Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/586ab9-1a81-4284-b4b2-cd8b0c4be215/1/rqruHwkj4UojcfJAVA_dIVSbFKY.mft
File: rqruHwkj4UojcfJAVA_dIVSbFKY.mft (raw, json)
Hash identifier: oyUH1cUCKCVbiQ/LwhTf6FOk7af7Z00AwozIdAF/kRU=
Subject key identifier: 7F:80:14:BB:3D:74:55:49:EE:33:AA:85:B6:91:48:89:A7:E4:71:15
Authority key identifier: AE:AA:EE:1F:09:23:E1:4A:23:71:F2:40:54:0F:DD:21:54:9B:14:A6
Certificate issuer: /CN=aeaaee1f0923e14a2371f240540fdd21549b14a6
Certificate serial: 019CAD2266CAF088BD5C4513A7D619ED41CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqruHwkj4UojcfJAVA_dIVSbFKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/586ab9-1a81-4284-b4b2-cd8b0c4be215/1/rqruHwkj4UojcfJAVA_dIVSbFKY.mft
Manifest number: 1242
Signing time: Mon 02 Mar 2026 06:00:38 +0000
Manifest this update: Mon 02 Mar 2026 06:00:38 +0000
Manifest next update: Tue 03 Mar 2026 06:00:38 +0000
Files and hashes: 1: Va5PFVKFz5Nrg0yfNdSqedb7WDw.roa (hash: 66ee+t/p3zGbEnNTHp82R1N/6fSrqH9fWptNZQjoSm0=)
2: rqruHwkj4UojcfJAVA_dIVSbFKY.crl (hash: 84A8K1gE/Cjb/IaS1kiGyKssbfxr8R7X4o1YROuaJak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/586ab9-1a81-4284-b4b2-cd8b0c4be215/1/rqruHwkj4UojcfJAVA_dIVSbFKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/586ab9-1a81-4284-b4b2-cd8b0c4be215/1/rqruHwkj4UojcfJAVA_dIVSbFKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rqruHwkj4UojcfJAVA_dIVSbFKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:66:ca:f0:88:bd:5c:45:13:a7:d6:19:ed:41:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeaaee1f0923e14a2371f240540fdd21549b14a6
Validity
Not Before: Mar 2 06:00:38 2026 GMT
Not After : Mar 3 06:00:38 2026 GMT
Subject: CN=7f8014bb3d745549ee33aa85b6914889a7e47115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:92:a1:2b:60:fa:77:1e:60:4b:27:f5:36:3e:
1c:74:44:49:e3:a7:89:84:af:07:ce:41:7a:e2:2f:
23:f3:ce:8f:93:9a:aa:b8:c1:67:44:cd:51:9f:18:
bc:e2:0c:23:cf:6a:b7:32:01:59:2c:c5:06:ab:e4:
5f:20:e8:43:67:f8:06:fd:2b:92:34:4d:42:ba:11:
a6:82:dd:1e:5d:e1:12:9d:4a:90:f4:8d:95:c9:8d:
4c:7c:f6:e1:e6:47:4c:b5:55:fc:cb:9f:59:82:9f:
a7:a2:6b:be:95:83:f9:cc:66:f2:6f:66:8a:3c:28:
17:dd:90:61:02:76:c7:ec:3f:b0:7b:49:2c:8a:f3:
6e:dc:2f:62:c3:9a:fc:67:cb:a9:9b:aa:0a:de:49:
65:c9:e7:cf:c0:97:3b:39:f0:e4:34:f8:47:30:1c:
59:de:f2:bd:dc:94:c5:ff:0f:48:6c:97:cd:1c:e4:
80:9a:56:00:4e:9f:33:4c:c9:d3:59:97:0b:08:f7:
7e:b5:6c:74:83:2b:01:ae:46:08:b4:65:ae:6f:06:
b9:b4:97:bb:be:4e:84:24:93:53:90:f1:b1:99:79:
9f:f5:a0:c4:1e:b9:81:71:67:ae:30:a5:32:5a:76:
56:75:51:6f:f7:76:eb:c1:58:cb:87:7e:dd:8b:5e:
c0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:80:14:BB:3D:74:55:49:EE:33:AA:85:B6:91:48:89:A7:E4:71:15
X509v3 Authority Key Identifier:
keyid:AE:AA:EE:1F:09:23:E1:4A:23:71:F2:40:54:0F:DD:21:54:9B:14:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqruHwkj4UojcfJAVA_dIVSbFKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/586ab9-1a81-4284-b4b2-cd8b0c4be215/1/rqruHwkj4UojcfJAVA_dIVSbFKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/586ab9-1a81-4284-b4b2-cd8b0c4be215/1/rqruHwkj4UojcfJAVA_dIVSbFKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:11:05:0a:a7:e9:3d:b8:09:c8:b1:00:93:31:97:5a:91:5e:
d1:be:6b:10:ed:71:64:7a:c3:75:7e:71:49:ff:19:62:ff:c0:
78:86:c7:eb:8b:27:9e:b3:45:dd:b6:cc:48:e3:32:0a:9b:b5:
c0:18:b8:c2:ff:ac:88:7f:57:22:d0:79:0d:e9:41:02:ab:81:
af:36:65:e8:79:97:31:b3:89:ab:d7:0c:b0:98:07:7c:02:64:
dd:12:e7:09:ff:90:c7:18:b9:50:40:70:75:cb:16:ff:38:67:
ec:a1:cd:1c:20:34:c4:f0:2d:fd:3c:ca:e9:9a:69:9e:b3:ac:
dd:d9:ed:21:c3:1d:b8:c4:d0:7d:24:64:81:22:ca:7f:9b:49:
3b:07:fd:aa:a4:e8:16:16:87:5e:88:ac:30:77:8e:b9:0e:19:
aa:79:a3:68:db:f2:24:c1:0c:b9:d2:27:e5:20:2b:d4:8e:01:
3a:22:76:a4:fb:04:c0:22:d4:d2:ed:bc:a3:0b:68:75:17:1f:
49:c0:c5:88:41:00:1d:82:e0:7e:a8:4c:13:da:c4:c5:ba:62:
f3:cc:97:c5:3e:3e:b7:3e:3e:be:f4:e2:52:90:8a:23:53:2b:
a1:ce:87:a7:e5:fe:ae:ce:85:bf:6a:6d:66:c7:69:5c:5b:f5:
7e:d1:f1:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:20:13 2026 by rpki-client