Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
File: aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft (raw, json)
Hash identifier: oztT8GmBl5EJtSfYwgi8UwAchDX2bpk3MmY6k2xTH5Q=
Subject key identifier: 3B:58:E0:7C:C7:4A:4D:AA:51:33:E5:B1:F5:E4:0E:A9:11:8B:10:36
Authority key identifier: 68:B2:2E:EA:4A:4A:3B:81:65:4A:22:7E:DA:94:E0:E7:59:37:B0:15
Certificate issuer: /CN=68b22eea4a4a3b81654a227eda94e0e75937b015
Certificate serial: 019EB68E1D54624AEF61DFEC64822504F7A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
Manifest number: 151E
Signing time: Thu 11 Jun 2026 12:00:27 +0000
Manifest this update: Thu 11 Jun 2026 12:00:27 +0000
Manifest next update: Fri 12 Jun 2026 12:00:27 +0000
Files and hashes: 1: Rc3F-GHPtna2uoaeYmvRb-dnnrw.roa (hash: O6ngTo5TuDQj2qWilyUQS84tY6mMFLMkzqiBF36kpVY=)
2: aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl (hash: 0dLkGOTtv8vc6FFIO7PzIg3v12Y6KzVFn8n3P63+3So=)
3: iQgCqwK7l4P2GKdSjJc-dEwoUDE.roa (hash: 6ZaHwDSQPPYhJ5ldPXpCjzOWcdqBA9Sc4lSpH6CyEmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:8e:1d:54:62:4a:ef:61:df:ec:64:82:25:04:f7:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b22eea4a4a3b81654a227eda94e0e75937b015
Validity
Not Before: Jun 11 12:00:27 2026 GMT
Not After : Jun 12 12:00:27 2026 GMT
Subject: CN=3b58e07cc74a4daa5133e5b1f5e40ea9118b1036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c5:f5:09:db:4a:c7:fc:a3:d0:5a:54:7e:75:
30:2e:60:58:56:20:66:c5:fe:98:86:cf:93:a4:8a:
a7:f9:b9:2c:27:cf:ff:28:e4:1d:37:87:bf:0e:3d:
26:ff:ed:51:43:cd:ce:1d:71:27:63:4d:73:d4:01:
78:fa:31:9c:f8:1c:16:45:f8:cf:d6:46:62:8d:31:
38:65:7e:e6:f1:4e:c3:e8:08:3d:d0:7d:52:56:4a:
79:d3:a2:8e:48:d9:04:b9:a7:54:66:0c:f8:50:8d:
f0:9d:a1:fa:8a:ca:15:dc:55:2b:97:d8:0a:9b:2e:
19:20:75:21:d0:0e:ce:e7:86:77:bd:3f:b9:71:f1:
bd:57:39:0b:a0:94:6a:4e:b8:39:88:ad:5f:9c:c7:
9e:9d:66:ee:7b:99:02:03:f0:c5:9e:2f:bb:21:32:
32:54:b5:e5:19:97:0d:69:ef:13:fb:4d:fa:c9:5c:
df:29:cf:5a:9b:e3:ae:8d:5b:1e:9a:ca:cc:98:67:
91:60:74:6e:e2:e8:b3:cf:b6:27:da:9b:01:c6:f6:
8a:05:2c:b7:03:1a:bd:6f:2b:10:3d:27:c1:fd:1b:
d0:29:16:de:7b:41:14:40:e4:3c:f8:d6:f5:1e:0e:
45:7d:67:db:8a:19:a7:37:d9:d8:18:36:c6:62:77:
cc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:58:E0:7C:C7:4A:4D:AA:51:33:E5:B1:F5:E4:0E:A9:11:8B:10:36
X509v3 Authority Key Identifier:
keyid:68:B2:2E:EA:4A:4A:3B:81:65:4A:22:7E:DA:94:E0:E7:59:37:B0:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:69:62:a8:ce:67:ba:13:75:26:ac:c1:2b:30:d8:01:88:e0:
e3:35:9e:a9:cc:8a:3c:37:9f:f5:41:00:50:10:85:35:3a:d5:
4e:ac:0f:26:c7:30:d6:66:88:d4:07:fc:20:69:04:d2:2b:5d:
60:90:cd:11:6d:27:f6:1f:31:f2:36:2b:df:eb:9e:30:1e:ac:
91:2a:20:d0:c0:d7:25:4b:48:13:3c:24:bf:a5:28:a8:38:d1:
b8:a3:3b:b6:24:90:c5:8a:47:94:ec:5d:48:4d:65:23:4e:61:
6f:07:8a:c0:ca:7f:1e:4e:9f:5b:dc:42:fa:71:69:e6:5f:4a:
1e:9f:8b:bf:39:8d:da:0f:8f:2d:6c:66:7c:e4:b6:0d:d6:21:
c9:d6:45:bd:85:fd:2a:86:57:a8:18:6e:58:33:01:59:7f:a7:
63:42:79:49:1b:7a:50:a9:91:0f:66:58:64:ae:ad:a1:21:01:
e6:92:e2:7b:f2:2d:7b:3f:59:54:9e:48:bd:09:89:c5:e7:9f:
63:3d:96:8f:1e:5d:12:58:67:55:4e:b2:b7:12:86:12:20:22:
b0:fe:4e:79:17:cf:5c:1b:40:1e:a6:dc:de:fa:1e:f0:ff:8e:
1b:dc:41:d3:02:ab:d8:37:d1:04:03:72:ea:d8:fe:f1:5b:7b:
7f:21:bf:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 20:48:22 2026 by rpki-client