Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/d02b32-967d-4751-82d3-121a14a9a40e/1/aLw5QAVdFXTyY7X5arCQDGu0xfk.mft
File: aLw5QAVdFXTyY7X5arCQDGu0xfk.mft (raw, json)
Hash identifier: SKOLrHaO4LqqfSwIQ+t2k6iwuzJA5tHIHIGXYz9ftHU=
Subject key identifier: D5:B1:8A:7D:DA:0E:02:80:92:A3:00:22:B5:E4:E5:17:44:BA:5D:9F
Authority key identifier: 68:BC:39:40:05:5D:15:74:F2:63:B5:F9:6A:B0:90:0C:6B:B4:C5:F9
Certificate issuer: /CN=68bc3940055d1574f263b5f96ab0900c6bb4c5f9
Certificate serial: 01A1871B67861EB2BEDF850D478D3E48B4A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLw5QAVdFXTyY7X5arCQDGu0xfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/d02b32-967d-4751-82d3-121a14a9a40e/1/aLw5QAVdFXTyY7X5arCQDGu0xfk.mft
Manifest number: 0836
Signing time: Thu 29 Oct 2026 10:01:22 +0000
Manifest this update: Thu 29 Oct 2026 10:01:22 +0000
Manifest next update: Fri 30 Oct 2026 10:01:22 +0000
Files and hashes: 1: BcT1YlHw7D1Dk2z_LIFmn3rThJY.roa (hash: Eovd3kGKSBHE8soZjKT4R8yDeoxnP/onLhr4NTs+e6o=)
2: aLw5QAVdFXTyY7X5arCQDGu0xfk.crl (hash: ZgL4aN6SH1qU9AK5lch3auPbCAFp+B4HOoP5Lw2CrHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/d02b32-967d-4751-82d3-121a14a9a40e/1/aLw5QAVdFXTyY7X5arCQDGu0xfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/d02b32-967d-4751-82d3-121a14a9a40e/1/aLw5QAVdFXTyY7X5arCQDGu0xfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aLw5QAVdFXTyY7X5arCQDGu0xfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 10:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:1b:67:86:1e:b2:be:df:85:0d:47:8d:3e:48:b4:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68bc3940055d1574f263b5f96ab0900c6bb4c5f9
Validity
Not Before: Oct 29 10:01:22 2026 GMT
Not After : Oct 30 10:01:22 2026 GMT
Subject: CN=d5b18a7dda0e028092a30022b5e4e51744ba5d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9d:f2:b1:c0:45:96:6b:b6:17:f4:ea:85:d2:
9c:27:6b:9e:71:9d:8f:19:e3:f9:f9:15:ca:61:d0:
d1:32:35:ce:31:97:b6:db:ee:b1:5a:ac:da:2f:f6:
14:03:a3:57:a1:24:b1:18:e0:1d:ba:8c:f5:f3:e0:
c5:f8:d5:50:f4:3e:ba:5b:60:54:21:5f:6e:b2:4c:
61:29:5e:7c:13:b1:f5:58:8e:f4:13:53:5e:97:6c:
ab:04:e2:ef:9b:33:fa:d9:d6:6e:37:8c:94:60:f1:
5a:97:74:e9:32:3c:32:3f:80:c3:ee:52:a5:fb:67:
54:c7:7e:6d:e1:a9:32:6e:43:e5:e1:e3:73:d0:8c:
45:f3:bd:0a:ad:0b:e4:d2:73:2b:32:86:18:67:ca:
72:ab:7f:5d:4d:fd:28:9e:e7:11:40:02:12:b8:98:
e4:71:cb:3e:f9:12:59:1c:ff:08:9f:9b:03:61:c0:
d0:d0:75:9c:f7:dd:8d:e6:c9:cb:d1:cc:28:46:17:
5f:b0:a5:f0:23:6e:7d:5a:d0:79:32:13:8f:e7:21:
4c:78:2a:47:db:5d:1f:b4:6d:cb:f8:c3:0e:52:da:
6f:26:08:68:ab:fe:d2:e2:93:fc:55:1c:11:c1:d3:
6c:78:bc:40:ca:ef:a0:95:b2:a8:e0:e2:bf:90:4f:
f0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B1:8A:7D:DA:0E:02:80:92:A3:00:22:B5:E4:E5:17:44:BA:5D:9F
X509v3 Authority Key Identifier:
keyid:68:BC:39:40:05:5D:15:74:F2:63:B5:F9:6A:B0:90:0C:6B:B4:C5:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLw5QAVdFXTyY7X5arCQDGu0xfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/d02b32-967d-4751-82d3-121a14a9a40e/1/aLw5QAVdFXTyY7X5arCQDGu0xfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/d02b32-967d-4751-82d3-121a14a9a40e/1/aLw5QAVdFXTyY7X5arCQDGu0xfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:a9:1e:05:87:6f:4b:61:4a:a9:62:47:ac:20:2f:46:a9:57:
a9:b8:31:07:0f:99:c0:71:f7:cb:f5:aa:b7:04:62:9a:86:69:
eb:07:9c:cd:19:06:75:c1:f1:bc:48:6a:00:65:cb:67:20:70:
a5:d9:77:3f:df:81:7c:e1:b4:b5:14:00:ed:dd:9c:41:cb:e9:
84:33:71:eb:44:62:a0:04:b4:7e:6c:1b:78:e8:b9:32:fa:92:
c1:c7:4a:e1:8d:a7:27:66:d5:d3:f4:16:bc:6c:39:84:cb:0d:
d3:06:7b:64:7d:7d:79:a3:07:a4:67:80:ce:94:39:8e:3b:68:
33:cc:1a:66:d5:c0:a9:12:76:bf:9f:cc:9e:17:eb:5e:bb:0b:
75:7f:95:ce:35:e8:67:87:44:cd:ad:dd:31:07:7f:ed:b1:bb:
35:28:0d:21:e1:61:ce:96:e9:b3:69:6d:02:7e:4f:7b:91:76:
d6:c2:56:f0:0e:14:59:1b:e2:54:59:2c:ae:61:10:e0:44:a8:
a8:4e:44:4b:00:db:0e:7d:11:a3:3e:80:55:78:a6:fe:cd:fd:
e4:06:26:fa:c6:6f:2a:04:79:fa:96:78:88:22:4d:c4:d3:d3:
cc:06:a2:8f:91:c6:6c:bc:35:cf:57:78:ab:48:67:ff:f0:bb:
63:a7:cd:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 15:58:35 2026 by rpki-client