Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft
File: ruqgluuzdlfk060hdmQRctbiArw.mft (raw, json)
Hash identifier: NtyUp2luQDvw5+AsT93foz4/otHW+2hfc3imgTtUx/s=
Subject key identifier: 21:E3:6B:8B:DA:4A:09:0F:94:A6:B9:40:23:ED:FC:1A:35:4D:D9:1E
Authority key identifier: AE:EA:A0:96:EB:B3:76:57:E4:D3:AD:21:76:64:11:72:D6:E2:02:BC
Certificate issuer: /CN=aeeaa096ebb37657e4d3ad2176641172d6e202bc
Certificate serial: 019EC0A3F6183A795CE9FA9DC5CF565ED928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft
Manifest number: 0DF3
Signing time: Sat 13 Jun 2026 11:00:31 +0000
Manifest this update: Sat 13 Jun 2026 11:00:31 +0000
Manifest next update: Sun 14 Jun 2026 11:00:31 +0000
Files and hashes: 1: akW7_4B1c1-TUlyABJDZZ5C9MTs.roa (hash: R6h75h04kvMzsvpJpfqerZYqo36Vm9P1L15UtjUMqOQ=)
2: ruqgluuzdlfk060hdmQRctbiArw.crl (hash: TsEOpdbQnLQi514n5NoXM5XlR2DEHtT0j8nEdDOZUb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 11:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a3:f6:18:3a:79:5c:e9:fa:9d:c5:cf:56:5e:d9:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeeaa096ebb37657e4d3ad2176641172d6e202bc
Validity
Not Before: Jun 13 11:00:31 2026 GMT
Not After : Jun 14 11:00:31 2026 GMT
Subject: CN=21e36b8bda4a090f94a6b94023edfc1a354dd91e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:50:e6:3e:2e:12:d1:2f:e9:76:ea:11:ba:b8:
c7:77:64:5f:aa:22:97:f3:bf:61:16:3e:02:7c:89:
d4:a5:c9:aa:d2:d6:00:11:b9:16:0d:7e:77:b8:43:
72:8d:44:22:e5:25:ce:45:a0:78:a1:41:18:c8:ac:
35:c8:3c:33:33:48:25:8a:ea:a8:8c:08:86:c9:22:
f9:a7:a2:7a:22:88:dc:ad:73:26:20:20:87:eb:4d:
c0:a3:0b:a9:d4:3d:a7:86:ea:a1:8e:86:ef:c7:65:
8b:c5:6d:ac:6c:fd:3c:17:27:da:a4:41:a6:7a:5c:
8d:8c:71:1e:e1:d6:49:d5:53:35:cc:52:9a:70:09:
10:f6:25:3a:50:99:44:07:8c:79:25:b7:db:5f:16:
f0:2e:b2:b6:93:7e:dc:e8:22:2e:91:87:2f:7c:9d:
dd:9e:7e:b4:6f:06:f6:d4:3a:26:47:1b:f1:69:db:
ec:cc:c7:3b:6a:6a:c0:d9:ef:86:89:ea:28:39:1b:
2f:6b:bf:70:75:7e:a0:38:97:05:9f:b5:d8:48:5f:
f1:a9:5c:93:fa:47:d1:c4:33:38:e4:ce:e9:3a:e9:
bd:2c:29:17:fa:8b:34:2a:94:5e:ba:d9:4e:6d:05:
1f:74:d9:08:81:b3:84:40:d5:39:b8:5e:eb:a6:f9:
2a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E3:6B:8B:DA:4A:09:0F:94:A6:B9:40:23:ED:FC:1A:35:4D:D9:1E
X509v3 Authority Key Identifier:
keyid:AE:EA:A0:96:EB:B3:76:57:E4:D3:AD:21:76:64:11:72:D6:E2:02:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:8b:65:90:b0:c4:c1:2a:00:a1:06:f5:3d:f2:11:98:29:46:
dd:ed:48:ea:d3:4c:96:a4:97:91:d4:f3:0d:dd:32:66:60:68:
52:82:16:cd:08:af:70:22:ba:e8:b4:40:d1:94:9b:65:19:0b:
48:3c:65:00:22:57:18:a6:a8:78:b9:2d:e0:69:40:8b:3c:15:
5e:bc:e5:1a:79:3c:d2:6f:68:73:cc:03:34:5d:2a:9f:78:3f:
08:53:17:30:06:97:d6:95:d5:b3:e5:31:bb:8f:06:3c:fe:a2:
cb:9e:a2:17:28:e5:07:89:af:5e:07:99:ee:2f:9f:c4:db:b2:
4d:16:19:97:5c:91:3c:b4:6d:20:c6:5c:a2:33:02:12:84:2d:
70:1d:01:71:39:ce:3b:1b:a4:c7:d1:8c:66:39:f5:33:a4:c7:
c3:74:53:f0:34:90:71:38:de:f3:df:84:45:39:b1:06:6e:51:
a1:e9:d0:48:4d:b2:e7:a2:4e:24:c9:57:31:c1:dd:bf:09:7a:
d6:4d:bf:fc:e7:3b:bb:20:8f:d1:cc:1d:de:2e:96:2a:9a:35:
84:62:77:1f:4e:db:61:9b:f1:45:ec:15:4c:fc:39:b2:2a:96:
b7:ba:82:56:75:62:91:19:9e:f3:45:27:f2:51:43:43:1a:22:
52:fb:75:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:57:06 2026 by rpki-client