Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
File: aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft (raw, json)
Hash identifier: NEprRinmdB04N+f+jgh+7DlKuxUg2VUFKB1uKAPwna0=
Subject key identifier: 99:C2:41:B1:E8:50:C8:B8:B4:DF:19:1A:F5:DF:AC:16:4A:EF:E3:74
Authority key identifier: 68:B2:2E:EA:4A:4A:3B:81:65:4A:22:7E:DA:94:E0:E7:59:37:B0:15
Certificate issuer: /CN=68b22eea4a4a3b81654a227eda94e0e75937b015
Certificate serial: 019CE3350E0926455DDAC818C72EB3CA1ED0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
Manifest number: 142C
Signing time: Thu 12 Mar 2026 18:00:30 +0000
Manifest this update: Thu 12 Mar 2026 18:00:30 +0000
Manifest next update: Fri 13 Mar 2026 18:00:30 +0000
Files and hashes: 1: Rc3F-GHPtna2uoaeYmvRb-dnnrw.roa (hash: O6ngTo5TuDQj2qWilyUQS84tY6mMFLMkzqiBF36kpVY=)
2: aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl (hash: S2mrnoUtGpfBIGltZbY481yxBgEcRidNuXzW0frs1KE=)
3: iQgCqwK7l4P2GKdSjJc-dEwoUDE.roa (hash: 6ZaHwDSQPPYhJ5ldPXpCjzOWcdqBA9Sc4lSpH6CyEmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 18:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:35:0e:09:26:45:5d:da:c8:18:c7:2e:b3:ca:1e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b22eea4a4a3b81654a227eda94e0e75937b015
Validity
Not Before: Mar 12 18:00:30 2026 GMT
Not After : Mar 13 18:00:30 2026 GMT
Subject: CN=99c241b1e850c8b8b4df191af5dfac164aefe374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:72:8a:cf:67:d6:d2:25:a5:70:ef:95:ee:52:
63:cc:a5:98:02:eb:75:95:44:ae:1f:57:c2:b7:88:
06:a2:a8:a8:fd:ee:af:b4:e6:ba:0d:75:ed:1c:88:
d1:ca:6c:af:0b:1d:e7:df:44:6d:fc:2c:2a:b8:f3:
0d:e9:61:6a:4e:5f:0f:4a:ef:b0:7a:f2:73:c4:01:
0d:72:35:47:fe:ce:0f:bf:71:1d:97:5c:7e:4a:f3:
39:65:d0:43:be:cb:b6:7b:d6:69:74:9a:47:83:90:
bb:d9:14:a7:df:20:d6:c7:30:bb:b1:8c:29:bc:ff:
7c:52:78:4a:d4:a4:20:e7:8f:ce:2a:73:78:41:c9:
cc:64:a3:94:1b:7a:56:45:3e:91:02:78:41:fe:41:
bd:a9:a0:5f:ac:0d:da:8c:29:50:f4:3f:bb:ea:9b:
e1:54:df:f0:5b:94:86:12:40:2b:31:f3:5f:ff:aa:
f9:4c:ae:6e:ed:8b:3e:0b:23:fa:ee:d1:3f:4c:d0:
2a:97:ec:69:1a:09:98:27:6f:7e:04:ff:1a:32:f0:
b4:71:2b:a2:5a:f5:21:8e:0f:24:12:7f:fd:c6:1e:
ae:1c:8c:05:17:46:dd:bc:aa:03:fb:8a:61:34:a9:
73:b6:33:d9:c0:f0:73:84:80:db:e4:09:40:af:70:
d4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C2:41:B1:E8:50:C8:B8:B4:DF:19:1A:F5:DF:AC:16:4A:EF:E3:74
X509v3 Authority Key Identifier:
keyid:68:B2:2E:EA:4A:4A:3B:81:65:4A:22:7E:DA:94:E0:E7:59:37:B0:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:da:53:2e:25:48:0f:cd:84:bd:8f:9b:f9:0c:e1:9a:e6:be:
68:e2:64:83:a0:b9:25:da:b7:f7:5a:5f:5d:e7:89:07:15:57:
2e:cf:95:dd:78:27:09:1a:1d:64:b9:67:4f:5b:db:10:c1:6e:
f4:b8:18:b6:c3:1a:e9:a1:e9:3c:98:1f:9c:f1:ea:46:71:9d:
e0:55:6d:d5:19:86:48:30:81:2b:5e:06:4a:e2:0c:59:b5:ef:
06:48:2f:de:05:6f:76:21:10:97:01:94:68:a3:53:b8:37:8a:
56:ad:db:a5:99:c6:1e:47:63:48:fa:54:43:5c:ad:8d:39:ae:
4e:ea:30:82:68:fd:64:fd:22:fd:3b:ca:e9:9b:b7:f7:5d:ab:
0d:ec:9a:06:d5:01:1b:4a:25:ea:a5:68:e4:18:4d:4e:af:71:
7a:57:3a:89:6c:c5:a3:de:77:ad:aa:73:10:a6:63:bf:8c:ee:
90:63:d3:e6:8e:b2:07:92:07:08:3f:a7:f3:9e:96:02:7b:ce:
0e:cf:ef:53:cf:23:c7:48:9a:4d:81:25:fa:03:13:fd:ab:37:
55:39:5f:97:77:5c:16:80:0a:34:be:5a:4a:19:ba:a1:01:2b:
47:ca:25:9d:d9:af:d6:a0:46:0c:85:60:f5:e2:94:20:f5:28:
2e:ec:eb:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 03:26:38 2026 by rpki-client