Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.mft
File: aLf4F6tRQbXhOCgM32GQFmu5y4c.mft (raw, json)
Hash identifier: LDVrAUNEN5rm2/MWa7p7rgOMZ64PnV32y4ymDQHipdw=
Subject key identifier: 6B:98:65:C0:0A:46:AA:E9:52:61:92:D2:42:3D:6A:E4:F8:AA:4B:25
Authority key identifier: 68:B7:F8:17:AB:51:41:B5:E1:38:28:0C:DF:61:90:16:6B:B9:CB:87
Certificate issuer: /CN=68b7f817ab5141b5e138280cdf6190166bb9cb87
Certificate serial: 01A1558A506980AF3A82D70E4E4950179D64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLf4F6tRQbXhOCgM32GQFmu5y4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.mft
Manifest number: 1AB1
Signing time: Mon 19 Oct 2026 19:01:30 +0000
Manifest this update: Mon 19 Oct 2026 19:01:30 +0000
Manifest next update: Tue 20 Oct 2026 19:01:30 +0000
Files and hashes: 1: aLf4F6tRQbXhOCgM32GQFmu5y4c.crl (hash: jLLNqgSfk7TWT1QnJ40Hm8Sy0wpGV0avUvphDyj+4bY=)
2: dwxKXYq5F0w7--7RCrBYQ23c5iY.roa (hash: K/Q42vj3khDPlWwooNw7J1cFttbzhnLd2GjnJonXf1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/aLf4F6tRQbXhOCgM32GQFmu5y4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:8a:50:69:80:af:3a:82:d7:0e:4e:49:50:17:9d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b7f817ab5141b5e138280cdf6190166bb9cb87
Validity
Not Before: Oct 19 19:01:30 2026 GMT
Not After : Oct 20 19:01:30 2026 GMT
Subject: CN=6b9865c00a46aae9526192d2423d6ae4f8aa4b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0e:95:10:f3:26:18:ff:d3:eb:52:9c:21:45:
8f:1d:ea:cf:b6:a6:fe:70:cb:29:f7:65:fc:b0:b6:
3a:42:a8:71:96:3a:8a:26:74:84:03:8d:36:f6:19:
d5:19:99:80:20:91:07:4b:28:83:50:ba:e5:69:ea:
57:d5:02:ac:4c:3f:0d:1d:41:73:b1:9c:8e:e0:f2:
ff:3f:9f:d5:0c:64:e2:a7:96:b3:ee:52:c1:da:8d:
de:72:ac:a1:34:97:84:57:3d:a0:ba:53:be:ee:39:
56:7d:62:ae:4f:41:b5:04:5e:b6:94:40:cb:70:09:
39:7d:13:a2:ec:8b:59:00:65:21:f2:a2:0f:c8:ee:
86:31:17:6c:f6:22:37:df:44:28:3d:3f:30:d9:b6:
68:cd:9e:50:23:f2:db:cf:c2:e8:45:9c:ae:74:d1:
23:db:15:df:3e:fd:58:23:16:f3:17:20:ae:16:9f:
43:25:4a:7b:7f:6d:1c:84:47:f6:38:42:d3:84:6a:
0d:ec:bf:73:c5:40:a4:53:07:04:6f:36:a5:c0:5f:
64:08:22:57:a4:fb:85:69:2b:ba:ab:f9:70:63:7a:
0b:92:ac:03:01:19:83:44:85:eb:4c:5a:2a:e7:18:
9e:67:ef:3d:5d:bf:71:ae:5a:35:3c:26:77:2a:ae:
16:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:98:65:C0:0A:46:AA:E9:52:61:92:D2:42:3D:6A:E4:F8:AA:4B:25
X509v3 Authority Key Identifier:
keyid:68:B7:F8:17:AB:51:41:B5:E1:38:28:0C:DF:61:90:16:6B:B9:CB:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLf4F6tRQbXhOCgM32GQFmu5y4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ea:2f:f8:b4:39:c5:9c:4a:ab:8c:bc:08:92:4f:30:bc:a7:
ab:81:20:af:57:24:c0:07:e4:8e:08:5e:a1:15:ca:25:71:1d:
5f:09:9f:1c:40:cc:79:e8:16:79:f6:d7:4d:40:af:58:8e:f1:
c1:11:97:c9:5f:ef:01:fa:71:0b:c2:40:81:5d:d0:ee:ab:2e:
91:68:3f:51:55:95:2e:eb:fc:35:1b:3d:33:bc:42:40:17:38:
5f:f9:9b:3a:8a:bf:80:dd:03:a6:12:ec:42:ea:b3:e4:f2:b1:
a2:ec:a5:68:7e:a3:1c:46:19:41:86:d1:06:e5:3e:20:98:6e:
2c:a0:04:63:7e:e4:70:7f:d4:3f:7f:ec:56:29:4b:88:ee:b0:
97:2e:2a:c6:29:b7:02:5a:16:11:c9:a4:25:78:d2:33:ee:7c:
af:44:77:07:0e:64:f4:f0:24:58:93:30:10:ef:e4:65:e4:f6:
3f:a5:fc:36:79:38:be:f7:43:e0:c4:d9:f8:37:4f:0d:e3:ca:
04:df:7c:60:78:b2:7b:18:82:a7:83:cd:84:9b:32:86:8d:0d:
24:0e:62:e8:9d:c1:80:56:35:f8:22:59:a8:e1:b9:54:93:b7:
6f:aa:40:42:29:e3:7e:5f:50:6b:0d:12:d6:eb:bd:0b:f1:ee:
8e:0b:36:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 23:05:12 2026 by rpki-client