Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/586ab9-1a81-4284-b4b2-cd8b0c4be215/1/rqruHwkj4UojcfJAVA_dIVSbFKY.mft
File: rqruHwkj4UojcfJAVA_dIVSbFKY.mft (raw, json)
Hash identifier: MmvgKhSj5ZJBE21skliF2/vrs4XyYcJWRtDZu7c84oY=
Subject key identifier: 9D:E8:17:FF:7E:45:A1:0E:DB:7E:6F:57:E4:FC:07:25:BD:D3:73:F0
Authority key identifier: AE:AA:EE:1F:09:23:E1:4A:23:71:F2:40:54:0F:DD:21:54:9B:14:A6
Certificate issuer: /CN=aeaaee1f0923e14a2371f240540fdd21549b14a6
Certificate serial: 019D26CD205A8B68C144BB13C82111CC6D53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqruHwkj4UojcfJAVA_dIVSbFKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/586ab9-1a81-4284-b4b2-cd8b0c4be215/1/rqruHwkj4UojcfJAVA_dIVSbFKY.mft
Manifest number: 1281
Signing time: Wed 25 Mar 2026 21:01:10 +0000
Manifest this update: Wed 25 Mar 2026 21:01:10 +0000
Manifest next update: Thu 26 Mar 2026 21:01:10 +0000
Files and hashes: 1: Va5PFVKFz5Nrg0yfNdSqedb7WDw.roa (hash: 66ee+t/p3zGbEnNTHp82R1N/6fSrqH9fWptNZQjoSm0=)
2: rqruHwkj4UojcfJAVA_dIVSbFKY.crl (hash: Qu53hcWjsDLI17JxlUNoQVgjHjnVHorLbG/+IREFBhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/586ab9-1a81-4284-b4b2-cd8b0c4be215/1/rqruHwkj4UojcfJAVA_dIVSbFKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/586ab9-1a81-4284-b4b2-cd8b0c4be215/1/rqruHwkj4UojcfJAVA_dIVSbFKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rqruHwkj4UojcfJAVA_dIVSbFKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:20:5a:8b:68:c1:44:bb:13:c8:21:11:cc:6d:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeaaee1f0923e14a2371f240540fdd21549b14a6
Validity
Not Before: Mar 25 21:01:10 2026 GMT
Not After : Mar 26 21:01:10 2026 GMT
Subject: CN=9de817ff7e45a10edb7e6f57e4fc0725bdd373f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f0:ef:39:bf:d7:b0:e2:61:ec:5a:46:4c:b7:
21:3a:78:52:d0:0c:6f:5e:77:d8:af:a5:fc:bf:13:
4f:a1:09:d4:4e:23:dd:0d:fc:55:d9:7d:38:7d:4e:
95:a0:59:dd:f0:48:12:ba:c3:23:cc:18:39:4c:e5:
04:8d:5e:b5:4c:cd:f0:c7:61:b4:1f:4e:03:41:f0:
53:5d:00:14:04:53:ee:3a:c9:1d:fd:9c:ea:b2:80:
e2:e3:6b:8a:c7:e3:f2:b9:9e:7d:d9:81:fa:5c:5f:
5d:4b:84:a7:55:41:7d:5b:3f:de:0b:c3:01:f1:7e:
6d:74:f9:b4:39:3a:b3:c9:6a:1d:b1:10:d9:81:22:
d4:e8:aa:4a:ea:d3:d9:06:e1:d8:55:eb:92:67:fd:
9f:2d:90:cb:30:ad:17:9a:2a:b5:b9:eb:e4:20:bc:
b2:b9:c6:c5:c6:82:8f:f4:3b:ba:d9:fd:e4:ba:4a:
90:ad:14:a9:15:5d:8f:5e:22:99:fd:24:3f:fb:d0:
43:7a:0f:82:72:8b:ae:cb:38:aa:d7:16:6c:b7:9c:
96:65:7a:fa:89:44:76:93:7e:cc:c3:b5:76:e8:92:
b8:7a:3d:27:46:66:90:df:9d:da:61:23:30:2c:95:
58:80:cc:d2:65:6f:46:ca:73:eb:69:8b:ac:17:75:
aa:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E8:17:FF:7E:45:A1:0E:DB:7E:6F:57:E4:FC:07:25:BD:D3:73:F0
X509v3 Authority Key Identifier:
keyid:AE:AA:EE:1F:09:23:E1:4A:23:71:F2:40:54:0F:DD:21:54:9B:14:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqruHwkj4UojcfJAVA_dIVSbFKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/586ab9-1a81-4284-b4b2-cd8b0c4be215/1/rqruHwkj4UojcfJAVA_dIVSbFKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/586ab9-1a81-4284-b4b2-cd8b0c4be215/1/rqruHwkj4UojcfJAVA_dIVSbFKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:03:33:45:1f:07:f8:e6:b9:05:6a:ab:4b:b4:de:cc:46:49:
3b:f3:c8:ee:bf:9f:94:fe:be:07:e6:c7:62:cd:0d:3c:d8:cf:
4b:1a:ae:53:70:51:3c:7b:71:8f:95:da:6c:b9:6e:8b:c2:3c:
ab:1f:0e:db:5f:09:63:92:40:c4:37:bb:67:46:35:cf:32:29:
31:9d:65:bf:c5:e3:b2:14:1b:0d:c0:52:b5:64:e1:49:58:4e:
1e:3e:f1:bf:40:3b:4a:ad:b3:0d:38:cc:d6:aa:c5:0c:df:c2:
fe:e3:5f:2f:8e:0f:78:94:00:66:ee:db:b0:09:e5:ad:1b:ae:
9d:3d:f5:a0:c1:de:18:29:19:0e:de:2e:f5:cc:66:d0:c7:33:
03:1c:2a:9d:6d:e0:b8:52:57:03:26:c3:e0:5e:e4:17:71:22:
d7:8a:77:db:06:5d:6c:25:f8:c8:87:34:85:2f:57:26:53:f6:
84:80:da:2b:0f:b6:4a:7a:9d:ee:e7:88:b9:1b:27:19:69:2b:
ad:d8:59:56:b2:7c:90:bb:ab:17:2b:c7:a2:3a:59:ea:9f:e5:
7b:14:a0:91:f7:c1:1a:39:e1:e5:8d:da:99:ef:0a:bd:25:a7:
be:4e:88:26:2e:e7:29:01:27:d1:55:93:24:84:12:dc:97:8e:
4e:76:a2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:44:08 2026 by rpki-client