Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
File: aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft (raw, json)
Hash identifier: IO5XLE9DFC9yc7stuGDySAc9msiHYSW9HY8qkqPZdUQ=
Subject key identifier: B8:34:DE:5A:B7:B5:99:80:A7:2E:05:9F:F9:55:7D:78:97:70:04:C3
Authority key identifier: 68:B2:2E:EA:4A:4A:3B:81:65:4A:22:7E:DA:94:E0:E7:59:37:B0:15
Certificate issuer: /CN=68b22eea4a4a3b81654a227eda94e0e75937b015
Certificate serial: 019DCCE1C5708C739C816B4F97E07C1BB4CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
Manifest number: 14A5
Signing time: Mon 27 Apr 2026 03:00:41 +0000
Manifest this update: Mon 27 Apr 2026 03:00:41 +0000
Manifest next update: Tue 28 Apr 2026 03:00:41 +0000
Files and hashes: 1: Rc3F-GHPtna2uoaeYmvRb-dnnrw.roa (hash: O6ngTo5TuDQj2qWilyUQS84tY6mMFLMkzqiBF36kpVY=)
2: aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl (hash: H2SyY4Dqop11ihTTnW0/gNp1qWafzPS1VHeY7VimMDs=)
3: iQgCqwK7l4P2GKdSjJc-dEwoUDE.roa (hash: 6ZaHwDSQPPYhJ5ldPXpCjzOWcdqBA9Sc4lSpH6CyEmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:e1:c5:70:8c:73:9c:81:6b:4f:97:e0:7c:1b:b4:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b22eea4a4a3b81654a227eda94e0e75937b015
Validity
Not Before: Apr 27 03:00:41 2026 GMT
Not After : Apr 28 03:00:41 2026 GMT
Subject: CN=b834de5ab7b59980a72e059ff9557d78977004c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9c:8a:c3:86:f3:e8:b9:6f:1e:de:8b:8a:dc:
82:d7:72:62:36:da:4b:27:0f:44:2d:6a:ec:6f:c5:
8d:ca:cb:3d:16:e6:f4:11:6f:9b:a6:98:f4:3a:e7:
cc:19:96:73:9e:32:23:92:6f:1b:87:e7:8b:3f:a3:
33:02:75:29:59:90:33:85:ee:a7:92:ed:e2:cf:99:
3d:50:50:da:2a:17:cb:a7:c2:76:62:b5:bc:0b:f7:
ac:68:db:b6:24:16:38:2d:36:1a:4a:f9:ec:32:8e:
db:38:cb:16:26:c5:8a:d5:b2:99:86:1b:e6:5d:35:
fc:d7:ca:53:b8:ff:52:cb:bb:b2:53:4b:61:6d:a9:
35:70:5c:8b:cd:cd:dd:22:a3:c0:7f:bf:5a:e5:41:
21:a8:51:18:7b:da:7c:ec:9f:f9:f7:3b:46:0d:97:
84:94:2b:c1:11:18:86:a1:e9:b7:2c:9b:5a:85:09:
1a:47:32:46:25:41:bd:6e:18:61:a7:06:cf:47:46:
cc:56:c3:d4:f3:8e:2f:8e:c0:a7:1b:35:22:d7:a2:
ad:3e:df:03:7e:e6:49:60:63:91:de:10:f2:3c:43:
14:3c:d3:da:28:08:ed:cf:38:d9:07:d5:28:e0:c4:
4a:53:26:df:b9:ca:97:96:62:89:25:a8:71:ae:46:
52:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:34:DE:5A:B7:B5:99:80:A7:2E:05:9F:F9:55:7D:78:97:70:04:C3
X509v3 Authority Key Identifier:
keyid:68:B2:2E:EA:4A:4A:3B:81:65:4A:22:7E:DA:94:E0:E7:59:37:B0:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:b6:fd:87:e7:fc:42:63:98:cd:e9:f9:f9:d0:13:fc:9e:d7:
16:48:74:f4:7f:aa:a2:f6:5b:28:05:7c:7d:fb:2f:2e:3f:63:
3d:bd:68:61:02:4a:eb:6e:33:bd:92:7f:93:bd:cd:66:bc:7a:
e9:02:25:ab:99:22:ba:26:1c:90:2e:21:e6:6b:73:c2:58:d1:
03:3a:c8:2b:6f:2d:3e:f4:9b:0f:89:d4:1c:f3:11:d2:29:e9:
43:61:12:62:30:c5:5f:4a:a4:01:1c:62:45:6e:6b:ab:d5:4a:
d3:b8:9d:95:dc:e8:11:e2:25:25:cf:c3:77:77:72:c4:af:68:
30:5f:2d:bb:16:31:0c:98:1f:88:9d:10:70:35:a1:4d:2f:c8:
1b:b8:1e:5f:39:6f:82:b4:46:78:e9:88:2a:55:21:67:28:70:
7a:ad:71:f8:37:c0:7e:ac:66:d7:d7:b0:08:7f:62:98:4c:83:
2f:85:d3:70:3b:6c:21:dd:fd:a3:f4:24:14:8e:eb:d6:2d:c6:
89:4b:b6:07:34:ec:6e:0b:3d:bb:69:ba:da:99:b1:3b:8c:07:
be:51:3d:30:61:64:74:2a:73:96:ca:db:7a:16:ce:39:28:cc:
05:a2:48:05:f2:58:3d:d5:2c:c1:08:3b:5a:ab:b0:f4:c4:9a:
e3:8e:f0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 12:38:48 2026 by rpki-client