Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
File: aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft (raw, json)
Hash identifier: OQ5N5pF34McXln95mi2Xr0f/jTyHXsSwN95Bf0yIO98=
Subject key identifier: EB:4F:9E:1B:74:CD:B4:D0:DF:8F:5E:00:74:9A:A7:4F:01:33:39:87
Authority key identifier: 68:B2:2E:EA:4A:4A:3B:81:65:4A:22:7E:DA:94:E0:E7:59:37:B0:15
Certificate issuer: /CN=68b22eea4a4a3b81654a227eda94e0e75937b015
Certificate serial: 01A089E7817A5846B9D676A88A022368A840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
Manifest number: 1610
Signing time: Thu 10 Sep 2026 06:00:45 +0000
Manifest this update: Thu 10 Sep 2026 06:00:45 +0000
Manifest next update: Fri 11 Sep 2026 06:00:45 +0000
Files and hashes: 1: Rc3F-GHPtna2uoaeYmvRb-dnnrw.roa (hash: O6ngTo5TuDQj2qWilyUQS84tY6mMFLMkzqiBF36kpVY=)
2: aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl (hash: 43BS1JLXvGsZDwlUFOCAA9AUVHQ/ac5g9xKfO/bBn24=)
3: iQgCqwK7l4P2GKdSjJc-dEwoUDE.roa (hash: 6ZaHwDSQPPYhJ5ldPXpCjzOWcdqBA9Sc4lSpH6CyEmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:e7:81:7a:58:46:b9:d6:76:a8:8a:02:23:68:a8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b22eea4a4a3b81654a227eda94e0e75937b015
Validity
Not Before: Sep 10 06:00:45 2026 GMT
Not After : Sep 11 06:00:45 2026 GMT
Subject: CN=eb4f9e1b74cdb4d0df8f5e00749aa74f01333987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:87:c4:bb:ea:88:94:fe:53:aa:28:46:9a:6c:
25:11:76:c8:94:95:01:72:d2:73:c1:af:47:19:4d:
81:0d:17:10:09:63:1f:c5:af:34:25:7b:1d:a2:be:
83:ae:e2:cc:1e:77:de:48:d1:41:aa:2a:8f:ce:46:
99:7e:e3:6c:1e:53:99:ab:f3:7d:96:61:e8:b4:dc:
8b:da:f1:44:3e:56:53:07:9a:5f:26:e2:47:3d:82:
9a:a5:be:7d:27:a7:dc:a4:7b:3b:9c:fa:91:cd:c7:
72:49:be:74:4b:cb:6c:90:7f:13:ad:28:fc:c2:ac:
01:df:b6:7f:f4:86:e2:4d:9f:fe:06:b7:97:2c:1d:
8c:22:11:74:7a:15:47:ce:26:e8:5c:0b:94:e4:79:
41:02:bb:10:20:13:79:66:ae:f4:bf:90:dd:e0:93:
96:da:81:32:18:1e:17:03:3a:db:d0:db:2e:0e:1e:
fc:bb:cb:d6:15:98:a4:6c:e5:69:cd:dd:75:a8:18:
41:ae:de:97:bd:62:da:2a:c3:cf:0a:86:a8:7c:7b:
05:73:ce:7f:58:cd:95:30:66:ac:5f:1f:7b:c9:75:
c5:e1:5e:28:a1:ae:91:05:49:7e:26:7c:18:3c:3c:
b1:12:aa:c0:0e:ba:bd:1b:b8:a4:a3:82:24:e8:0b:
87:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:4F:9E:1B:74:CD:B4:D0:DF:8F:5E:00:74:9A:A7:4F:01:33:39:87
X509v3 Authority Key Identifier:
keyid:68:B2:2E:EA:4A:4A:3B:81:65:4A:22:7E:DA:94:E0:E7:59:37:B0:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:72:6f:9a:d1:78:c6:0c:08:94:fd:34:b8:ab:72:c7:83:04:
1d:ad:ac:f1:55:03:9a:53:db:ff:92:9d:b8:a2:dd:5c:a5:76:
09:ac:05:50:db:40:f9:80:e1:32:3b:f4:59:2f:7e:ea:cd:04:
aa:d2:2f:c7:c2:3b:54:6c:74:4c:e8:7e:63:19:73:4d:e4:d3:
96:e6:97:88:b5:76:1c:fe:52:35:aa:bf:93:b3:33:e4:63:1c:
8c:86:ed:1e:e2:bb:3a:16:e9:6b:48:44:38:9b:f5:db:44:56:
72:85:75:47:0c:41:65:f7:e2:0f:a5:a7:e0:e5:81:da:83:be:
d5:0f:32:f5:bb:80:9c:e1:c7:98:df:ae:03:55:43:4e:17:dc:
10:1b:b7:22:0f:af:13:d8:59:39:db:00:a7:7d:7f:cc:ee:84:
0f:3b:21:35:4e:c0:e4:24:2c:fb:2c:8e:ff:b4:5d:e9:f8:64:
69:53:2a:4d:30:83:c7:db:5a:82:ef:bb:9c:b0:e3:16:cf:21:
61:4c:5c:f0:b7:4d:fc:d8:ee:06:08:ed:cf:3b:39:19:e9:38:
e2:4a:e0:e4:c5:d6:4c:90:ec:67:9b:5d:be:29:7e:5f:08:ce:
a2:62:a9:06:3b:b1:e4:aa:75:c1:e3:2b:e1:56:ab:0f:19:cd:
e3:1c:b8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:28:03 2026 by rpki-client