Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.mft
File: aLf4F6tRQbXhOCgM32GQFmu5y4c.mft (raw, json)
Hash identifier: 1vn++YkgvXdhXSsRP5WeiUmK8TkSUSTFKCi648EFB6Y=
Subject key identifier: 6C:F6:87:2B:72:AF:68:1C:9A:9C:68:4D:45:C2:34:F6:18:DC:53:5E
Authority key identifier: 68:B7:F8:17:AB:51:41:B5:E1:38:28:0C:DF:61:90:16:6B:B9:CB:87
Certificate issuer: /CN=68b7f817ab5141b5e138280cdf6190166bb9cb87
Certificate serial: 019D371B86ACA64B65C5468D973A1754F516
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLf4F6tRQbXhOCgM32GQFmu5y4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 01:00:43 +0000
Manifest this update: Sun 29 Mar 2026 01:00:43 +0000
Manifest next update: Mon 30 Mar 2026 01:00:43 +0000
Files and hashes: 1: aLf4F6tRQbXhOCgM32GQFmu5y4c.crl (hash: iqrbPJpFop+QfQeGnzd9+1L+mU6J15f5XZI7O2vdgoY=)
2: dwxKXYq5F0w7--7RCrBYQ23c5iY.roa (hash: K/Q42vj3khDPlWwooNw7J1cFttbzhnLd2GjnJonXf1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/aLf4F6tRQbXhOCgM32GQFmu5y4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:86:ac:a6:4b:65:c5:46:8d:97:3a:17:54:f5:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b7f817ab5141b5e138280cdf6190166bb9cb87
Validity
Not Before: Mar 29 01:00:43 2026 GMT
Not After : Mar 30 01:00:43 2026 GMT
Subject: CN=6cf6872b72af681c9a9c684d45c234f618dc535e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a6:76:37:6f:a4:ef:5d:5c:38:b0:13:6d:61:
4c:d2:63:a6:4f:f5:aa:b3:30:f0:1e:34:cb:c4:4f:
e6:86:55:cf:07:1e:27:b0:0d:30:d8:e9:66:5e:af:
6c:a8:99:47:f4:fd:61:f0:9c:be:9e:5e:91:35:d1:
30:18:65:d3:d6:15:d9:88:6b:d7:b6:e9:b5:c7:18:
61:7e:0b:b1:5c:66:90:62:37:06:94:37:74:87:6d:
b7:39:f0:97:0b:66:93:e5:d9:19:85:33:28:16:bf:
02:88:70:aa:15:30:b8:29:c6:64:f6:b6:4c:83:22:
51:0f:0e:b5:e1:bc:aa:65:f6:7f:a2:d9:ca:43:a8:
6c:0a:0f:57:af:07:41:71:97:c2:9f:4d:35:96:c6:
24:80:9d:3e:9f:6c:28:c1:8a:89:7b:df:25:69:7a:
d4:16:38:95:26:04:1c:24:5b:d2:2a:ca:a8:e9:4f:
34:69:6e:05:74:0c:f0:06:a0:21:dd:11:0a:e6:50:
c6:e2:3a:1d:34:2c:49:6c:4c:31:80:50:2b:5e:1e:
7c:99:42:6b:1b:2f:83:bf:b1:01:5d:73:ce:42:56:
9f:31:0f:2a:16:76:74:19:c6:6b:8f:68:48:18:75:
73:94:64:9c:38:80:43:0b:4a:be:0d:05:06:59:f6:
04:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F6:87:2B:72:AF:68:1C:9A:9C:68:4D:45:C2:34:F6:18:DC:53:5E
X509v3 Authority Key Identifier:
keyid:68:B7:F8:17:AB:51:41:B5:E1:38:28:0C:DF:61:90:16:6B:B9:CB:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLf4F6tRQbXhOCgM32GQFmu5y4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:67:34:da:00:d9:d2:c0:22:89:2e:8f:1c:28:d4:96:c3:2a:
3f:cc:5f:a1:f7:72:4a:f9:39:ae:cf:f0:3f:70:3d:a3:2b:a9:
7e:d7:a1:4c:26:b2:70:bc:ba:c4:d0:5c:45:2e:69:64:16:3f:
da:af:0d:de:82:bb:3c:e7:4c:ef:92:86:a4:d8:99:92:4d:47:
86:d1:26:9e:cf:05:64:1c:a2:98:6d:fe:d6:cf:45:c8:08:b1:
6c:fa:c1:98:bf:82:67:67:9d:3b:ce:7d:a2:91:52:d2:ef:49:
ec:16:dc:93:16:e8:c0:1a:23:5c:6c:1c:4c:85:07:5d:17:10:
7f:a1:44:80:00:b1:a0:3f:04:94:ec:eb:bf:c4:ec:5d:42:ff:
3f:bd:2b:0e:d5:42:49:1c:fe:4d:29:3f:53:ba:78:34:3a:4d:
07:c8:1f:ac:ea:5b:19:83:1f:de:a6:9b:d3:81:7f:02:b8:6b:
e3:73:8c:06:6f:cc:ef:bd:8b:4c:c8:95:39:fa:85:80:68:2b:
cc:be:1c:aa:8e:d4:94:30:49:84:b6:5c:9c:e0:7f:14:04:77:
92:14:e2:6c:28:30:bb:7e:75:1a:f1:0d:1f:fd:52:25:df:63:
cc:8a:82:d0:09:9c:e2:e0:0a:4e:42:95:4d:07:ee:19:21:30:
28:57:56:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:14 2026 by rpki-client