Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/d02b32-967d-4751-82d3-121a14a9a40e/1/aLw5QAVdFXTyY7X5arCQDGu0xfk.mft
File: aLw5QAVdFXTyY7X5arCQDGu0xfk.mft (raw, json)
Hash identifier: C9xn1k4A9UE/pLci6xqwHG9Dm7JdZRitQvjOi6nYLEY=
Subject key identifier: 98:76:4D:73:8D:FE:5C:45:12:67:DB:FE:B6:C3:3D:6F:85:0F:51:34
Authority key identifier: 68:BC:39:40:05:5D:15:74:F2:63:B5:F9:6A:B0:90:0C:6B:B4:C5:F9
Certificate issuer: /CN=68bc3940055d1574f263b5f96ab0900c6bb4c5f9
Certificate serial: 019FA071B6477B58F8B450774271666636C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLw5QAVdFXTyY7X5arCQDGu0xfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/d02b32-967d-4751-82d3-121a14a9a40e/1/aLw5QAVdFXTyY7X5arCQDGu0xfk.mft
Manifest number: 073A
Signing time: Sun 26 Jul 2026 22:00:34 +0000
Manifest this update: Sun 26 Jul 2026 22:00:34 +0000
Manifest next update: Mon 27 Jul 2026 22:00:34 +0000
Files and hashes: 1: BcT1YlHw7D1Dk2z_LIFmn3rThJY.roa (hash: Eovd3kGKSBHE8soZjKT4R8yDeoxnP/onLhr4NTs+e6o=)
2: aLw5QAVdFXTyY7X5arCQDGu0xfk.crl (hash: vL+/N0OfO6ermoH0ZBlrGp48amIzQiTdxBYlDAV4sls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/d02b32-967d-4751-82d3-121a14a9a40e/1/aLw5QAVdFXTyY7X5arCQDGu0xfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/d02b32-967d-4751-82d3-121a14a9a40e/1/aLw5QAVdFXTyY7X5arCQDGu0xfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aLw5QAVdFXTyY7X5arCQDGu0xfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 22:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:71:b6:47:7b:58:f8:b4:50:77:42:71:66:66:36:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68bc3940055d1574f263b5f96ab0900c6bb4c5f9
Validity
Not Before: Jul 26 22:00:34 2026 GMT
Not After : Jul 27 22:00:34 2026 GMT
Subject: CN=98764d738dfe5c451267dbfeb6c33d6f850f5134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:42:44:ad:56:28:e8:22:d4:9a:1d:93:5d:c3:
96:9b:ae:49:99:1c:8a:95:e7:f8:54:05:c7:fe:26:
89:5f:24:6b:69:91:c3:72:37:ec:bc:ab:b2:99:3e:
38:9b:e2:0b:62:b7:c8:90:19:77:99:d9:68:0c:f4:
f0:16:7b:ae:c8:06:55:31:a5:1e:e8:a6:8d:77:4d:
e2:fc:58:b7:3e:05:41:3f:73:ef:57:49:6b:f0:df:
ed:12:84:1f:95:97:e6:8b:ca:16:3f:ef:97:d1:85:
96:4c:9f:37:5e:f8:c2:30:f9:f2:19:87:6d:90:f6:
6f:a9:ac:3e:ad:7b:1b:f1:86:60:5d:5f:6f:65:41:
bc:92:27:ea:2c:92:81:43:62:f7:6a:83:04:cb:9d:
cc:8e:75:4b:98:86:a5:20:c4:24:c9:ff:91:3e:56:
66:b2:f9:98:63:3c:41:54:0d:26:0e:63:88:fd:ca:
92:c7:9d:08:1b:7f:f1:13:7d:f9:a2:b8:8b:01:f8:
de:e3:72:55:27:41:94:93:8c:a4:04:71:69:e7:bb:
df:4d:29:41:88:8b:bf:4d:16:fe:62:5b:68:76:95:
47:fe:c1:cc:39:c0:f4:05:f1:a4:83:5b:6d:55:66:
f8:45:d5:45:2d:30:59:bc:65:db:76:16:86:ff:4a:
15:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:76:4D:73:8D:FE:5C:45:12:67:DB:FE:B6:C3:3D:6F:85:0F:51:34
X509v3 Authority Key Identifier:
keyid:68:BC:39:40:05:5D:15:74:F2:63:B5:F9:6A:B0:90:0C:6B:B4:C5:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLw5QAVdFXTyY7X5arCQDGu0xfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/d02b32-967d-4751-82d3-121a14a9a40e/1/aLw5QAVdFXTyY7X5arCQDGu0xfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/d02b32-967d-4751-82d3-121a14a9a40e/1/aLw5QAVdFXTyY7X5arCQDGu0xfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:a8:92:b8:5e:b0:b7:52:5f:2a:cf:86:0b:34:8a:5c:90:da:
14:5d:f4:fc:72:0f:6f:c8:14:de:5d:53:f6:e5:6a:d5:10:1f:
b5:54:ce:05:26:fd:76:1f:a3:f8:79:fb:32:a3:eb:35:b8:a7:
ab:75:e4:6c:5e:7d:b4:00:6b:0f:2e:32:2f:bf:30:91:83:7c:
b7:ee:e7:64:9f:27:18:90:6a:a8:31:24:6f:29:b0:34:37:90:
73:13:4b:95:26:37:7d:e4:13:07:fd:86:5f:d7:11:28:c0:43:
a8:32:3d:5f:b7:f9:27:90:70:1f:0f:40:6b:cb:61:89:21:98:
94:fd:f5:fe:b7:94:0a:60:4d:c1:9e:6f:b7:ba:5d:48:ad:5a:
b3:12:3d:eb:d9:b3:bd:f4:f2:20:53:64:2f:d4:dd:97:8c:48:
e1:5f:f1:4a:36:65:a0:dc:f5:db:18:a0:1c:2c:7b:b7:fc:4a:
6b:18:54:61:33:84:2c:89:48:12:89:d3:07:0b:6c:88:70:28:
f3:6b:c7:6f:75:18:0d:9b:24:9a:d3:40:78:1b:ce:7b:f8:56:
91:9b:4b:39:a1:fc:74:08:23:31:33:09:92:a4:d8:23:c6:13:
e6:74:d9:1e:c8:10:8a:46:23:27:8b:61:6b:6b:50:3e:95:1c:
81:17:9c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:49:10 2026 by rpki-client