Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.mft
File: aLf4F6tRQbXhOCgM32GQFmu5y4c.mft (raw, json)
Hash identifier: /hTr+QRK9fjoXnRMG7FZ/5Q7nV+G185wnUpZjVkwH54=
Subject key identifier: 9E:C5:EE:22:87:6E:1F:12:83:0F:13:44:0E:46:C7:EB:7D:8F:49:ED
Authority key identifier: 68:B7:F8:17:AB:51:41:B5:E1:38:28:0C:DF:61:90:16:6B:B9:CB:87
Certificate issuer: /CN=68b7f817ab5141b5e138280cdf6190166bb9cb87
Certificate serial: 01A00394AD15B69BF5EEE7D81B9E4107A902
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLf4F6tRQbXhOCgM32GQFmu5y4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.mft
Manifest number: 1A02
Signing time: Sat 15 Aug 2026 04:01:10 +0000
Manifest this update: Sat 15 Aug 2026 04:01:10 +0000
Manifest next update: Sun 16 Aug 2026 04:01:10 +0000
Files and hashes: 1: aLf4F6tRQbXhOCgM32GQFmu5y4c.crl (hash: SU44qQHiSCUuyOm23X5Cf2Ol/wMqToSjQCMRMjvOXSk=)
2: dwxKXYq5F0w7--7RCrBYQ23c5iY.roa (hash: K/Q42vj3khDPlWwooNw7J1cFttbzhnLd2GjnJonXf1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/aLf4F6tRQbXhOCgM32GQFmu5y4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:94:ad:15:b6:9b:f5:ee:e7:d8:1b:9e:41:07:a9:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b7f817ab5141b5e138280cdf6190166bb9cb87
Validity
Not Before: Aug 15 04:01:10 2026 GMT
Not After : Aug 16 04:01:10 2026 GMT
Subject: CN=9ec5ee22876e1f12830f13440e46c7eb7d8f49ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5c:0e:b7:68:65:6c:ce:82:b0:dd:9d:a1:93:
86:61:55:fb:47:00:c3:4c:2f:98:a4:c2:42:62:ce:
55:fc:70:c1:8a:11:5e:7f:eb:90:f5:4d:07:c1:56:
f2:96:08:e9:42:0b:c3:f8:b4:8e:75:0c:d2:5f:fb:
a9:7a:46:89:80:1b:81:80:c0:97:04:7d:da:5a:e9:
9c:80:c5:c3:04:86:ad:da:d4:d1:7a:5e:a3:35:97:
06:62:91:a3:a1:7c:54:bd:ae:9f:a9:45:3e:c5:10:
ab:6f:7b:0a:02:fd:46:bb:12:cb:38:cd:fe:cb:e7:
82:a3:18:a1:3b:fa:84:e9:11:d1:1c:a9:49:47:0a:
f2:1b:cd:de:a9:28:0d:be:26:d7:19:11:86:e0:1c:
a0:ad:45:6d:e0:7d:f1:fb:36:f5:47:9b:52:08:3d:
7b:ea:86:38:3d:54:46:c4:84:33:10:45:ca:26:eb:
1d:ee:c2:6e:f5:f6:a4:27:67:cd:e7:b5:bc:87:f2:
54:37:03:d7:43:90:ed:c3:99:51:5b:98:13:2a:2d:
bf:b0:1b:0c:5a:af:be:05:e7:11:6f:b3:a5:3f:10:
ee:0e:9e:15:c8:b4:66:db:c2:ef:0e:0f:b8:eb:d0:
94:47:e7:c7:2a:1c:99:99:1a:42:b2:a1:f4:d6:6c:
d6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C5:EE:22:87:6E:1F:12:83:0F:13:44:0E:46:C7:EB:7D:8F:49:ED
X509v3 Authority Key Identifier:
keyid:68:B7:F8:17:AB:51:41:B5:E1:38:28:0C:DF:61:90:16:6B:B9:CB:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLf4F6tRQbXhOCgM32GQFmu5y4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:56:19:e0:c3:2e:bc:a5:7c:d4:87:cf:40:3c:83:d4:a4:16:
