Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft
File: ruqgluuzdlfk060hdmQRctbiArw.mft (raw, json)
Hash identifier: stQg37xR48lQrHXmS9Ih7LvBJiF1zzgB382RmW0p5zw=
Subject key identifier: 2E:7A:1F:57:4D:D3:A2:98:A8:9B:C9:3E:F6:72:95:B3:57:AD:D9:70
Authority key identifier: AE:EA:A0:96:EB:B3:76:57:E4:D3:AD:21:76:64:11:72:D6:E2:02:BC
Certificate issuer: /CN=aeeaa096ebb37657e4d3ad2176641172d6e202bc
Certificate serial: 01A0DB721AAF82E4AF6D65B2CE2A3B08FA94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft
Manifest number: 0F0A
Signing time: Sat 26 Sep 2026 02:01:23 +0000
Manifest this update: Sat 26 Sep 2026 02:01:23 +0000
Manifest next update: Sun 27 Sep 2026 02:01:23 +0000
Files and hashes: 1: akW7_4B1c1-TUlyABJDZZ5C9MTs.roa (hash: R6h75h04kvMzsvpJpfqerZYqo36Vm9P1L15UtjUMqOQ=)
2: ruqgluuzdlfk060hdmQRctbiArw.crl (hash: wrLpV4CMxUFaaFwdXuGM9QF5ko42x9e8y3hNAkkPYQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:72:1a:af:82:e4:af:6d:65:b2:ce:2a:3b:08:fa:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeeaa096ebb37657e4d3ad2176641172d6e202bc
Validity
Not Before: Sep 26 02:01:23 2026 GMT
Not After : Sep 27 02:01:23 2026 GMT
Subject: CN=2e7a1f574dd3a298a89bc93ef67295b357add970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c8:8e:40:12:ab:bd:70:0b:7d:a3:08:3f:f1:
07:13:04:70:82:ad:46:c4:e0:db:64:2b:c1:08:ba:
83:6a:83:ff:f0:cf:47:07:94:05:8a:f1:2a:20:83:
10:b1:b4:06:fe:44:5b:b3:91:0d:a9:42:11:4f:3d:
ac:e0:d1:1f:f9:06:6a:5f:d6:a6:0b:cb:b1:48:30:
37:7a:87:fd:d0:85:46:09:f7:10:ba:4a:5c:ed:31:
8b:ba:f2:f5:84:4f:5c:1d:79:74:06:eb:16:cb:04:
d7:a1:45:29:f6:f9:eb:da:19:bc:1f:36:39:15:47:
db:45:35:9f:13:4f:8c:f2:5c:a3:a1:77:27:dd:58:
4a:a7:90:f3:06:43:7b:7b:95:b6:c2:45:11:c0:08:
8f:a7:d5:ca:ca:e7:72:c4:53:08:74:57:a2:93:13:
5a:8d:6c:30:d7:7d:4c:b0:a1:89:ae:c8:e5:52:ad:
e9:56:de:71:04:de:47:98:75:f3:17:a5:52:91:83:
82:ed:f5:ae:7c:ae:4b:6a:ca:b9:1e:92:fd:b6:45:
dc:a2:d0:75:60:60:ec:ad:d2:b6:39:c6:2a:03:70:
09:64:5c:06:29:ef:76:83:f5:31:92:72:ad:ae:33:
3b:ba:03:7b:07:35:75:42:b7:08:8d:ba:b8:03:7b:
84:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:7A:1F:57:4D:D3:A2:98:A8:9B:C9:3E:F6:72:95:B3:57:AD:D9:70
X509v3 Authority Key Identifier:
keyid:AE:EA:A0:96:EB:B3:76:57:E4:D3:AD:21:76:64:11:72:D6:E2:02:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:58:68:ec:b2:02:22:83:e9:13:3b:27:35:e6:9c:8e:58:28:
63:ac:30:87:19:c8:3f:72:dc:f3:24:65:63:8a:4e:a7:1e:29:
6a:0d:24:0a:bd:8d:ce:37:76:19:47:fd:20:10:4f:d4:29:54:
92:1e:cf:6b:ab:e9:2c:c2:09:46:20:e9:c3:f7:e1:2c:90:f3:
e9:da:e1:56:0e:51:08:82:0d:26:5d:48:71:46:27:b1:75:e4:
95:65:d4:91:b1:5c:a1:cc:fc:55:0b:a0:da:7b:ec:2c:8f:42:
3e:78:1d:3c:8f:f9:08:ed:b8:d0:26:3c:29:41:b4:5a:27:64:
84:b2:b3:75:fe:c3:dd:b4:66:b7:1e:46:83:39:2a:d8:3f:30:
b7:2c:0f:ad:21:72:ad:7c:5e:3d:5e:2d:85:d9:c5:e6:fb:dc:
e2:b9:57:95:98:ce:7e:5d:77:47:02:1e:4a:21:ca:da:91:09:
b9:2d:75:d2:6f:aa:2b:00:01:27:3b:41:90:82:b0:dd:68:51:
a0:06:4f:74:7b:15:93:c5:16:29:63:78:da:fb:1d:6c:2f:5a:
65:ac:33:a9:b9:cd:c4:c1:9c:14:81:7a:c7:48:f6:5e:44:b0:
b3:83:b4:f8:d9:ef:52:16:77:d3:62:22:cc:d9:f5:7d:d0:24:
0e:e8:3e:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDbchqvguSvbWWyzio7CPqUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZWFhMDk2ZWJiMzc2NTdlNGQzYWQyMTc2NjQxMTcyZDZl
MjAyYmMwHhcNMjYwOTI2MDIwMTIzWhcNMjYwOTI3MDIwMTIzWjAzMTEwLwYDVQQD
EygyZTdhMWY1NzRkZDNhMjk4YTg5YmM5M2VmNjcyOTViMzU3YWRkOTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8iOQBKrvXALfaMIP/EHEwRwgq1G
xODbZCvBCLqDaoP/8M9HB5QFivEqIIMQsbQG/kRbs5ENqUIRTz2s4NEf+QZqX9am
C8uxSDA3eof90IVGCfcQukpc7TGLuvL1hE9cHXl0BusWywTXoUUp9vnr2hm8HzY5
FUfbRTWfE0+M8lyjoXcn3VhKp5DzBkN7e5W2wkURwAiPp9XKyudyxFMIdFeikxNa
jWww131MsKGJrsjlUq3pVt5xBN5HmHXzF6VSkYOC7fWufK5Lasq5HpL9tkXcotB1
YGDsrdK2OcYqA3AJZFwGKe92g/UxknKtrjM7ugN7BzV1QrcIjbq4A3uEKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC56H1dN06KYqJvJPvZylbNXrdlwMB8GA1UdIwQY
MBaAFK7qoJbrs3ZX5NOtIXZkEXLW4gK8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnVxZ2x1dXpkbGZrMDYwaGRtUVJjdGJpQXJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9iZWNmNDgtMDM1YS00NDcxLWJkZjMt
ZmZkNWJmNTk2OWRmLzEvcnVxZ2x1dXpkbGZrMDYwaGRtUVJjdGJpQXJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9iZWNmNDgtMDM1YS00NDcxLWJkZjMtZmZkNWJmNTk2OWRm
LzEvcnVxZ2x1dXpkbGZrMDYwaGRtUVJjdGJpQXJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASVho7LIC
IoPpEzsnNeacjlgoY6wwhxnIP3Lc8yRlY4pOpx4pag0kCr2Nzjd2GUf9IBBP1ClU
kh7Pa6vpLMIJRiDpw/fhLJDz6drhVg5RCIINJl1IcUYnsXXklWXUkbFcocz8VQug
2nvsLI9CPngdPI/5CO240CY8KUG0WidkhLKzdf7D3bRmtx5Ggzkq2D8wtywPrSFy
rXxePV4thdnF5vvc4rlXlZjOfl13RwIeSiHK2pEJuS110m+qKwABJztBkIKw3WhR
oAZPdHsVk8UWKWN42vsdbC9aZawzqbnNxMGcFIF6x0j2XkSws4O0+NnvUhZ302Ii
zNn1fdAkDug+OA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 06:43:33 2026 by rpki-client