:1b:ca:2d:
8c:05:be:09:25:2b:88:11:aa:07:ed:df:5f:4f:30:
8f:6f:1d:9c:e9:43:80:bc:c6:6a:72:ff:2c:bc:c2:
e1:98:68:7e:db:3d:41:60:41:d4:91:22:cb:ba:81:
ec:ab:7f:2c:93:6e:19:95:80:e2:b8:1e:e3:e8:c1:
08:6a:88:a5:d6:73:a1:11:fc:f4:d3:37:3f:9b:d1:
32:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:EC:BF:FE:FC:73:E2:F4:BE:00:0D:29:94:69:52:B9:1C:95:84:3A
X509v3 Authority Key Identifier:
keyid:AE:E2:F8:E5:36:27:AD:C2:76:78:06:3B:93:D3:D9:FD:6E:CE:90:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:d6:af:16:f5:cd:2a:53:28:a4:d0:40:8f:67:de:7b:c0:90:
a2:cd:9e:20:7d:28:a0:d7:8b:1a:6d:02:4a:5c:61:74:69:d6:
f3:09:3c:ea:60:af:7b:0e:77:4c:e2:0e:3a:24:f2:0a:e9:c1:
4e:f2:e3:5b:ab:0d:7e:d2:44:73:fc:de:59:c4:82:cf:76:59:
56:78:43:45:df:ae:53:94:ae:30:2e:1c:13:9a:e8:e3:23:62:
26:94:cb:d6:e8:f3:18:c7:69:2e:38:0d:4a:6b:30:5f:f1:71:
f6:5d:22:42:23:bc:98:40:9b:bb:5e:ae:46:4d:d5:63:f2:c8:
fb:7e:5a:5a:27:31:19:e1:bf:39:ef:37:6c:7c:0f:bf:8f:1c:
59:97:b6:30:0a:04:68:91:ba:ff:dd:f7:75:26:9c:1a:a5:e5:
29:95:a2:a4:c7:11:42:8b:81:67:fa:3d:fe:80:92:7b:69:bc:
98:46:98:f5:4b:f2:8f:77:8c:00:32:37:5c:42:ac:2c:63:b1:
0f:5d:32:71:58:37:4a:c2:79:16:c1:a0:3f:2a:07:06:87:ec:
4f:e1:a2:fc:e8:30:05:04:56:ba:43:6e:d9:6e:47:51:01:28:
25:94:e9:43:34:56:8b:cc:38:cc:d5:fd:0e:a8:7b:7e:54:d1:
f1:55:5d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:50:20 2026 by rpki-client