Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
File: aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft (raw, json)
Hash identifier: 1DA/zGsZSPNnDecJTI5XxyhUvex6Jx80LBZ1SIRo6k4=
Subject key identifier: 9C:5A:D9:08:50:CD:66:D1:BC:61:69:23:28:DC:8C:E1:9B:06:0D:1B
Authority key identifier: 68:B2:2E:EA:4A:4A:3B:81:65:4A:22:7E:DA:94:E0:E7:59:37:B0:15
Certificate issuer: /CN=68b22eea4a4a3b81654a227eda94e0e75937b015
Certificate serial: 01A17770EEA140D229E7D22AEED1B40F847F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
Manifest number: 168B
Signing time: Mon 26 Oct 2026 09:00:51 +0000
Manifest this update: Mon 26 Oct 2026 09:00:51 +0000
Manifest next update: Tue 27 Oct 2026 09:00:51 +0000
Files and hashes: 1: Rc3F-GHPtna2uoaeYmvRb-dnnrw.roa (hash: O6ngTo5TuDQj2qWilyUQS84tY6mMFLMkzqiBF36kpVY=)
2: aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl (hash: JmLl9hpSsjgSiaLkNXbfVWI8901h0uJb+KPyFor9U2s=)
3: iQgCqwK7l4P2GKdSjJc-dEwoUDE.roa (hash: 6ZaHwDSQPPYhJ5ldPXpCjzOWcdqBA9Sc4lSpH6CyEmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 09:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:70:ee:a1:40:d2:29:e7:d2:2a:ee:d1:b4:0f:84:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b22eea4a4a3b81654a227eda94e0e75937b015
Validity
Not Before: Oct 26 09:00:51 2026 GMT
Not After : Oct 27 09:00:51 2026 GMT
Subject: CN=9c5ad90850cd66d1bc61692328dc8ce19b060d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e0:34:8f:b7:86:b6:03:47:ab:7f:c4:90:aa:
f2:4d:f8:8a:87:1b:ef:31:15:39:0b:06:bf:27:c2:
96:95:21:9c:ce:40:4c:5e:12:31:e2:6d:49:f4:8a:
99:58:35:f2:8d:74:eb:22:8e:06:c9:e4:f6:97:da:
9f:28:9f:01:b6:c4:dd:e6:e6:70:ce:ef:1e:e8:6f:
7b:1e:df:c4:16:0d:21:cf:de:e4:ce:ce:01:ac:4e:
37:37:55:82:b4:78:fe:1b:e6:0c:92:02:7f:51:67:
00:5f:c4:1a:4b:91:72:06:b3:aa:09:61:ab:bb:bc:
1c:80:9c:88:85:bc:75:07:1d:32:96:da:19:29:69:
d1:62:c3:e1:a9:31:39:f4:cf:d6:1f:f9:61:63:ee:
9c:a2:c3:04:12:9f:bc:88:94:9e:72:03:71:c2:cb:
aa:fe:b9:e1:8b:2f:1c:96:5d:e6:db:d5:8c:f7:d7:
79:eb:0c:8c:fb:91:25:3e:02:f9:d9:17:7b:29:9c:
b1:42:d0:d2:47:30:86:37:6a:ca:df:fb:b1:21:af:
7d:ee:dc:9d:74:91:db:d4:93:c6:39:99:56:ac:4f:
dc:8f:d3:50:73:ea:30:35:10:6c:01:71:67:16:cb:
c9:2d:23:8a:7a:38:9d:24:b8:d4:6f:2e:9f:b7:57:
4e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:5A:D9:08:50:CD:66:D1:BC:61:69:23:28:DC:8C:E1:9B:06:0D:1B
X509v3 Authority Key Identifier:
keyid:68:B2:2E:EA:4A:4A:3B:81:65:4A:22:7E:DA:94:E0:E7:59:37:B0:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:9b:f3:d2:8b:d7:06:a1:7a:3a:22:a6:83:d0:90:2a:23:f1:
76:09:a4:62:07:bf:b6:25:be:f6:04:e6:82:70:c2:a9:ec:03:
8a:91:10:60:fb:6e:b0:33:e6:b0:97:cc:75:fb:c9:37:74:30:
39:5b:bd:2e:26:a4:3f:51:17:67:34:fb:e1:98:23:57:12:e5:
6b:c2:33:89:a6:d5:01:ce:56:79:76:e6:6b:05:3f:ad:c1:dc:
33:28:c2:70:7e:28:b5:b6:b7:1f:01:32:ac:5c:b0:a5:68:ba:
49:54:0f:74:21:fd:0e:27:d3:38:a8:35:54:5f:3d:b7:1d:8b:
aa:6e:4e:a7:28:f4:f9:85:6d:8d:81:90:56:1e:be:cb:90:0d:
26:aa:3f:3a:ae:e9:07:b6:5a:e4:61:57:ef:ef:14:82:d9:46:
00:c2:f1:7e:31:1d:54:c4:a2:82:60:69:de:e3:c9:b5:55:62:
98:a9:80:31:33:4d:e8:17:7e:c9:aa:c5:ec:d9:a8:e0:cb:e8:
99:3b:37:46:d1:cd:9d:da:c8:60:5d:78:05:7c:16:47:60:85:
39:a7:c3:be:3f:9a:89:d9:f1:71:8c:5b:97:15:ce:7f:ea:a4:
7a:ce:0b:31:cb:e8:21:03:01:90:94:9a:99:4b:d2:eb:e7:86:
92:44:43:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 19:02:54 2026 by rpki-client