Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/d02b32-967d-4751-82d3-121a14a9a40e/1/aLw5QAVdFXTyY7X5arCQDGu0xfk.mft
File: aLw5QAVdFXTyY7X5arCQDGu0xfk.mft (raw, json)
Hash identifier: IOkN0wCVDayXW3eR5BD8TF6VzG452n0S8ctFwTmMXX0=
Subject key identifier: 91:53:11:AE:B1:87:92:80:D1:ED:F4:DA:3F:D6:F7:F6:B6:68:66:85
Authority key identifier: 68:BC:39:40:05:5D:15:74:F2:63:B5:F9:6A:B0:90:0C:6B:B4:C5:F9
Certificate issuer: /CN=68bc3940055d1574f263b5f96ab0900c6bb4c5f9
Certificate serial: 01A08C0DB1A350985913D98655FEB907F1B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLw5QAVdFXTyY7X5arCQDGu0xfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/d02b32-967d-4751-82d3-121a14a9a40e/1/aLw5QAVdFXTyY7X5arCQDGu0xfk.mft
Manifest number: 07B4
Signing time: Thu 10 Sep 2026 16:01:42 +0000
Manifest this update: Thu 10 Sep 2026 16:01:42 +0000
Manifest next update: Fri 11 Sep 2026 16:01:42 +0000
Files and hashes: 1: BcT1YlHw7D1Dk2z_LIFmn3rThJY.roa (hash: Eovd3kGKSBHE8soZjKT4R8yDeoxnP/onLhr4NTs+e6o=)
2: aLw5QAVdFXTyY7X5arCQDGu0xfk.crl (hash: ZnCuZq69jMqKH6g14ybv3kGBDmp2U4V/+fjFgjpu+jE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/d02b32-967d-4751-82d3-121a14a9a40e/1/aLw5QAVdFXTyY7X5arCQDGu0xfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/d02b32-967d-4751-82d3-121a14a9a40e/1/aLw5QAVdFXTyY7X5arCQDGu0xfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aLw5QAVdFXTyY7X5arCQDGu0xfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0d:b1:a3:50:98:59:13:d9:86:55:fe:b9:07:f1:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68bc3940055d1574f263b5f96ab0900c6bb4c5f9
Validity
Not Before: Sep 10 16:01:42 2026 GMT
Not After : Sep 11 16:01:42 2026 GMT
Subject: CN=915311aeb1879280d1edf4da3fd6f7f6b6686685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:82:fb:3f:90:b0:e5:5f:92:6b:82:66:c4:28:
6e:75:aa:c9:88:c5:5c:29:21:2c:8f:af:f4:1c:dc:
b1:87:61:18:e1:79:90:81:72:f7:df:87:51:9e:cc:
9d:80:4b:11:58:6e:73:a2:d0:9d:b8:a0:1e:48:9a:
65:b3:bd:55:f1:48:09:6b:b9:1c:2f:dd:90:6c:ee:
fd:33:ad:db:b5:d7:f0:2d:4c:6e:a0:5d:26:90:96:
fe:b9:ca:bf:26:d4:d0:c8:8c:fa:88:3b:1c:46:e3:
e8:70:3a:b1:55:0c:77:9f:b6:d1:ff:af:68:88:41:
6d:ca:f5:6d:26:4b:bb:9d:b3:df:d8:6a:36:79:48:
4b:5d:d4:8a:08:c3:85:89:20:95:bf:f6:19:f0:c1:
29:0f:98:cf:7b:9f:b4:31:ff:12:7d:1d:f7:22:f0:
a7:bb:43:11:b0:cc:41:50:3a:04:a4:5b:6c:16:d4:
d8:62:30:9e:09:ef:2a:fc:4b:c6:77:c4:69:ba:03:
01:15:65:b2:df:19:3f:95:5c:2b:27:b3:1d:40:db:
7f:3c:69:de:3a:93:fe:6b:9f:30:be:db:b6:ab:c3:
3a:cc:a8:e8:c6:9c:90:ca:09:34:6d:78:88:1c:d4:
d8:bd:db:3c:21:eb:52:89:4d:f7:93:b6:82:85:20:
91:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:53:11:AE:B1:87:92:80:D1:ED:F4:DA:3F:D6:F7:F6:B6:68:66:85
X509v3 Authority Key Identifier:
keyid:68:BC:39:40:05:5D:15:74:F2:63:B5:F9:6A:B0:90:0C:6B:B4:C5:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLw5QAVdFXTyY7X5arCQDGu0xfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/d02b32-967d-4751-82d3-121a14a9a40e/1/aLw5QAVdFXTyY7X5arCQDGu0xfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/d02b32-967d-4751-82d3-121a14a9a40e/1/aLw5QAVdFXTyY7X5arCQDGu0xfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:34:67:ad:ed:d2:ab:37:6f:3b:3b:2d:ba:35:87:5b:81:1f:
77:fe:67:2e:e6:c0:b0:f5:3f:07:f4:2d:00:dd:55:b6:38:1f:
fc:3b:3e:3f:cb:84:09:de:ed:99:04:79:8b:5b:0b:ea:d1:2a:
8b:5c:8a:91:be:53:ad:be:67:ff:17:79:b9:e1:4a:6f:80:75:
35:91:33:db:d1:6f:23:dd:c4:35:a2:32:75:0b:e5:c7:5f:01:
00:8e:44:55:96:ad:a7:85:61:30:fa:b6:6b:01:39:67:1f:45:
e8:45:e2:4c:61:e6:92:b1:cc:b0:3a:60:c1:67:bf:c5:b2:86:
48:b8:02:b6:a1:49:99:3a:f0:7c:d8:73:61:5f:8c:03:0c:45:
d3:5c:dd:6f:df:be:10:e4:e1:bb:8d:f9:99:72:56:5f:3c:86:
e8:3d:d7:ef:13:a7:9a:4e:70:07:f2:b1:d8:13:d1:7a:45:0f:
4a:d7:2b:d2:6b:cf:db:b1:c7:80:e0:df:97:25:c0:9b:27:a8:
4c:c6:1f:d3:67:7b:9d:e4:fc:f1:10:e8:de:e9:36:27:ee:fa:
81:b2:70:1c:0d:52:60:f8:dd:09:75:93:94:d8:a0:00:b9:03:
d0:c8:9d:d5:96:5d:b9:18:1b:9d:30:05:b6:2f:25:ad:cf:fd:
e6:c3:04:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:05:45 2026 by rpki-client