
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
File: rlAYJxRKMYi-oczuWGVv1kKdj5U.mft (raw, json)
Hash identifier: TuwzueelCB7kWuuXaFOnMXrmml7XnaA3JGqLtJWT+G4=
Subject key identifier: 0D:90:94:F5:A7:9D:EC:F3:09:28:71:EF:07:1F:98:97:A7:D8:6C:5E
Authority key identifier: AE:50:18:27:14:4A:31:88:BE:A1:CC:EE:58:65:6F:D6:42:9D:8F:95
Certificate issuer: /CN=ae501827144a3188bea1ccee58656fd6429d8f95
Certificate serial: 019F1453E8643361825BFC9902D7343B7A17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rlAYJxRKMYi-oczuWGVv1kKdj5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
Manifest number: 198B
Signing time: Mon 29 Jun 2026 17:01:10 +0000
Manifest this update: Mon 29 Jun 2026 17:01:10 +0000
Manifest next update: Tue 30 Jun 2026 17:01:10 +0000
Files and hashes: 1: dNleK7oqqS4JYOVbb6S3XLVUiBA.roa (hash: eOgBYtYMR3J+l0721Hpv5YsWUbXa/qSUakud5H58TI8=)
2: rlAYJxRKMYi-oczuWGVv1kKdj5U.crl (hash: Ab9VL/yFWnj2OSRJ5kUC60rMUa+BhkHjYDzG0q9xgXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/rlAYJxRKMYi-oczuWGVv1kKdj5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 14:12:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:14:53:e8:64:33:61:82:5b:fc:99:02:d7:34:3b:7a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae501827144a3188bea1ccee58656fd6429d8f95
Validity
Not Before: Jun 29 17:01:10 2026 GMT
Not After : Jun 30 17:01:10 2026 GMT
Subject: CN=0d9094f5a79decf3092871ef071f9897a7d86c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1a:90:df:6f:c6:7e:25:c8:80:ff:10:a8:55:
04:93:69:83:10:7c:22:73:88:b4:ab:55:4c:d7:f4:
80:67:10:62:90:84:b1:0d:ab:ee:64:59:44:c2:69:
c2:ca:d4:a7:7d:14:c6:5f:f0:0d:5d:eb:09:6a:a3:
c8:63:05:b2:af:d8:a9:cb:4d:fb:95:eb:5d:e0:18:
7a:00:71:63:10:3f:3e:ad:48:f3:ec:1f:4a:5f:38:
41:00:c7:16:0a:84:74:e1:e0:a2:7f:74:ed:2a:0b:
07:be:8f:39:f2:3d:06:40:65:1c:28:fa:55:78:32:
3d:ee:8e:a9:db:83:c3:7b:9a:a8:33:ce:03:bd:90:
24:2f:7e:d1:25:9d:db:4d:70:c3:fa:2f:32:0f:be:
98:12:57:6b:01:e6:e3:47:1d:0f:d5:ea:f8:86:a8:
27:07:aa:15:4c:23:24:7a:cf:6f:ce:5e:3c:e1:af:
47:66:30:5c:e0:69:96:f8:69:7f:b3:5f:1c:94:f7:
f4:1c:30:fb:1e:73:65:ae:08:26:1b:0d:f4:d6:b0:
ad:5d:f6:59:bc:a8:59:c7:cf:d9:2a:ba:19:53:c8:
5f:df:93:0a:03:f0:7c:ea:2f:9a:e7:84:2e:93:a7:
56:a4:c9:cd:0f:51:c9:e3:40:c0:75:08:77:d2:83:
8b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:90:94:F5:A7:9D:EC:F3:09:28:71:EF:07:1F:98:97:A7:D8:6C:5E
X509v3 Authority Key Identifier:
keyid:AE:50:18:27:14:4A:31:88:BE:A1:CC:EE:58:65:6F:D6:42:9D:8F:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlAYJxRKMYi-oczuWGVv1kKdj5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:e2:37:ef:53:d1:ab:24:76:85:7d:1a:6d:01:68:ee:7b:da:
b2:de:1a:17:41:32:a0:d8:0e:81:9c:ac:89:7d:85:97:2a:f1:
7a:81:d8:f5:3f:b3:7d:2a:a5:e4:99:0a:d6:6f:39:53:82:ad:
3a:f3:88:32:1e:f3:56:75:15:fa:be:9c:fb:85:3b:80:aa:63:
2d:3a:63:9d:f6:25:8a:a8:50:ab:04:b8:09:d7:9d:9f:22:c8:
db:54:f0:ca:18:31:e0:cd:99:67:03:d4:7f:ef:9d:59:1d:62:
a1:28:d2:a4:25:9f:90:b2:4a:21:3d:a6:5b:6f:fa:01:22:89:
17:04:4f:2d:68:51:bc:dc:02:4a:3e:e9:fd:3b:e2:77:04:1d:
4b:0a:e1:e4:10:35:e4:54:e6:30:f2:07:73:47:89:06:90:47:
f3:55:ae:54:91:1f:7b:ce:d1:47:bd:1f:eb:08:90:02:8d:88:
65:24:d3:e6:a8:ce:7f:8a:c3:b7:8e:f5:38:70:48:a2:f5:7f:
9d:12:50:4a:6c:16:a8:1b:13:c2:56:d7:72:ea:64:ba:a9:fc:
32:5b:34:bb:f7:07:a9:71:d0:4d:ec:1c:71:bc:a9:cd:30:7f:
f8:ed:65:e9:b8:07:fa:52:1c:6b:b9:19:50:6c:5f:c0:13:29:
73:0d:59:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 00:29:46 2026 by rpki-client