Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
File: aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft (raw, json)
Hash identifier: q6erkGoVa1r2GFgQEmldSrFT0vq+qqscl4cToB2iq8o=
Subject key identifier: 5B:04:CD:76:84:4A:BD:0F:0E:0C:DA:D1:35:8F:32:45:E6:2A:ED:F2
Authority key identifier: 68:BD:10:F1:B1:4B:BB:27:67:FF:DC:AE:C4:B4:17:28:80:BA:46:1A
Certificate issuer: /CN=68bd10f1b14bbb2767ffdcaec4b4172880ba461a
Certificate serial: 019D26CD16214FB538B4EF8FB516A871EE9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
Manifest number: 0DB1
Signing time: Wed 25 Mar 2026 21:01:07 +0000
Manifest this update: Wed 25 Mar 2026 21:01:07 +0000
Manifest next update: Thu 26 Mar 2026 21:01:07 +0000
Files and hashes: 1: S04NKU0J13eA6-TGQ2BZfun47ys.roa (hash: xIlFQJwTJx7ez8Zx99ToD2cR7A/Ipyz0mMaGV2drzPQ=)
2: aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl (hash: q+tazZdek9zFLahju4WkdaHUJuJKxdhM8AfyXqsAglA=)
3: rJKcaNGOpOiZ0iciVQt-oX04cPI.roa (hash: BT7ocoNehLiRKdELBQmLzdxfWaOUS/P7hDDrN7lDDSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:16:21:4f:b5:38:b4:ef:8f:b5:16:a8:71:ee:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68bd10f1b14bbb2767ffdcaec4b4172880ba461a
Validity
Not Before: Mar 25 21:01:07 2026 GMT
Not After : Mar 26 21:01:07 2026 GMT
Subject: CN=5b04cd76844abd0f0e0cdad1358f3245e62aedf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:44:f0:c6:d3:ed:ec:b0:57:dc:c2:7c:bd:ae:
e4:ee:b9:ec:84:7e:99:41:14:18:43:18:f1:6f:4e:
81:4b:71:30:a9:b2:d4:8a:16:6b:2e:fb:49:23:75:
31:8b:22:01:99:e0:59:e8:56:a9:da:99:40:99:c9:
f7:a4:4f:34:57:4d:0f:0a:4e:83:02:0c:cd:6b:95:
84:07:02:7e:1b:09:52:60:3c:34:f0:21:ba:6b:77:
a2:89:56:72:65:32:fb:75:2e:a5:90:11:84:ef:41:
2f:3d:91:3f:39:b9:02:90:c8:bd:ca:2e:6b:6d:20:
d8:3d:e3:dd:23:c5:ab:b1:72:18:52:57:18:01:4e:
6e:02:86:b5:39:e0:5e:9d:72:0d:14:65:08:80:b3:
de:94:a3:b1:31:ba:5c:11:70:79:7a:89:93:7c:24:
15:da:80:f7:8d:19:df:f3:68:cd:86:19:d0:56:99:
3c:c7:00:94:1f:6c:97:10:e1:32:6a:86:9a:a5:19:
e4:be:af:5c:86:7f:7b:59:95:49:54:cb:b2:7f:28:
0f:81:f9:7e:a5:5f:32:6c:08:10:20:27:b8:22:12:
59:5d:1e:92:e1:69:3e:30:be:26:fd:c6:cc:40:c9:
cc:61:c7:d0:ff:fc:8d:02:f2:64:0f:99:42:d1:c7:
73:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:04:CD:76:84:4A:BD:0F:0E:0C:DA:D1:35:8F:32:45:E6:2A:ED:F2
X509v3 Authority Key Identifier:
keyid:68:BD:10:F1:B1:4B:BB:27:67:FF:DC:AE:C4:B4:17:28:80:BA:46:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:1d:7b:5c:c7:9e:fb:2b:27:61:db:fb:53:9d:f0:42:aa:5c:
0e:f9:bb:2e:b9:10:23:9e:7b:54:38:33:6d:46:fa:6b:23:19:
8a:3f:38:9a:8a:fb:9e:36:13:96:d4:db:ab:35:6c:4e:cb:08:
c6:4c:60:39:a6:75:5b:26:27:88:5b:9c:29:c8:58:ca:be:26:
b7:d2:2d:8f:d0:4c:46:61:57:c7:6b:7a:ae:0f:28:91:89:12:
c7:d5:db:2f:74:86:b9:9b:00:e0:18:f7:43:16:83:0a:98:00:
96:1f:71:b7:e6:d1:cb:96:c4:13:fb:4c:0e:6b:45:8f:55:01:
77:4b:46:df:f2:6e:be:a7:4c:40:c6:36:72:87:36:a4:fd:17:
c5:3e:9d:9e:2b:e0:81:94:2a:78:7d:6b:f8:85:2b:de:16:3a:
9c:33:92:b2:39:95:b7:3f:83:ea:5a:69:32:90:1b:cb:83:ec:
9f:93:1d:a5:b3:3f:aa:01:d3:ae:60:ec:c2:09:34:a7:ae:3b:
88:d9:c2:6a:bc:ac:f7:90:5d:18:98:80:7a:67:d4:86:00:50:
f4:01:ab:df:43:5e:6f:c0:e5:d4:51:30:ea:5c:46:98:95:eb:
c6:db:53:7d:57:c7:bf:ef:73:04:43:a9:ad:73:ff:c4:52:8b:
be:24:e8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:28:48 2026 by rpki-client