Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft
File: ruqgluuzdlfk060hdmQRctbiArw.mft (raw, json)
Hash identifier: kaDxZdNqirrBDt8ojSS7LzUjMfmdiDXlXeAuN2ZazTI=
Subject key identifier: B1:25:E8:2E:1B:C7:88:1E:DE:FA:0F:43:B2:4A:8B:38:BC:B6:54:08
Authority key identifier: AE:EA:A0:96:EB:B3:76:57:E4:D3:AD:21:76:64:11:72:D6:E2:02:BC
Certificate issuer: /CN=aeeaa096ebb37657e4d3ad2176641172d6e202bc
Certificate serial: 019D389C5E506AD5612CB140C5ABD337DFCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft
Manifest number: 0D28
Signing time: Sun 29 Mar 2026 08:01:05 +0000
Manifest this update: Sun 29 Mar 2026 08:01:05 +0000
Manifest next update: Mon 30 Mar 2026 08:01:05 +0000
Files and hashes: 1: akW7_4B1c1-TUlyABJDZZ5C9MTs.roa (hash: R6h75h04kvMzsvpJpfqerZYqo36Vm9P1L15UtjUMqOQ=)
2: ruqgluuzdlfk060hdmQRctbiArw.crl (hash: 4NiZ4IFvvBdNaAVxrhQRjMamx6xwlyPKAiCSs7ArFZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:5e:50:6a:d5:61:2c:b1:40:c5:ab:d3:37:df:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeeaa096ebb37657e4d3ad2176641172d6e202bc
Validity
Not Before: Mar 29 08:01:05 2026 GMT
Not After : Mar 30 08:01:05 2026 GMT
Subject: CN=b125e82e1bc7881edefa0f43b24a8b38bcb65408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:12:7a:41:e4:70:88:9a:1d:a3:4d:c3:96:31:
de:24:ef:19:04:e6:20:e1:0f:26:19:11:b8:08:79:
d2:72:d4:6d:84:74:a9:89:45:d9:61:71:dc:77:0c:
19:ed:be:83:fc:6b:45:9e:14:62:5b:20:42:7a:0e:
1c:66:e5:fc:79:4b:71:b4:84:bf:c3:8a:dc:57:34:
46:5a:25:21:a3:9b:f9:8e:8c:80:76:c1:eb:fb:da:
ed:2d:e0:1f:0e:15:1d:05:24:5b:98:72:13:0f:61:
2a:5e:b7:1a:11:d7:46:ef:cb:0b:f1:dc:48:1b:66:
cf:74:27:1c:9b:8f:93:ff:06:f5:e9:fa:31:0a:18:
48:99:ac:8f:95:40:fa:77:6f:10:9e:56:b2:2b:08:
a4:fd:ff:98:62:63:3a:f6:6d:5e:54:67:39:f0:7f:
fd:a1:9e:f2:c6:d7:61:ea:e6:62:e9:92:d2:c2:88:
a3:7e:a9:9b:4c:a0:ba:56:e2:21:b7:8f:13:ba:d1:
be:57:66:6f:c6:65:e2:1e:ce:05:c1:24:8e:83:b6:
eb:0d:c4:61:a0:bf:bc:e7:eb:5a:c3:c2:35:a9:b4:
03:17:c6:30:8d:a7:a6:66:6c:6f:0e:58:ce:e2:ee:
88:d8:6b:f8:04:7b:67:13:bd:a6:67:fa:20:3b:56:
05:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:25:E8:2E:1B:C7:88:1E:DE:FA:0F:43:B2:4A:8B:38:BC:B6:54:08
X509v3 Authority Key Identifier:
keyid:AE:EA:A0:96:EB:B3:76:57:E4:D3:AD:21:76:64:11:72:D6:E2:02:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:0b:c0:ea:e8:a7:6f:1f:cd:46:9b:f7:da:62:00:ef:f3:22:
ba:78:00:3b:ee:57:dd:1b:6c:90:67:72:04:1e:58:bb:5a:c0:
25:11:54:69:c3:6f:fa:f0:dd:9f:f7:a4:c7:b5:da:ae:b2:d8:
0d:cd:39:8a:2a:fc:8b:b8:37:8f:b4:48:ac:85:91:e1:ce:c5:
02:ea:70:d8:f9:38:13:11:f5:ae:0f:42:f6:35:e6:69:32:54:
08:0c:9d:12:6b:ae:fa:0d:b8:81:8d:5d:1c:5c:f0:7a:aa:1f:
85:06:42:df:59:bd:75:cd:51:0e:ed:ea:96:94:86:a0:ef:aa:
20:63:68:8a:02:19:9e:94:54:40:d8:7f:21:7b:6b:52:68:fc:
7d:7c:84:4a:9a:00:7f:03:97:77:00:21:02:67:16:20:05:ab:
1a:11:91:f8:63:a6:52:1e:4b:e3:fd:b4:a3:7c:2c:bb:50:63:
e3:9c:ca:29:0d:19:ff:52:9a:df:75:63:e1:18:50:4b:e2:52:
c7:12:48:17:8e:51:53:04:b6:52:cd:96:66:8a:42:f4:10:38:
bf:1c:a4:31:2b:5e:33:b4:53:c7:64:69:72:13:ff:d5:49:dd:
82:41:58:3f:b3:57:bb:45:d6:36:bd:a3:51:cf:93:b2:ec:79:
6d:6b:8e:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nF5QatVhLLFAxavTN9/NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZWFhMDk2ZWJiMzc2NTdlNGQzYWQyMTc2NjQxMTcyZDZl
MjAyYmMwHhcNMjYwMzI5MDgwMTA1WhcNMjYwMzMwMDgwMTA1WjAzMTEwLwYDVQQD
EyhiMTI1ZTgyZTFiYzc4ODFlZGVmYTBmNDNiMjRhOGIzOGJjYjY1NDA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxJ6QeRwiJodo03DljHeJO8ZBOYg
4Q8mGRG4CHnSctRthHSpiUXZYXHcdwwZ7b6D/GtFnhRiWyBCeg4cZuX8eUtxtIS/
w4rcVzRGWiUho5v5joyAdsHr+9rtLeAfDhUdBSRbmHITD2EqXrcaEddG78sL8dxI
G2bPdCccm4+T/wb16foxChhImayPlUD6d28QnlayKwik/f+YYmM69m1eVGc58H/9
oZ7yxtdh6uZi6ZLSwoijfqmbTKC6VuIht48TutG+V2ZvxmXiHs4FwSSOg7brDcRh
oL+85+taw8I1qbQDF8YwjaemZmxvDljO4u6I2Gv4BHtnE72mZ/ogO1YFGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLEl6C4bx4ge3voPQ7JKizi8tlQIMB8GA1UdIwQY
MBaAFK7qoJbrs3ZX5NOtIXZkEXLW4gK8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnVxZ2x1dXpkbGZrMDYwaGRtUVJjdGJpQXJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9iZWNmNDgtMDM1YS00NDcxLWJkZjMt
ZmZkNWJmNTk2OWRmLzEvcnVxZ2x1dXpkbGZrMDYwaGRtUVJjdGJpQXJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9iZWNmNDgtMDM1YS00NDcxLWJkZjMtZmZkNWJmNTk2OWRm
LzEvcnVxZ2x1dXpkbGZrMDYwaGRtUVJjdGJpQXJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGQvA6uin
bx/NRpv32mIA7/MiungAO+5X3RtskGdyBB5Yu1rAJRFUacNv+vDdn/ekx7XarrLY
Dc05iir8i7g3j7RIrIWR4c7FAupw2Pk4ExH1rg9C9jXmaTJUCAydEmuu+g24gY1d
HFzweqofhQZC31m9dc1RDu3qlpSGoO+qIGNoigIZnpRUQNh/IXtrUmj8fXyESpoA
fwOXdwAhAmcWIAWrGhGR+GOmUh5L4/20o3wsu1Bj45zKKQ0Z/1Ka33Vj4RhQS+JS
xxJIF45RUwS2Us2WZopC9BA4vxykMSteM7RTx2RpchP/1UndgkFYP7NXu0XWNr2j
Uc+Tsux5bWuOmg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:24 2026 by rpki-client