4a:da:d7:d7:4f:73:e4:99:3c:c6:68:9f:04:78:69:49:57:33:
c4:8f:85:b4:b6:49:0e:02:e5:eb:a5:1b:ec:2a:9e:e2:ca:c4:
fc:73:65:31:8f:64:ae:9a:5f:76:f7:e7:f7:31:ed:f7:68:f9:
07:36:36:8f:21:74:ee:b0:d4:e7:09:58:92:b2:b0:5f:04:31:
f5:69:9b:2c:fc:d0:9f:2c:a9:08:58:fb:35:a7:24:b8:04:5e:
c0:8b:62:db:0b:eb:eb:b1:08:80:98:f3:57:bb:eb:b7:ba:ba:
11:92:21:38:c1:28:6d:09:c7:ff:8e:1c:a6:72:72:82:73:3b:
87:19:a5:54:9b:91:de:c3:ea:4b:0d:80:da:be:58:bc:17:c1:
43:03:97:ff:88:89:1d:bf:04:25:fd:d8:ca:84:e7:44:85:bc:
b6:67:31:a6:2a:0a:0e:6d:4d:3c:bd:e3:fb:9e:03:6e:db:87:
f2:06:9e:99:6b:c1:5b:20:90:49:62:c3:7e:18:fb:d4:f1:5c:
3e:dd:bf:ff:39:6d:a5:4b:d3:aa:6b:9c:9f:26:7c:c3:97:7f:
02:44:f3:ad:9e:58:bc:f0:89:7f:92:75:31:07:44:57:b8:37:
13:e5:35:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaADlK0Vtpv17ufYG55BB6kCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YjdmODE3YWI1MTQxYjVlMTM4MjgwY2RmNjE5MDE2NmJi
OWNiODcwHhcNMjYwODE1MDQwMTEwWhcNMjYwODE2MDQwMTEwWjAzMTEwLwYDVQQD
Eyg5ZWM1ZWUyMjg3NmUxZjEyODMwZjEzNDQwZTQ2YzdlYjdkOGY0OWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1wOt2hlbM6CsN2doZOGYVX7RwDD
TC+YpMJCYs5V/HDBihFef+uQ9U0HwVbylgjpQgvD+LSOdQzSX/upekaJgBuBgMCX
BH3aWumcgMXDBIat2tTRel6jNZcGYpGjoXxUva6fqUU+xRCrb3sKAv1GuxLLOM3+
y+eCoxihO/qE6RHRHKlJRwryG83eqSgNvibXGRGG4BygrUVt4H3x+zb1R5tSCD17
6oY4PVRGxIQzEEXKJusd7sJu9fakJ2fN57W8h/JUNwPXQ5Dtw5lRW5gTKi2/sBsM
Wq++BecRb7OlPxDuDp4VyLRm28LvDg+469CUR+fHKhyZmRpCsqH01mzW8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ7F7iKHbh8Sgw8TRA5Gx+t9j0ntMB8GA1UdIwQY
MBaAFGi3+BerUUG14TgoDN9hkBZrucuHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUxmNEY2dFJRYlhoT0NnTTMyR1FGbXU1eTRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi83NDJjMTQtN2I0ZC00Mjc5LWI4MjMt
MTY1MTcxMjZjMTMyLzEvYUxmNEY2dFJRYlhoT0NnTTMyR1FGbXU1eTRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi83NDJjMTQtN2I0ZC00Mjc5LWI4MjMtMTY1MTcxMjZjMTMy
LzEvYUxmNEY2dFJRYlhoT0NnTTMyR1FGbXU1eTRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVVYZ4MMu
vKV81IfPQDyD1KQWStrX109z5Jk8xmifBHhpSVczxI+FtLZJDgLl66Ub7Cqe4srE
/HNlMY9krppfdvfn9zHt92j5BzY2jyF07rDU5wlYkrKwXwQx9WmbLPzQnyypCFj7
NackuARewIti2wvr67EIgJjzV7vrt7q6EZIhOMEobQnH/44cpnJygnM7hxmlVJuR
3sPqSw2A2r5YvBfBQwOX/4iJHb8EJf3YyoTnRIW8tmcxpioKDm1NPL3j+54DbtuH
8gaemWvBWyCQSWLDfhj71PFcPt2//zltpUvTqmucnyZ8w5d/AkTzrZ5YvPCJf5J1
MQdEV7g3E+U1ZQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 07:46:30 2026 by rpki-client