Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/586ab9-1a81-4284-b4b2-cd8b0c4be215/1/rqruHwkj4UojcfJAVA_dIVSbFKY.mft
File: rqruHwkj4UojcfJAVA_dIVSbFKY.mft (raw, json)
Hash identifier: 6ub5qxD6QUK29jmv3nlE4PCOb5SZ0eOMNDnab78ljik=
Subject key identifier: 97:C4:89:7F:AB:DF:14:A6:39:6D:FA:C7:87:AE:C2:1B:38:E9:F6:BC
Authority key identifier: AE:AA:EE:1F:09:23:E1:4A:23:71:F2:40:54:0F:DD:21:54:9B:14:A6
Certificate issuer: /CN=aeaaee1f0923e14a2371f240540fdd21549b14a6
Certificate serial: 019D382DFB8EE26D5866442988E4556E9F4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqruHwkj4UojcfJAVA_dIVSbFKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/586ab9-1a81-4284-b4b2-cd8b0c4be215/1/rqruHwkj4UojcfJAVA_dIVSbFKY.mft
Manifest number: 128A
Signing time: Sun 29 Mar 2026 06:00:30 +0000
Manifest this update: Sun 29 Mar 2026 06:00:30 +0000
Manifest next update: Mon 30 Mar 2026 06:00:30 +0000
Files and hashes: 1: Va5PFVKFz5Nrg0yfNdSqedb7WDw.roa (hash: 66ee+t/p3zGbEnNTHp82R1N/6fSrqH9fWptNZQjoSm0=)
2: rqruHwkj4UojcfJAVA_dIVSbFKY.crl (hash: LDEfYNU1FQpSJGZikaxZmYpiIfVk13d6JVpnySYaw0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/586ab9-1a81-4284-b4b2-cd8b0c4be215/1/rqruHwkj4UojcfJAVA_dIVSbFKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/586ab9-1a81-4284-b4b2-cd8b0c4be215/1/rqruHwkj4UojcfJAVA_dIVSbFKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rqruHwkj4UojcfJAVA_dIVSbFKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:fb:8e:e2:6d:58:66:44:29:88:e4:55:6e:9f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeaaee1f0923e14a2371f240540fdd21549b14a6
Validity
Not Before: Mar 29 06:00:30 2026 GMT
Not After : Mar 30 06:00:30 2026 GMT
Subject: CN=97c4897fabdf14a6396dfac787aec21b38e9f6bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f0:ab:bb:f2:04:d3:c5:32:6c:24:d0:7d:71:
47:b4:e1:b5:c5:93:68:5a:ec:5e:30:77:ca:6c:27:
60:bc:02:60:eb:1f:9f:8b:5f:eb:02:4d:65:40:64:
48:cc:31:24:71:40:d3:9e:6f:4e:b7:3d:d2:44:fa:
6a:aa:36:ab:69:12:88:dc:b2:5d:9f:8f:5b:6c:5a:
ae:50:08:bf:8f:81:d3:3c:47:18:e6:74:2e:04:40:
d3:ef:16:ef:b9:54:a2:6d:b2:dc:b9:6d:95:18:8b:
5a:4d:29:f0:0a:b2:0a:03:f3:35:c9:23:77:cd:d1:
39:83:19:3a:2c:32:c2:46:5e:6d:75:67:58:a7:df:
50:48:b1:d5:50:d5:a2:8f:c3:cd:c7:3f:c5:bc:a8:
4e:79:ed:5e:67:68:16:19:0a:f6:07:ce:ab:64:c0:
36:07:60:1a:93:2c:d0:07:45:1e:82:9b:22:46:27:
4f:01:28:dd:fc:00:fa:10:ee:94:59:18:27:ff:c7:
68:e0:e8:af:2e:00:44:3e:44:68:6c:0c:98:26:11:
b8:ee:34:1f:53:91:05:05:e0:4a:ce:a6:47:91:17:
c1:db:60:97:88:e3:67:d5:69:46:5a:da:6c:be:d5:
02:d6:89:4e:07:31:fc:2f:31:15:05:23:9f:13:71:
fe:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C4:89:7F:AB:DF:14:A6:39:6D:FA:C7:87:AE:C2:1B:38:E9:F6:BC
X509v3 Authority Key Identifier:
