Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
File: aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft (raw, json)
Hash identifier: 1TjEzpJQKEewTVQFM/TwOfhTZduIUO1BW0KeUaeHOj8=
Subject key identifier: 93:80:B5:DB:AB:08:23:81:AD:4A:70:02:A3:75:05:AB:F0:1B:1C:EB
Authority key identifier: 68:BD:10:F1:B1:4B:BB:27:67:FF:DC:AE:C4:B4:17:28:80:BA:46:1A
Certificate issuer: /CN=68bd10f1b14bbb2767ffdcaec4b4172880ba461a
Certificate serial: 019D1B36C3773268F3D3780378AD31623422
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
Manifest number: 0DAB
Signing time: Mon 23 Mar 2026 15:01:06 +0000
Manifest this update: Mon 23 Mar 2026 15:01:06 +0000
Manifest next update: Tue 24 Mar 2026 15:01:06 +0000
Files and hashes: 1: S04NKU0J13eA6-TGQ2BZfun47ys.roa (hash: xIlFQJwTJx7ez8Zx99ToD2cR7A/Ipyz0mMaGV2drzPQ=)
2: aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl (hash: fm0WKourFC/06XtkuGPk4h1Q0GnaWSeKB9SEo/Idqcs=)
3: rJKcaNGOpOiZ0iciVQt-oX04cPI.roa (hash: BT7ocoNehLiRKdELBQmLzdxfWaOUS/P7hDDrN7lDDSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 24 Mar 2026 15:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1b:36:c3:77:32:68:f3:d3:78:03:78:ad:31:62:34:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68bd10f1b14bbb2767ffdcaec4b4172880ba461a
Validity
Not Before: Mar 23 15:01:06 2026 GMT
Not After : Mar 24 15:01:06 2026 GMT
Subject: CN=9380b5dbab082381ad4a7002a37505abf01b1ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:17:7e:9d:1f:51:5c:20:b4:d2:87:a2:94:b3:
52:e6:44:27:d5:03:86:4a:a4:a2:7f:d7:4f:2e:6b:
18:e4:5a:d3:5b:eb:e1:6b:f9:ac:b3:34:18:51:63:
56:19:de:79:ff:51:1f:29:f0:ca:82:c9:9a:d8:36:
24:3f:a3:f5:f4:db:01:60:ad:a5:87:c2:6e:49:af:
21:29:45:9c:da:9a:97:de:d8:e0:9a:48:ec:d6:22:
3e:72:53:b6:90:84:00:0f:ac:47:5b:6c:36:ef:3b:
d7:a0:bc:70:9d:80:37:60:d7:16:26:7f:bd:55:96:
3b:84:55:89:91:3a:09:10:f8:7a:a2:67:97:2c:6e:
f7:ce:6e:89:36:69:13:5b:78:21:2a:fb:ac:6b:87:
39:b8:b7:f1:c3:ae:a1:58:bd:b5:1f:3f:87:44:3f:
85:81:f5:e8:55:83:95:5b:5c:7b:94:0d:fa:3a:b5:
c1:cc:71:18:98:34:58:1c:5b:80:20:f5:80:2d:b7:
3e:d6:85:1c:90:38:72:88:27:f4:eb:19:e6:b8:b9:
4f:23:67:c6:69:3a:2a:d8:23:85:4f:bc:df:30:32:
6b:a9:be:cb:2d:d7:53:3a:7b:bf:9c:64:5c:d2:69:
8d:ec:1f:b4:d7:39:6e:2c:c4:b7:ee:cd:4f:c9:5c:
cc:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:80:B5:DB:AB:08:23:81:AD:4A:70:02:A3:75:05:AB:F0:1B:1C:EB
X509v3 Authority Key Identifier:
keyid:68:BD:10:F1:B1:4B:BB:27:67:FF:DC:AE:C4:B4:17:28:80:BA:46:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:e9:07:81:c0:2b:26:1c:bd:16:2b:0a:1f:9c:d6:40:c4:d4:
0b:f7:36:4e:38:25:ac:ef:bf:e3:f3:29:fd:40:54:00:02:dd:
39:73:0a:40:61:c3:7b:9f:79:f5:29:5c:79:9a:6b:af:22:45:
16:b8:1c:a1:5b:21:a3:de:07:e9:13:10:80:2b:c8:30:02:47:
7a:29:87:db:fb:ca:1f:e2:79:52:45:f6:c4:18:a6:08:dc:2d:
42:17:36:12:ee:30:c2:ec:7b:99:bc:cf:b6:1e:b4:a1:47:2e:
50:65:31:b3:d7:05:db:6e:79:43:f8:43:90:5b:52:e9:16:c8:
59:e8:91:ac:c7:bf:6b:c2:b6:f9:4a:97:49:a8:b2:c5:b7:94:
9d:ca:d0:24:79:3e:6b:8b:31:b2:dd:bd:9f:5b:c6:e9:ff:e6:
8e:fe:5e:2c:b6:5e:41:78:05:d0:f7:17:f4:0f:6a:07:14:cd:
32:20:fe:5b:d4:53:27:ea:3d:b6:63:c9:5d:20:e1:63:8d:4a:
64:7a:60:65:f3:4d:5e:be:0a:64:36:3c:85:99:8b:44:89:c2:
63:3e:81:49:6f:fb:4c:25:bd:86:08:dc:2d:37:7c:23:55:ba:
dc:d5:c7:50:31:69:82:66:31:30:9b:0e:09:cf:b6:fe:f2:f4:
03:7c:45:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 22:24:29 2026 by rpki-client