Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft
File: ruqgluuzdlfk060hdmQRctbiArw.mft (raw, json)
Hash identifier: 4QqyOMoCBpwefu+5seS+CokwbHUSzvKvLWC6TZS3N0E=
Subject key identifier: 81:21:F3:DD:0B:BF:91:78:F8:84:78:64:26:17:C0:9E:A2:AA:60:5C
Authority key identifier: AE:EA:A0:96:EB:B3:76:57:E4:D3:AD:21:76:64:11:72:D6:E2:02:BC
Certificate issuer: /CN=aeeaa096ebb37657e4d3ad2176641172d6e202bc
Certificate serial: 019F9323AE92CCB3304D7754BBA74B615554
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft
Manifest number: 0E60
Signing time: Fri 24 Jul 2026 08:00:16 +0000
Manifest this update: Fri 24 Jul 2026 08:00:16 +0000
Manifest next update: Sat 25 Jul 2026 08:00:16 +0000
Files and hashes: 1: akW7_4B1c1-TUlyABJDZZ5C9MTs.roa (hash: R6h75h04kvMzsvpJpfqerZYqo36Vm9P1L15UtjUMqOQ=)
2: ruqgluuzdlfk060hdmQRctbiArw.crl (hash: wGO0Qu4sVo0qdISu9pRs9f0Urs/o7F1iyeXoBSEtVfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:ae:92:cc:b3:30:4d:77:54:bb:a7:4b:61:55:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeeaa096ebb37657e4d3ad2176641172d6e202bc
Validity
Not Before: Jul 24 08:00:16 2026 GMT
Not After : Jul 25 08:00:16 2026 GMT
Subject: CN=8121f3dd0bbf9178f88478642617c09ea2aa605c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f0:03:c7:b0:cb:bc:b0:97:7b:84:9f:9b:79:
fc:86:f0:f4:ba:99:08:f1:1b:a0:01:fc:24:4e:c7:
a3:53:0f:5f:ae:31:ab:70:4f:c1:84:cc:07:d3:c7:
04:de:1e:9e:6f:18:aa:6d:6f:42:39:f3:5f:8c:16:
61:7a:27:93:83:3f:09:56:b1:bd:0d:9d:c5:4e:b8:
44:65:c7:45:6a:71:13:b7:44:82:63:a2:e4:fc:22:
0d:43:61:fd:fd:da:b0:72:27:53:b1:1a:79:2a:2e:
62:6c:2b:72:41:79:ca:76:ef:ff:16:ee:40:1e:f5:
36:50:b7:ca:6b:6a:84:4d:70:fd:22:e7:37:10:f6:
16:d5:a1:96:e3:d5:03:33:17:05:e0:51:1c:62:e3:
d3:1f:0d:09:25:5e:36:90:04:61:df:36:f2:7e:f1:
68:22:25:36:6f:50:94:b2:14:7d:75:78:80:fc:cb:
86:f9:06:3c:38:7d:39:3f:dd:44:f9:c2:dd:44:0c:
e3:89:cd:bf:eb:78:5e:3c:ba:fe:c4:7e:b9:b3:d2:
97:f4:93:ba:ee:b5:e1:c0:c1:eb:fa:a1:58:49:6c:
b7:be:c5:d2:70:b7:fd:27:d5:7f:e6:be:fe:e3:1d:
ce:0f:c6:87:91:5b:9f:21:c4:58:1d:55:75:cc:8d:
7b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:21:F3:DD:0B:BF:91:78:F8:84:78:64:26:17:C0:9E:A2:AA:60:5C
X509v3 Authority Key Identifier:
keyid:AE:EA:A0:96:EB:B3:76:57:E4:D3:AD:21:76:64:11:72:D6:E2:02:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:9f:83:b7:58:09:56:54:87:00:c7:f0:b2:22:07:ec:17:46:
c8:d3:1a:68:c6:40:41:40:da:43:90:cc:ae:3b:ca:c9:d4:3a:
70:06:97:cb:d1:65:07:21:28:48:3e:22:de:f4:2f:8e:84:16:
03:7a:9e:d7:32:c1:ea:e7:ae:a5:ce:34:8e:96:e5:8f:4c:ec:
a9:1b:31:56:53:97:d7:a7:24:d1:53:c5:50:3e:c4:18:4e:b2:
17:27:ce:c5:6a:1a:fa:63:e0:50:df:97:33:f4:1c:2b:fa:03:
c5:56:88:9e:f2:41:b6:f2:ab:c6:8a:6f:ab:be:33:d5:5d:96:
40:c8:8f:d8:8e:5b:66:19:f8:08:79:58:63:13:94:e4:c8:4f:
1a:0c:36:c9:a6:8f:25:e0:19:db:05:45:0a:32:9d:7c:75:8b:
1d:32:c5:c4:fc:ae:96:b7:42:83:90:a7:1e:af:04:37:e5:d4:
4a:7b:2e:b2:63:9a:cd:3e:b6:ea:19:75:13:51:c3:23:00:a7:
da:1d:d0:1b:76:a5:9b:56:c3:89:2f:1c:6c:d3:53:f8:a2:0f:
32:cc:e2:43:20:10:8a:7a:c5:00:83:5f:49:64:4f:30:24:13:
76:38:31:91:2c:0d:f2:31:cf:c3:42:c3:0c:db:e0:76:27:a4:
09:f4:05:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:56:06 2026 by rpki-client