
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft
File: ruqgluuzdlfk060hdmQRctbiArw.mft (raw, json)
Hash identifier: K6qSY/tOa+Uih9CWwNmba1eB45VYI/JEGKVKJKxQNps=
Subject key identifier: 25:11:BC:9C:B5:D0:28:00:34:C0:EC:93:3F:C9:C5:91:1E:16:1D:9E
Authority key identifier: AE:EA:A0:96:EB:B3:76:57:E4:D3:AD:21:76:64:11:72:D6:E2:02:BC
Certificate issuer: /CN=aeeaa096ebb37657e4d3ad2176641172d6e202bc
Certificate serial: 019D992B5D7DBC68EF1596A9C6372915E732
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft
Manifest number: 0D5A
Signing time: Fri 17 Apr 2026 02:00:49 +0000
Manifest this update: Fri 17 Apr 2026 02:00:49 +0000
Manifest next update: Sat 18 Apr 2026 02:00:49 +0000
Files and hashes: 1: akW7_4B1c1-TUlyABJDZZ5C9MTs.roa (hash: R6h75h04kvMzsvpJpfqerZYqo36Vm9P1L15UtjUMqOQ=)
2: ruqgluuzdlfk060hdmQRctbiArw.crl (hash: Bp7l1y5n3D+QU9rfmsCP3rvFXO+p6zEqJUUYo4eIwVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:5d:7d:bc:68:ef:15:96:a9:c6:37:29:15:e7:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeeaa096ebb37657e4d3ad2176641172d6e202bc
Validity
Not Before: Apr 17 02:00:49 2026 GMT
Not After : Apr 18 02:00:49 2026 GMT
Subject: CN=2511bc9cb5d0280034c0ec933fc9c5911e161d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ce:7d:ee:93:1b:51:0f:5a:aa:81:33:42:27:
f9:68:51:67:9c:1e:b8:c4:9e:d8:bb:e9:72:c8:38:
a5:6c:4b:b8:e8:61:18:09:c1:02:ad:f7:2a:45:08:
2d:51:39:35:f6:45:5d:5b:6f:a0:68:8c:ba:6b:66:
79:eb:83:1f:98:34:77:7a:7d:b8:cf:91:fb:56:50:
fd:93:18:ee:32:e2:17:35:95:dc:13:a8:b7:16:e6:
cb:3a:73:26:02:fd:bd:93:94:94:96:d2:03:78:de:
3b:6c:c7:dd:f9:75:fb:9c:bb:73:ca:ac:05:45:45:
cd:59:19:a6:3d:78:51:35:79:78:af:16:8b:15:1d:
a0:c8:79:11:3d:f5:87:fa:01:ca:e2:59:66:8c:99:
34:7e:8b:44:e5:6e:12:0d:d0:f4:89:2b:dd:e7:87:
50:4f:5c:bb:9a:7f:b7:7a:c8:13:ba:1e:40:fa:98:
51:b3:7a:eb:db:39:4b:9c:70:18:3c:8e:c4:fd:45:
ea:6c:97:cf:5c:98:da:4f:c8:df:85:09:f0:cb:4e:
b8:6a:4d:85:ad:88:f9:f5:32:6f:a7:c0:28:48:d9:
d4:d9:2e:93:29:f5:42:c0:0b:3f:0a:26:50:cf:77:
5a:42:9e:64:6a:97:42:1f:56:0c:d9:a2:e3:6c:5a:
53:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:11:BC:9C:B5:D0:28:00:34:C0:EC:93:3F:C9:C5:91:1E:16:1D:9E
X509v3 Authority Key Identifier:
keyid:AE:EA:A0:96:EB:B3:76:57:E4:D3:AD:21:76:64:11:72:D6:E2:02:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:e9:9c:f2:14:d8:2a:bc:9d:b4:3b:05:8b:f9:18:c7:58:30:
64:fd:21:b6:c2:ad:1c:e5:ed:dd:94:0b:2a:4b:da:88:62:90:
03:c5:78:0b:28:9c:04:8e:25:f2:5a:44:f5:ef:ff:ed:1f:17:
09:cc:ce:02:e4:d5:97:69:b4:3d:fd:f4:0c:2a:1f:41:a4:d2:
11:f0:15:06:e9:69:c2:16:7c:24:82:b5:bd:71:20:89:22:41:
fd:75:f9:c7:b5:42:4b:10:61:37:f9:10:32:6b:a1:e1:b3:5b:
fa:1f:46:05:0e:00:97:ac:20:07:33:87:56:73:49:84:33:53:
f1:ba:e0:79:64:04:3b:d9:78:27:64:42:cd:39:59:05:4e:57:
8b:e5:35:de:ee:38:bd:5f:39:e3:1b:85:9d:47:a8:83:77:52:
e7:ff:c0:6a:b4:0c:eb:cd:ba:b0:5c:ac:ee:5d:70:87:69:8b:
e5:a0:f2:02:7c:3d:45:1d:f0:9c:cd:cb:4c:87:11:83:72:43:
cc:b4:23:63:89:94:b7:a7:a2:18:52:a2:2a:1d:85:86:78:9f:
b5:65:48:f0:e9:6c:39:32:ef:1a:c3:c3:2a:02:c0:e7:fb:2c:
9d:68:c4:09:f3:49:b4:ad:b9:72:3f:77:3a:39:a1:0c:d2:67:
e6:d0:48:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:55:06 2026 by rpki-client