Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.mft
File: Aleh_L8udaLhA0ynSg6XJiO7xJw.mft (raw, json)
Hash identifier: MG454BIVM9mZPlkS0qFBjuzou+/hhs+DPQiQoXRZaKA=
Subject key identifier: 6A:31:E9:86:EB:63:2F:1F:5C:EF:54:5D:8B:1D:52:EA:D2:D8:14:1F
Authority key identifier: 02:57:A1:FC:BF:2E:75:A2:E1:03:4C:A7:4A:0E:97:26:23:BB:C4:9C
Certificate issuer: /CN=0257a1fcbf2e75a2e1034ca74a0e972623bbc49c
Certificate serial: 019D382E21A4427DAF417D76D32999A1FFD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aleh_L8udaLhA0ynSg6XJiO7xJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.mft
Manifest number: 05F2
Signing time: Sun 29 Mar 2026 06:00:40 +0000
Manifest this update: Sun 29 Mar 2026 06:00:40 +0000
Manifest next update: Mon 30 Mar 2026 06:00:40 +0000
Files and hashes: 1: 3k8uMArcbuH0UIfZHpHCCKPnq1c.roa (hash: a4hOTjhskjL4zmX9D1orSF+CFPWqkttgVH56kvVyr7A=)
2: Aleh_L8udaLhA0ynSg6XJiO7xJw.crl (hash: t5HZDwRlHTOc7s/MUsSWJRHko2eTqpbOHGHknmZJG5Q=)
3: brdL3w5Iu4wZbQWBCkYZz0EI-JE.asa (hash: 1CG14PRb7ITkoZJg94EyHs3qFktZ2P66/X1jQUXJkqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aleh_L8udaLhA0ynSg6XJiO7xJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:21:a4:42:7d:af:41:7d:76:d3:29:99:a1:ff:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0257a1fcbf2e75a2e1034ca74a0e972623bbc49c
Validity
Not Before: Mar 29 06:00:40 2026 GMT
Not After : Mar 30 06:00:40 2026 GMT
Subject: CN=6a31e986eb632f1f5cef545d8b1d52ead2d8141f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:41:f2:3d:9e:ad:f2:4f:d0:66:4f:ef:56:36:
4d:65:e6:a4:71:d9:13:8d:fc:c5:64:21:63:7f:f2:
06:e3:c6:58:fc:df:ba:c1:eb:e9:a6:03:82:9b:e1:
3f:17:c3:20:3a:3c:2a:45:a7:9e:78:89:ae:b9:16:
32:5e:57:f6:c5:ae:40:d7:b2:20:78:d6:11:d0:91:
81:44:c7:55:b6:4d:f1:5c:40:19:99:85:ae:b3:fa:
3f:cb:b2:d8:b8:22:7b:27:63:6e:bf:dd:92:49:59:
9c:be:70:30:54:da:68:c3:34:67:c8:48:b9:06:b2:
ec:fa:d4:25:da:56:61:3a:58:7e:e3:71:9f:c4:58:
f9:9f:65:f7:84:d1:2a:d3:59:44:f4:ca:b7:71:1b:
9b:33:b8:64:b0:cb:9a:06:ab:72:2f:42:ef:14:c9:
78:14:cb:82:f8:d2:4d:20:10:09:98:63:65:80:49:
8d:dc:7b:5b:3f:d6:1c:81:f1:e7:25:84:6f:a1:54:
4b:d6:78:17:0b:9c:c6:06:2d:1b:5c:b8:1c:8b:bc:
1c:73:9b:b9:ad:59:57:c6:2a:ae:3f:88:0c:5f:9f:
68:97:fa:d3:6c:d5:e7:45:74:f7:81:82:ea:d7:b9:
fb:62:a2:f3:84:28:06:c4:86:40:c1:55:e5:b4:43:
aa:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:31:E9:86:EB:63:2F:1F:5C:EF:54:5D:8B:1D:52:EA:D2:D8:14:1F
X509v3 Authority Key Identifier:
keyid:02:57:A1:FC:BF:2E:75:A2:E1:03:4C:A7:4A:0E:97:26:23:BB:C4:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aleh_L8udaLhA0ynSg6XJiO7xJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:2e:71:c2:01:89:f5:a1:1d:56:f5:11:e9:d1:55:a7:17:c1:
ed:1a:b9:46:51:a9:08:63:94:9e:76:39:01:d8:ff:9e:47:14:
06:b4:75:e7:d7:25:25:8f:65:43:15:95:64:86:da:17:64:71:
4e:69:f3:9d:e6:9b:78:8b:c3:08:a3:ea:17:f8:31:a3:05:5a:
11:79:46:74:ed:81:53:0b:fb:59:c1:07:0b:0d:95:a4:bc:37:
d0:86:5f:0b:57:8f:fd:8b:3f:69:12:05:e8:bb:f6:3d:dd:8b:
f3:65:19:be:1d:28:6f:5b:81:11:1d:df:70:95:b5:02:a5:c2:
16:7d:86:53:44:74:00:7c:c4:c0:24:b6:25:9f:63:37:a3:95:
d4:46:7a:7f:78:24:cb:10:01:cf:85:f1:09:81:ec:60:45:b7:
52:1b:b4:30:d2:2e:12:e4:c0:6c:13:98:b0:30:35:52:ef:3a:
ec:1e:a7:4b:68:9d:9f:e0:05:67:49:fa:d3:07:c2:07:fc:e7:
a4:be:bf:b3:dd:93:68:8c:d3:c2:c4:43:62:95:59:a5:13:28:
9b:22:9f:ed:09:3a:09:f6:cd:c7:d5:7a:3e:a4:29:6a:df:25:
f3:cd:73:cb:6c:7f:4d:a8:22:5a:5f:19:8b:ee:8c:cc:2d:ea:
fc:43:38:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:59 2026 by rpki-client