Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft
File: ruqgluuzdlfk060hdmQRctbiArw.mft (raw, json)
Hash identifier: NU2R+u4mm5FIsjKmW+AJ6Or3kRHuQyGOGwhe4IcNmKs=
Subject key identifier: CA:07:2A:85:58:86:F4:B4:4A:51:28:C5:8F:D9:FC:59:9A:FE:F7:0F
Authority key identifier: AE:EA:A0:96:EB:B3:76:57:E4:D3:AD:21:76:64:11:72:D6:E2:02:BC
Certificate issuer: /CN=aeeaa096ebb37657e4d3ad2176641172d6e202bc
Certificate serial: 019CABA255711A406B0CB13CCCBDB1A3EFFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft
Manifest number: 0CDF
Signing time: Sun 01 Mar 2026 23:01:08 +0000
Manifest this update: Sun 01 Mar 2026 23:01:08 +0000
Manifest next update: Mon 02 Mar 2026 23:01:08 +0000
Files and hashes: 1: akW7_4B1c1-TUlyABJDZZ5C9MTs.roa (hash: R6h75h04kvMzsvpJpfqerZYqo36Vm9P1L15UtjUMqOQ=)
2: ruqgluuzdlfk060hdmQRctbiArw.crl (hash: MffgxzfHqdgF7xX0p5uK/bwKPM5WXXBkY4i8oUIFoLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:55:71:1a:40:6b:0c:b1:3c:cc:bd:b1:a3:ef:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeeaa096ebb37657e4d3ad2176641172d6e202bc
Validity
Not Before: Mar 1 23:01:08 2026 GMT
Not After : Mar 2 23:01:08 2026 GMT
Subject: CN=ca072a855886f4b44a5128c58fd9fc599afef70f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:33:85:af:e1:c5:27:1c:e1:e5:30:a2:c0:23:
16:54:d2:c6:a0:72:5a:97:10:05:57:d5:c0:d9:e4:
34:e2:65:74:e7:a9:e4:42:4b:d9:d1:c0:ab:0c:a8:
28:60:25:0b:da:56:b1:db:e9:b5:79:1b:ad:b2:98:
a3:48:22:b3:2d:ff:4d:e1:36:a2:d9:d1:bc:d1:5b:
89:0e:4c:78:af:21:06:7b:65:61:cf:c0:d6:3c:c7:
f7:8b:26:66:46:64:f1:13:11:e5:ad:87:08:50:66:
45:eb:55:b7:a0:52:62:f8:7b:ce:8e:4e:a1:bf:f0:
67:ee:91:b2:19:a6:07:5e:5f:28:29:6b:bd:2a:3c:
b6:16:ee:01:26:ae:4f:82:ca:c2:2a:0a:ba:7c:cc:
34:b7:ae:61:9e:6c:43:6c:d4:98:a3:3a:cc:74:27:
06:8b:57:7e:0e:ca:09:a1:f3:5a:87:df:8e:5f:8a:
21:d8:e8:4b:3c:f2:d8:2c:b5:50:d2:98:48:3e:51:
a0:3e:78:56:26:04:14:de:48:30:0c:66:5d:84:b0:
aa:12:d6:4a:07:92:40:e6:fb:83:e5:c0:37:9b:27:
5f:73:bb:12:92:ed:25:14:5c:fb:c4:c7:72:30:ef:
dc:ab:a0:79:7e:89:71:b4:20:b0:d8:bf:0d:4a:ea:
9a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:07:2A:85:58:86:F4:B4:4A:51:28:C5:8F:D9:FC:59:9A:FE:F7:0F
X509v3 Authority Key Identifier:
keyid:AE:EA:A0:96:EB:B3:76:57:E4:D3:AD:21:76:64:11:72:D6:E2:02:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:6b:87:c4:79:4a:d7:b7:41:0c:d8:82:aa:df:67:2f:3f:6b:
0c:e1:12:d1:14:98:d8:70:d6:24:8b:35:20:cc:27:9a:56:26:
c0:d2:78:83:c9:e5:8f:2f:5f:c8:b4:d5:cf:e5:75:af:ba:80:
bd:2a:5b:9c:44:c2:c8:e9:c5:31:ed:4c:27:55:0a:74:a3:86:
b5:b5:c3:62:39:16:b1:60:d8:e6:38:8d:e9:b1:6e:72:58:9c:
cf:1b:20:1f:6d:0e:81:eb:ea:c7:bb:eb:ae:e8:d3:28:44:c1:
4c:e1:b4:38:5f:40:c9:2f:34:3e:f4:05:01:b9:a2:78:8f:b1:
1a:9d:e9:d4:bd:fb:53:69:e8:78:c4:ba:b6:7b:79:7e:4e:98:
15:89:fe:d8:6b:37:ca:68:32:f7:c4:25:11:99:fd:78:5a:27:
b1:c6:c6:a8:d6:60:87:36:6b:58:e3:dc:93:b9:ce:9f:70:b7:
81:39:3d:1f:6c:1d:00:d5:2b:4c:f4:dd:ab:a6:19:98:46:9a:
88:90:7c:b9:92:fe:b6:3c:98:42:72:8f:7c:4e:88:e0:d2:b3:
ad:37:a4:f4:d7:e6:ed:e2:48:9f:5d:9d:64:e5:27:aa:68:e7:
73:df:18:5b:6a:44:45:be:15:af:34:3c:1d:74:42:db:02:e7:
21:87:14:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:43:57 2026 by rpki-client