Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft
File: ruqgluuzdlfk060hdmQRctbiArw.mft (raw, json)
Hash identifier: F9252HVx0gSQkFoDYhUp6lyBhJ2xYKrYHODYrtowZYI=
Subject key identifier: 3A:8B:D5:80:65:05:39:4E:1A:21:E6:1C:37:C4:3E:04:56:71:E2:97
Authority key identifier: AE:EA:A0:96:EB:B3:76:57:E4:D3:AD:21:76:64:11:72:D6:E2:02:BC
Certificate issuer: /CN=aeeaa096ebb37657e4d3ad2176641172d6e202bc
Certificate serial: 019E31BC1DE7DB7CAC81ADE0D0F345261AB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft
Manifest number: 0DA9
Signing time: Sat 16 May 2026 17:01:12 +0000
Manifest this update: Sat 16 May 2026 17:01:12 +0000
Manifest next update: Sun 17 May 2026 17:01:12 +0000
Files and hashes: 1: akW7_4B1c1-TUlyABJDZZ5C9MTs.roa (hash: R6h75h04kvMzsvpJpfqerZYqo36Vm9P1L15UtjUMqOQ=)
2: ruqgluuzdlfk060hdmQRctbiArw.crl (hash: t+TspxDF+EiMxqDX6uscyNArUeZh5D6qqN84tD0U4XI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:bc:1d:e7:db:7c:ac:81:ad:e0:d0:f3:45:26:1a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeeaa096ebb37657e4d3ad2176641172d6e202bc
Validity
Not Before: May 16 17:01:12 2026 GMT
Not After : May 17 17:01:12 2026 GMT
Subject: CN=3a8bd5806505394e1a21e61c37c43e045671e297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c5:8b:61:d7:b6:d5:33:31:b9:b0:27:6b:f1:
31:e3:7f:08:b3:59:d7:0b:77:cb:8e:f6:80:66:f1:
e5:20:26:9c:b6:18:5c:61:49:2e:7f:87:35:33:79:
61:04:10:41:b5:9a:ff:d4:a7:3a:dc:93:e0:1d:5b:
1b:13:f2:86:3c:18:7e:ba:0f:0f:92:1e:2a:94:23:
61:3a:58:0c:50:30:95:b5:58:93:84:67:cb:bb:26:
52:ba:57:3c:b9:fb:30:a8:28:86:88:da:3f:9d:1c:
20:20:e8:86:38:ae:24:98:ed:09:19:da:71:1e:e5:
73:66:74:75:ef:a9:bf:d3:a3:72:56:b4:f2:77:ae:
60:2b:c9:05:61:cf:74:dd:dc:3f:15:33:3e:fe:53:
56:76:7e:47:89:9b:e2:f4:dd:fc:f5:c0:1d:a2:7c:
0b:c3:e5:60:f1:99:11:75:9a:b9:d9:d4:1a:0f:78:
f2:1f:7e:a8:74:b6:20:1d:ce:11:2d:a5:5b:5b:b8:
1f:ce:6a:4d:08:cd:04:c1:7b:4c:79:ea:5e:01:5f:
88:1d:5f:d4:cf:3e:24:ea:bf:d9:76:65:ca:01:1f:
75:ee:ab:94:20:47:35:87:85:d3:ad:e8:3c:f2:3c:
8b:4d:d4:e3:4a:cd:bb:2a:74:c5:10:d5:b5:d5:f3:
29:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:8B:D5:80:65:05:39:4E:1A:21:E6:1C:37:C4:3E:04:56:71:E2:97
X509v3 Authority Key Identifier:
keyid:AE:EA:A0:96:EB:B3:76:57:E4:D3:AD:21:76:64:11:72:D6:E2:02:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:b3:35:36:3f:38:4f:38:b6:fe:9c:86:6a:fa:12:3a:8e:96:
a1:9e:51:29:4e:13:94:94:5d:de:4f:be:83:70:0d:14:8c:be:
55:ce:34:dd:da:23:ad:49:b7:0b:53:79:c2:b8:cc:9e:37:84:
3e:fd:a4:0f:69:c0:f2:b6:fd:88:f0:f1:73:2d:a3:c8:09:39:
c6:ab:f8:1a:7c:6f:12:bd:f7:f1:a0:5c:76:12:5f:5b:b9:e0:
32:f1:eb:41:03:8b:7b:c5:a8:3a:31:3a:f8:04:d3:73:5a:b7:
f0:2a:05:14:85:d5:90:90:2b:24:f1:fc:a6:db:03:5f:ab:0a:
27:bd:2f:c6:ac:90:d8:9f:49:d8:b3:39:bd:4a:80:5c:9b:78:
37:a9:dd:42:71:38:56:3d:a3:e9:87:cc:de:ba:40:c0:59:b8:
8b:f7:6d:d9:f7:a1:aa:16:11:21:6d:50:a6:a2:48:1d:9d:05:
b4:6b:ee:eb:53:d1:49:7b:66:78:3d:f5:28:78:80:ae:4f:14:
95:8a:fc:97:1d:20:b0:17:fe:9f:8d:c4:ac:2a:b7:c4:ae:2a:
0e:0c:d7:2d:54:05:4e:8e:27:c9:d7:a1:b0:30:32:77:e3:b1:
21:8e:c0:c7:15:0d:61:81:4c:e4:d0:6d:67:9b:2c:50:52:73:
3c:2b:04:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:40:45 2026 by rpki-client