Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft
File: aLReYLH18sssYUoANB6BmW2U0TQ.mft (raw, json)
Hash identifier: GzAietpbuLFH3eh4wBXk48T0aHgGyUrRjfqvO/61+oQ=
Subject key identifier: 92:74:0F:58:B5:56:EB:4D:68:F8:5A:3D:67:0C:7C:F3:93:9F:FF:21
Authority key identifier: 68:B4:5E:60:B1:F5:F2:CB:2C:61:4A:00:34:1E:81:99:6D:94:D1:34
Certificate issuer: /CN=68b45e60b1f5f2cb2c614a00341e81996d94d134
Certificate serial: 019D390A6169EAE4E2D6CAF2635C0A7F3D74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLReYLH18sssYUoANB6BmW2U0TQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft
Manifest number: 0570
Signing time: Sun 29 Mar 2026 10:01:14 +0000
Manifest this update: Sun 29 Mar 2026 10:01:14 +0000
Manifest next update: Mon 30 Mar 2026 10:01:14 +0000
Files and hashes: 1: IIK_PCi18i4nJOHS2yy-kPNRbU8.roa (hash: aOKFLng/u9P5owW+nSLDrOFMq+zEl4wTq8j05LITn5g=)
2: aLReYLH18sssYUoANB6BmW2U0TQ.crl (hash: zVZ3cRJl08Qjvnfzy/b92+dSxkWnJ7/7OYhzZ3oTu7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aLReYLH18sssYUoANB6BmW2U0TQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:61:69:ea:e4:e2:d6:ca:f2:63:5c:0a:7f:3d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b45e60b1f5f2cb2c614a00341e81996d94d134
Validity
Not Before: Mar 29 10:01:14 2026 GMT
Not After : Mar 30 10:01:14 2026 GMT
Subject: CN=92740f58b556eb4d68f85a3d670c7cf3939fff21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e9:78:3b:6e:a4:de:a9:82:c8:5a:16:0a:d6:
95:09:bc:90:dd:66:c7:28:78:fa:29:f5:6e:56:57:
ab:1b:49:81:dd:34:53:f8:d1:7e:d0:5b:c6:34:f0:
2b:26:89:9e:b4:1a:46:1f:46:42:29:8e:db:4c:ec:
13:0c:d6:72:18:3c:b5:35:38:bc:aa:5a:9b:3f:23:
f3:f2:98:d1:36:bd:d2:5a:d2:99:58:31:c0:6a:fe:
d4:29:8a:32:34:a8:6a:b6:43:ba:da:76:8a:2d:4d:
63:9b:56:4d:6a:a5:b0:25:f9:77:b0:18:1c:93:9c:
b6:3e:2a:45:53:18:db:e5:33:9b:88:e3:de:3d:9d:
8d:34:3b:3d:35:88:17:ea:5b:34:46:13:8f:77:21:
51:78:4e:27:50:74:1a:d7:82:78:24:4a:83:fa:a0:
74:95:7f:71:7f:8c:03:0d:7d:c9:03:b6:5a:08:a1:
12:28:91:b5:95:ec:98:26:7a:61:44:72:2e:33:86:
b0:a7:6f:5e:1e:e5:8a:aa:7e:a1:95:84:12:bf:d9:
4b:f0:94:46:b8:68:03:9d:af:27:2d:99:7a:ee:ec:
5c:90:72:41:1f:86:25:59:e7:c2:c4:ca:b9:1c:da:
5d:3b:30:c4:b1:83:23:3b:6b:91:77:bd:72:43:09:
5a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:74:0F:58:B5:56:EB:4D:68:F8:5A:3D:67:0C:7C:F3:93:9F:FF:21
X509v3 Authority Key Identifier:
keyid:68:B4:5E:60:B1:F5:F2:CB:2C:61:4A:00:34:1E:81:99:6D:94:D1:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLReYLH18sssYUoANB6BmW2U0TQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:a2:c9:60:1e:61:58:48:70:61:35:8c:23:3b:1e:60:f1:7e:
