Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
File: aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft (raw, json)
Hash identifier: RrKq6Km1EdDeNSpxk7nJK5E11B/3JiDcLP8ptIZEj6E=
Subject key identifier: D6:53:8B:39:52:BF:63:5F:21:94:79:58:87:7A:E0:79:F3:F9:3B:3A
Authority key identifier: 68:BD:10:F1:B1:4B:BB:27:67:FF:DC:AE:C4:B4:17:28:80:BA:46:1A
Certificate issuer: /CN=68bd10f1b14bbb2767ffdcaec4b4172880ba461a
Certificate serial: 019F13415E1FBB0F96ACDB339144F6182FE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
Manifest number: 0EB0
Signing time: Mon 29 Jun 2026 12:01:18 +0000
Manifest this update: Mon 29 Jun 2026 12:01:18 +0000
Manifest next update: Tue 30 Jun 2026 12:01:18 +0000
Files and hashes: 1: S04NKU0J13eA6-TGQ2BZfun47ys.roa (hash: xIlFQJwTJx7ez8Zx99ToD2cR7A/Ipyz0mMaGV2drzPQ=)
2: aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl (hash: MwGLAY+eDyvt0A2zU9kSN/bq/JPi2Vz3jDcivpJ3uQs=)
3: rJKcaNGOpOiZ0iciVQt-oX04cPI.roa (hash: BT7ocoNehLiRKdELBQmLzdxfWaOUS/P7hDDrN7lDDSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 12:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:41:5e:1f:bb:0f:96:ac:db:33:91:44:f6:18:2f:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68bd10f1b14bbb2767ffdcaec4b4172880ba461a
Validity
Not Before: Jun 29 12:01:18 2026 GMT
Not After : Jun 30 12:01:18 2026 GMT
Subject: CN=d6538b3952bf635f21947958877ae079f3f93b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d2:19:30:a3:c7:c0:83:99:a2:e1:2d:d0:b3:
90:c0:93:ce:85:d1:ae:02:0b:12:eb:9c:16:db:76:
34:3b:90:99:a8:23:de:aa:61:4a:9e:55:0c:47:a7:
d4:9e:f1:18:36:ad:1c:10:0f:1a:b2:13:cd:67:30:
76:7a:4e:32:a1:a1:8f:07:aa:e0:fd:e2:ba:4d:54:
bc:65:b3:9a:de:41:1a:8c:5e:1c:cf:68:58:d9:3a:
96:2e:8a:6b:5f:d3:e2:f2:73:e9:b7:6e:d6:c9:ba:
e8:55:ad:b0:87:68:13:53:23:b4:e7:f7:21:9e:a0:
38:26:47:a6:7c:84:ee:89:16:d3:09:79:4f:37:fe:
69:0b:94:52:cd:0f:55:d9:ba:51:b9:72:50:b4:5d:
fe:5f:49:5d:ee:41:14:71:6f:c5:b7:65:e5:b9:79:
c3:d6:2f:36:e7:d4:36:5a:ea:ad:f7:1a:3e:3c:31:
89:e7:e9:a6:4d:fe:a4:8a:b1:fe:3c:bf:6c:65:14:
8e:26:f1:21:2c:29:b6:e3:80:28:d9:e3:34:8b:47:
25:1b:0b:4d:3f:98:6d:85:ac:62:06:af:92:07:f6:
b7:84:22:3d:ed:e5:48:dc:76:dd:e7:b8:0d:c2:4c:
e3:0c:0c:00:d7:fd:57:84:55:e7:cd:54:e8:23:b5:
6a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:53:8B:39:52:BF:63:5F:21:94:79:58:87:7A:E0:79:F3:F9:3B:3A
X509v3 Authority Key Identifier:
keyid:68:BD:10:F1:B1:4B:BB:27:67:FF:DC:AE:C4:B4:17:28:80:BA:46:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:59:e5:da:96:dc:25:46:0f:58:a5:ce:bc:c2:ea:21:fb:c8:
