Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.mft
File: aLf4F6tRQbXhOCgM32GQFmu5y4c.mft (raw, json)
Hash identifier: JEdwwk90enEfrM5PcXLtovzOKrWaqxaxoWeAGfhIep4=
Subject key identifier: A7:07:FA:12:6B:1A:FB:13:76:01:25:D3:EE:29:13:C2:E6:16:29:3E
Authority key identifier: 68:B7:F8:17:AB:51:41:B5:E1:38:28:0C:DF:61:90:16:6B:B9:CB:87
Certificate issuer: /CN=68b7f817ab5141b5e138280cdf6190166bb9cb87
Certificate serial: 019E2A709B214542C2068A6CC49E38483697
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLf4F6tRQbXhOCgM32GQFmu5y4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.mft
Manifest number: 190D
Signing time: Fri 15 May 2026 07:01:23 +0000
Manifest this update: Fri 15 May 2026 07:01:23 +0000
Manifest next update: Sat 16 May 2026 07:01:23 +0000
Files and hashes: 1: aLf4F6tRQbXhOCgM32GQFmu5y4c.crl (hash: 6VRQJPEJofrb5vEyrEbkaWeQDuvYkHrlbvdEiwLubfE=)
2: dwxKXYq5F0w7--7RCrBYQ23c5iY.roa (hash: K/Q42vj3khDPlWwooNw7J1cFttbzhnLd2GjnJonXf1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/aLf4F6tRQbXhOCgM32GQFmu5y4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:70:9b:21:45:42:c2:06:8a:6c:c4:9e:38:48:36:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b7f817ab5141b5e138280cdf6190166bb9cb87
Validity
Not Before: May 15 07:01:23 2026 GMT
Not After : May 16 07:01:23 2026 GMT
Subject: CN=a707fa126b1afb13760125d3ee2913c2e616293e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:43:8b:cf:77:8c:a1:bd:19:12:df:c6:ea:90:
49:1d:e7:6b:d0:ea:f2:26:d4:3c:a0:58:e3:93:d7:
ac:89:54:38:6a:60:98:68:1e:bc:3a:b3:86:38:34:
be:17:11:ab:1f:37:05:18:0e:d5:4d:b8:6e:00:f9:
96:be:71:e7:6f:5e:7c:c3:d9:cf:a5:f6:9d:4e:f3:
29:39:43:b1:18:de:91:6a:4c:e1:1a:99:07:bf:ce:
df:e7:11:3d:f8:83:62:c3:09:58:a4:ba:0d:7c:ec:
19:68:db:71:bd:9c:5d:c5:87:b6:eb:e1:97:95:90:
66:3f:aa:41:12:59:c6:6e:a2:1f:0a:48:97:aa:df:
d9:cc:29:7a:bf:b0:21:21:f7:b8:c3:ff:4d:e0:5c:
5e:d0:47:80:71:fa:e9:f7:4b:60:dc:c6:e1:65:96:
7a:15:18:c4:c1:ee:ea:2b:59:7c:e1:07:d8:36:ed:
19:c9:4f:9d:f8:44:bf:7d:24:9b:bc:e6:a2:c2:82:
ba:40:ad:fe:d4:0b:05:1d:58:85:f4:a5:4a:9a:c0:
2d:1f:bf:9e:ce:3e:ef:24:d7:76:fa:6c:cb:75:64:
fe:1b:0a:a5:ec:77:1a:ae:50:e0:fc:fe:2d:35:6d:
b8:77:e9:78:65:06:35:af:f0:46:02:18:38:e8:e8:
2c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:07:FA:12:6B:1A:FB:13:76:01:25:D3:EE:29:13:C2:E6:16:29:3E
X509v3 Authority Key Identifier:
keyid:68:B7:F8:17:AB:51:41:B5:E1:38:28:0C:DF:61:90:16:6B:B9:CB:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLf4F6tRQbXhOCgM32GQFmu5y4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:d6:4a:a1:4c:e9:23:2b:1d:c0:3c:3a:b5:bc:4d:0a:99:cd:
cb:71:2e:44:9c:bc:8c:e4:9e:83:d0:da:d8:4c:f0:22:8e:3d:
d8:a2:c1:20:34:cf:f2:14:ef:ce:89:e4:98:80:a8:6b:be:31:
9d:3a:62:d6:82:18:b7:bf:40:85:5c:75:9b:3a:1b:d2:37:a4:
e7:d6:8a:09:97:47:d0:69:0e:b2:65:60:94:fb:ed:6d:d9:0d:
0d:2e:72:73:0f:fa:63:05:52:ff:03:f8:fb:b6:1d:4b:fb:de:
5a:75:c2:32:c7:af:d6:62:be:26:2b:54:19:95:08:98:10:fd:
eb:a2:11:aa:d3:35:bd:cf:be:54:c2:cf:d2:03:da:78:6a:f6:
fb:14:db:e8:0d:db:59:3e:e5:d2:75:ea:42:7c:0c:b7:74:4b:
92:44:bd:43:46:70:7d:fc:4c:4b:b2:43:c1:95:84:e7:15:8c:
72:3d:93:ce:7d:dd:82:b7:7e:a7:0b:d0:80:5d:33:f5:da:7b:
08:7d:74:15:af:05:f1:92:51:a4:49:d4:ea:8f:de:70:16:5d:
54:8a:9b:b4:a5:c2:b4:82:f0:50:77:ee:38:28:db:bb:d0:da:
0c:17:a5:b6:f0:e1:7d:32:8e:37:5c:35:91:2b:f8:ae:f2:28:
ee:04:5d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 11:56:59 2026 by rpki-client