8d:e6:81:fe:7b:dc:f3:aa:bb:bd:02:2c:9f:e0:84:5a:0e:86:
eb:c7:6c:49:a9:93:b7:7a:6b:8b:0f:75:e6:0d:12:68:81:6c:
de:6e:a7:7b:18:31:56:35:f3:09:cf:9c:e9:5d:a0:5f:cc:89:
73:d9:47:0e:12:34:19:a3:e7:42:72:b1:cb:4a:ed:d6:79:21:
33:22:42:69:9a:3a:d4:fc:16:a5:65:fe:e2:a3:00:00:f6:bf:
d2:5a:e2:0f:b1:20:3c:48:89:b7:5c:96:aa:a4:24:17:91:e2:
1a:7c:98:61:a6:6a:53:04:23:3f:36:e8:3d:11:c8:4f:23:c6:
68:5d:3c:e8:f1:58:c6:f3:cd:2f:63:fa:aa:b3:2e:bd:05:7a:
d5:86:c0:9a:bf:97:0c:da:27:e0:0a:10:94:c8:b5:91:6b:3e:
13:7d:cf:f0:b5:d0:e6:f9:b2:6f:97:ed:fb:8d:bb:b6:cc:14:
e3:10:0d:79:1c:6c:e8:87:79:0c:ca:44:69:d2:aa:9a:06:6c:
73:5b:e5:21:07:e1:cf:39:e8:4d:6a:d6:2e:1b:f6:2e:f8:79:
60:33:ea:0f:30:c1:7a:8c:1d:b1:26:4d:33:fa:60:2f:d2:13:
f6:91:76:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CmFp6uTi1sryY1wKfz10MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YjQ1ZTYwYjFmNWYyY2IyYzYxNGEwMDM0MWU4MTk5NmQ5
NGQxMzQwHhcNMjYwMzI5MTAwMTE0WhcNMjYwMzMwMTAwMTE0WjAzMTEwLwYDVQQD
Eyg5Mjc0MGY1OGI1NTZlYjRkNjhmODVhM2Q2NzBjN2NmMzkzOWZmZjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgel4O26k3qmCyFoWCtaVCbyQ3WbH
KHj6KfVuVlerG0mB3TRT+NF+0FvGNPArJometBpGH0ZCKY7bTOwTDNZyGDy1NTi8
qlqbPyPz8pjRNr3SWtKZWDHAav7UKYoyNKhqtkO62naKLU1jm1ZNaqWwJfl3sBgc
k5y2PipFUxjb5TObiOPePZ2NNDs9NYgX6ls0RhOPdyFReE4nUHQa14J4JEqD+qB0
lX9xf4wDDX3JA7ZaCKESKJG1leyYJnphRHIuM4awp29eHuWKqn6hlYQSv9lL8JRG
uGgDna8nLZl67uxckHJBH4YlWefCxMq5HNpdOzDEsYMjO2uRd71yQwlaDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJJ0D1i1VutNaPhaPWcMfPOTn/8hMB8GA1UdIwQY
MBaAFGi0XmCx9fLLLGFKADQegZltlNE0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUxSZVlMSDE4c3NzWVVvQU5CNkJtVzJVMFRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8wODdhNTYtMGM2My00NzM4LTk5ZmMt
ZTNjNTViYjc3MjhlLzEvYUxSZVlMSDE4c3NzWVVvQU5CNkJtVzJVMFRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8wODdhNTYtMGM2My00NzM4LTk5ZmMtZTNjNTViYjc3Mjhl
LzEvYUxSZVlMSDE4c3NzWVVvQU5CNkJtVzJVMFRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOKLJYB5h
WEhwYTWMIzseYPF+jeaB/nvc86q7vQIsn+CEWg6G68dsSamTt3priw915g0SaIFs
3m6nexgxVjXzCc+c6V2gX8yJc9lHDhI0GaPnQnKxy0rt1nkhMyJCaZo61PwWpWX+
4qMAAPa/0lriD7EgPEiJt1yWqqQkF5HiGnyYYaZqUwQjPzboPRHITyPGaF086PFY
xvPNL2P6qrMuvQV61YbAmr+XDNon4AoQlMi1kWs+E33P8LXQ5vmyb5ft+427tswU
4xANeRxs6Id5DMpEadKqmgZsc1vlIQfhzznoTWrWLhv2Lvh5YDPqDzDBeowdsSZN
M/pgL9IT9pF2Wg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:09 2026 by rpki-client