0d:5c:87:53:f2:66:2e:a6:7f:13:1e:75:50:0c:75:d2:31:00:
34:cd:74:37:c9:3e:ae:8b:21:61:76:42:d4:a8:2c:bf:e8:f5:
d8:e7:8d:46:ef:99:e7:64:26:ec:13:5d:22:1b:bc:5d:af:7d:
70:fe:3e:d4:cf:b3:02:9a:d9:aa:c1:9c:7b:90:e5:80:f9:8a:
c3:73:bd:d7:df:7a:6a:04:01:63:01:5e:26:71:4b:be:54:44:
dc:7d:b8:e2:7c:87:79:4d:a4:aa:7a:e8:0d:4c:07:97:41:28:
1f:c7:7d:72:41:b1:1b:e7:c3:06:a9:c9:1b:fe:65:6d:cc:9c:
3f:d5:b1:0e:cb:bd:f0:82:87:92:60:7f:43:78:70:f3:72:93:
57:69:c6:a4:be:f5:c8:98:b4:44:54:d7:b0:66:67:95:d6:9d:
82:ee:4b:c4:fa:f7:66:da:05:70:0e:62:c7:10:6f:fa:72:8b:
64:95:ea:29:48:d7:6e:f4:90:29:6a:24:06:0b:37:52:1f:4b:
e3:a3:b2:e1:5f:51:e2:88:6a:47:2c:25:bf:a0:9a:7b:bc:1e:
19:20:0e:d4:c8:58:0c:33:a0:01:e8:7c:33:94:87:d8:42:b8:
e5:28:23:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8TQV4fuw+WrNszkUT2GC/jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YmQxMGYxYjE0YmJiMjc2N2ZmZGNhZWM0YjQxNzI4ODBi
YTQ2MWEwHhcNMjYwNjI5MTIwMTE4WhcNMjYwNjMwMTIwMTE4WjAzMTEwLwYDVQQD
EyhkNjUzOGIzOTUyYmY2MzVmMjE5NDc5NTg4NzdhZTA3OWYzZjkzYjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4NIZMKPHwIOZouEt0LOQwJPOhdGu
AgsS65wW23Y0O5CZqCPeqmFKnlUMR6fUnvEYNq0cEA8ashPNZzB2ek4yoaGPB6rg
/eK6TVS8ZbOa3kEajF4cz2hY2TqWLoprX9Pi8nPpt27WybroVa2wh2gTUyO05/ch
nqA4JkemfITuiRbTCXlPN/5pC5RSzQ9V2bpRuXJQtF3+X0ld7kEUcW/Ft2XluXnD
1i8259Q2Wuqt9xo+PDGJ5+mmTf6kirH+PL9sZRSOJvEhLCm244Ao2eM0i0clGwtN
P5hthaxiBq+SB/a3hCI97eVI3Hbd57gNwkzjDAwA1/1XhFXnzVToI7VqvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNZTizlSv2NfIZR5WId64Hnz+Ts6MB8GA1UdIwQY
MBaAFGi9EPGxS7snZ//crsS0FyiAukYaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUwwUThiRkx1eWRuXzl5dXhMUVhLSUM2UmhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hZGU4NTYtODk2MC00YTI5LTg5NTYt
OWZlN2Q5MjhkOWJlLzEvYUwwUThiRkx1eWRuXzl5dXhMUVhLSUM2UmhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9hZGU4NTYtODk2MC00YTI5LTg5NTYtOWZlN2Q5MjhkOWJl
LzEvYUwwUThiRkx1eWRuXzl5dXhMUVhLSUM2UmhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAflnl2pbc
JUYPWKXOvMLqIfvIDVyHU/JmLqZ/Ex51UAx10jEANM10N8k+roshYXZC1Kgsv+j1
2OeNRu+Z52Qm7BNdIhu8Xa99cP4+1M+zAprZqsGce5DlgPmKw3O91996agQBYwFe
JnFLvlRE3H244nyHeU2kqnroDUwHl0EoH8d9ckGxG+fDBqnJG/5lbcycP9WxDsu9
8IKHkmB/Q3hw83KTV2nGpL71yJi0RFTXsGZnldadgu5LxPr3ZtoFcA5ixxBv+nKL
ZJXqKUjXbvSQKWokBgs3Uh9L46Oy4V9R4ohqRywlv6Cae7weGSAO1MhYDDOgAeh8
M5SH2EK45SgjzA==
-----END CERTIFICATE-----
Generated at Mon Jun 29 15:43:17 2026 by rpki-client