Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
File: aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft (raw, json)
Hash identifier: fzQWZBWeDO5QD2WEsg1m36mB/0GR33XQDx5fK073xeo=
Subject key identifier: 45:23:2C:14:C2:70:43:C7:5C:3F:27:F8:70:63:69:BD:1B:C3:AC:2B
Authority key identifier: 68:BD:10:F1:B1:4B:BB:27:67:FF:DC:AE:C4:B4:17:28:80:BA:46:1A
Certificate issuer: /CN=68bd10f1b14bbb2767ffdcaec4b4172880ba461a
Certificate serial: 01A1076EBB8844B5756B2A8954E5EA2BED5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
Manifest number: 0FB3
Signing time: Sun 04 Oct 2026 15:00:59 +0000
Manifest this update: Sun 04 Oct 2026 15:00:59 +0000
Manifest next update: Mon 05 Oct 2026 15:00:59 +0000
Files and hashes: 1: S04NKU0J13eA6-TGQ2BZfun47ys.roa (hash: xIlFQJwTJx7ez8Zx99ToD2cR7A/Ipyz0mMaGV2drzPQ=)
2: aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl (hash: 707EDG2tgAAam0zrePtbMXoCOmY5L/YhVU27LJcrsxE=)
3: rJKcaNGOpOiZ0iciVQt-oX04cPI.roa (hash: BT7ocoNehLiRKdELBQmLzdxfWaOUS/P7hDDrN7lDDSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:6e:bb:88:44:b5:75:6b:2a:89:54:e5:ea:2b:ed:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68bd10f1b14bbb2767ffdcaec4b4172880ba461a
Validity
Not Before: Oct 4 15:00:59 2026 GMT
Not After : Oct 5 15:00:59 2026 GMT
Subject: CN=45232c14c27043c75c3f27f8706369bd1bc3ac2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ba:29:4d:41:21:67:67:bc:f6:7e:9e:48:d4:
cb:97:de:04:6d:ea:4d:8f:2d:ae:50:25:f3:d1:1e:
2e:1c:90:16:b0:56:e8:1a:4b:b4:5f:45:b2:92:f8:
91:f3:18:a4:ec:ff:67:a1:7d:9f:28:df:c1:61:a6:
df:e9:8c:a9:e7:c4:72:58:2b:48:bf:10:f3:42:81:
ae:39:d7:2b:2c:5c:66:06:1c:1b:73:eb:8d:b9:50:
72:09:08:74:94:fd:a7:30:c0:99:45:da:da:a9:ef:
1f:e2:9b:12:c8:ec:00:cf:3a:dc:c0:2c:07:06:92:
17:04:82:1c:d7:71:65:d7:3f:3c:31:96:4a:46:ac:
08:92:af:42:70:52:d3:a7:a4:71:b5:d4:42:e5:2d:
e9:8e:2a:a5:9a:9f:b9:86:a8:ae:33:7f:34:ef:67:
bb:3e:be:3d:43:d7:02:6a:e1:98:46:70:1d:3d:ae:
e6:74:ad:16:d1:5a:fe:c6:c4:1d:c3:f8:4c:eb:41:
05:0f:36:2c:65:c1:40:01:0a:32:3b:e6:df:c2:45:
86:01:21:f8:f3:9c:e1:c7:49:87:a6:0b:7d:af:d1:
1f:13:43:09:ec:bd:37:6c:f2:08:ba:40:8d:d4:76:
ac:e1:63:73:14:64:1f:e2:b2:13:33:e7:ea:ec:af:
ef:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:23:2C:14:C2:70:43:C7:5C:3F:27:F8:70:63:69:BD:1B:C3:AC:2B
X509v3 Authority Key Identifier:
keyid:68:BD:10:F1:B1:4B:BB:27:67:FF:DC:AE:C4:B4:17:28:80:BA:46:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:c8:dd:d0:d5:83:84:39:84:fb:22:b1:8e:46:80:5a:89:d4:
97:c3:2c:de:4f:e6:5b:7d:aa:2f:45:6e:6a:17:a1:d0:bf:42:
9d:d6:a8:0e:e7:5b:04:75:2d:e6:b7:b4:32:ac:60:b8:74:8d:
87:f5:ce:d5:d2:81:6f:aa:49:1f:74:ab:7a:e9:7a:98:2a:79:
74:9d:3d:46:82:6f:3a:6f:e4:da:6f:14:ab:a4:dd:cc:fe:0b:
30:3a:be:5e:8a:da:a4:15:ab:2a:54:7b:e2:74:38:88:ca:af:
a8:ab:44:50:70:89:f6:10:74:30:fb:56:91:8e:28:ad:cc:42:
d3:89:77:5a:45:ff:03:0e:3b:9c:43:73:50:e0:84:e6:10:df:
f6:91:a4:b5:28:01:97:b6:96:17:fa:e2:8f:56:b8:45:06:21:
7a:3c:4a:fb:2d:52:a8:62:46:43:b6:ba:46:b2:b4:77:e3:2d:
e0:d1:20:0e:2c:99:51:e2:0b:a3:a7:1a:ff:62:1f:6e:32:0d:
15:2e:4e:3a:d4:b7:2b:44:5f:c4:35:a2:ac:e9:cb:a7:22:20:
8e:24:f2:83:ec:88:e2:12:0e:57:94:d1:4b:3d:e9:c5:ac:5a:
3e:ab:85:b0:ca:9e:70:a9:b5:c6:44:f8:13:f8:99:28:61:c1:
f7:6f:e7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:57:18 2026 by rpki-client