keyid:AE:AA:EE:1F:09:23:E1:4A:23:71:F2:40:54:0F:DD:21:54:9B:14:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqruHwkj4UojcfJAVA_dIVSbFKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/586ab9-1a81-4284-b4b2-cd8b0c4be215/1/rqruHwkj4UojcfJAVA_dIVSbFKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/586ab9-1a81-4284-b4b2-cd8b0c4be215/1/rqruHwkj4UojcfJAVA_dIVSbFKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:9e:00:91:e4:48:f2:7a:de:4b:e2:6c:f8:65:ae:9c:9f:d8:
2c:2a:e4:8a:a9:f0:62:d3:1e:d4:e2:e0:96:7c:27:e6:57:88:
a8:ef:e6:01:5f:fd:55:bb:98:93:17:03:f8:91:b8:a3:6e:dc:
8d:cc:71:9c:8f:da:b6:ae:59:d2:ec:23:04:74:cf:71:4a:07:
e1:ad:86:96:fa:43:8a:1d:76:5a:1e:c6:aa:3f:ca:13:aa:72:
60:b9:27:e1:a5:be:e9:8a:75:7d:ac:82:34:ab:5c:63:c3:ab:
f5:54:e1:95:6d:eb:48:a2:c2:c3:3f:b0:36:52:67:b3:3d:3c:
c5:d6:fa:ef:ee:af:21:12:3c:06:96:5d:5a:2a:19:bd:63:8c:
87:d8:b4:19:25:0f:63:6d:fe:0a:0a:ca:67:02:ec:15:1a:3b:
db:c5:6d:66:c2:ad:5a:5b:53:5e:17:42:ec:a3:48:37:2c:bc:
29:1e:ce:cc:c6:26:62:dd:c4:10:cf:e5:09:56:0e:c5:97:e5:
43:5e:fc:ab:8f:be:67:37:1a:ac:a9:c5:e9:82:57:d7:2b:be:
15:f2:c0:71:1a:08:a1:98:44:83:00:69:94:e2:e5:57:a9:a0:
93:4e:74:d7:71:63:a4:1a:1e:25:19:d6:a6:72:d4:e7:46:4f:
6a:6c:35:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LfuO4m1YZkQpiORVbp9MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlYWFlZTFmMDkyM2UxNGEyMzcxZjI0MDU0MGZkZDIxNTQ5
YjE0YTYwHhcNMjYwMzI5MDYwMDMwWhcNMjYwMzMwMDYwMDMwWjAzMTEwLwYDVQQD
Eyg5N2M0ODk3ZmFiZGYxNGE2Mzk2ZGZhYzc4N2FlYzIxYjM4ZTlmNmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfCru/IE08UybCTQfXFHtOG1xZNo
WuxeMHfKbCdgvAJg6x+fi1/rAk1lQGRIzDEkcUDTnm9Otz3SRPpqqjaraRKI3LJd
n49bbFquUAi/j4HTPEcY5nQuBEDT7xbvuVSibbLcuW2VGItaTSnwCrIKA/M1ySN3
zdE5gxk6LDLCRl5tdWdYp99QSLHVUNWij8PNxz/FvKhOee1eZ2gWGQr2B86rZMA2
B2AakyzQB0UegpsiRidPASjd/AD6EO6UWRgn/8do4OivLgBEPkRobAyYJhG47jQf
U5EFBeBKzqZHkRfB22CXiONn1WlGWtpsvtUC1olOBzH8LzEVBSOfE3H+QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJfEiX+r3xSmOW36x4euwhs46fa8MB8GA1UdIwQY
MBaAFK6q7h8JI+FKI3HyQFQP3SFUmxSmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnFydUh3a2o0VW9qY2ZKQVZBX2RJVlNiRktZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81ODZhYjktMWE4MS00Mjg0LWI0YjIt
Y2Q4YjBjNGJlMjE1LzEvcnFydUh3a2o0VW9qY2ZKQVZBX2RJVlNiRktZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi81ODZhYjktMWE4MS00Mjg0LWI0YjItY2Q4YjBjNGJlMjE1
LzEvcnFydUh3a2o0VW9qY2ZKQVZBX2RJVlNiRktZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQZ4AkeRI
8nreS+Js+GWunJ/YLCrkiqnwYtMe1OLglnwn5leIqO/mAV/9VbuYkxcD+JG4o27c
jcxxnI/atq5Z0uwjBHTPcUoH4a2GlvpDih12Wh7Gqj/KE6pyYLkn4aW+6Yp1fayC
NKtcY8Or9VThlW3rSKLCwz+wNlJnsz08xdb67+6vIRI8BpZdWioZvWOMh9i0GSUP
Y23+CgrKZwLsFRo728VtZsKtWltTXhdC7KNINyy8KR7OzMYmYt3EEM/lCVYOxZfl
Q178q4++ZzcarKnF6YJX1yu+FfLAcRoIoZhEgwBplOLlV6mgk05013FjpBoeJRnW
pnLU50ZPamw11g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:29 2026 by rpki-client