Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
File: aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft (raw, json)
Hash identifier: ieAW/fy3acBVatNeC2P6AM5sU4Ojs+MVWmzZW9VF1Qk=
Subject key identifier: 57:C9:7F:02:6D:CA:E7:46:D5:3C:10:75:42:ED:FB:6B:00:33:53:40
Authority key identifier: 68:BD:10:F1:B1:4B:BB:27:67:FF:DC:AE:C4:B4:17:28:80:BA:46:1A
Certificate issuer: /CN=68bd10f1b14bbb2767ffdcaec4b4172880ba461a
Certificate serial: 019E1DFE62966C48D12599A0CF6DD4614EF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
Manifest number: 0E31
Signing time: Tue 12 May 2026 21:01:10 +0000
Manifest this update: Tue 12 May 2026 21:01:10 +0000
Manifest next update: Wed 13 May 2026 21:01:10 +0000
Files and hashes: 1: S04NKU0J13eA6-TGQ2BZfun47ys.roa (hash: xIlFQJwTJx7ez8Zx99ToD2cR7A/Ipyz0mMaGV2drzPQ=)
2: aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl (hash: u/wFn51fNvzozaakt5U7CCHFdtgYqWi+L4LzphOwvoM=)
3: rJKcaNGOpOiZ0iciVQt-oX04cPI.roa (hash: BT7ocoNehLiRKdELBQmLzdxfWaOUS/P7hDDrN7lDDSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:62:96:6c:48:d1:25:99:a0:cf:6d:d4:61:4e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68bd10f1b14bbb2767ffdcaec4b4172880ba461a
Validity
Not Before: May 12 21:01:10 2026 GMT
Not After : May 13 21:01:10 2026 GMT
Subject: CN=57c97f026dcae746d53c107542edfb6b00335340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:77:3d:71:eb:a7:4d:0c:be:f8:4e:0f:80:55:
4f:79:ed:50:1c:c5:87:fc:8c:e0:8f:85:d5:59:14:
5c:2d:65:2d:c9:59:9d:7e:9b:e7:7d:44:29:0b:a8:
c1:94:cb:d0:2f:f0:0f:c1:cd:77:56:12:a5:7d:f9:
7d:d7:58:69:d5:f4:00:8d:52:d1:ed:27:81:f2:ca:
72:60:46:ce:79:21:c0:06:e2:48:49:1d:35:28:77:
da:9a:8b:0f:fb:b3:81:3b:1e:a8:8e:f2:b0:6c:c1:
3c:26:65:29:c1:6f:de:87:be:f9:38:86:09:30:e0:
ce:f9:d4:0e:bd:9a:78:8f:5d:d6:9b:99:e9:f3:77:
e0:db:ed:8d:53:8b:9c:5f:21:4b:d8:43:4c:69:dc:
37:d5:92:e3:4f:1b:31:4c:cb:18:7c:80:67:4f:15:
f1:94:db:90:9a:e7:68:18:a7:c7:58:07:d2:8f:fd:
5d:97:9d:57:7a:fa:6f:6f:63:8d:37:f6:d0:04:79:
1b:db:de:1a:d5:6f:ff:4a:2c:72:01:49:4e:fc:f1:
0b:85:4a:9c:56:a3:3a:96:c6:87:05:67:47:e2:2c:
2e:94:1d:84:a0:37:c9:1a:be:3f:52:f4:f0:92:ea:
57:8b:98:05:be:04:d6:9f:08:5f:75:2b:c1:be:dc:
a0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C9:7F:02:6D:CA:E7:46:D5:3C:10:75:42:ED:FB:6B:00:33:53:40
X509v3 Authority Key Identifier:
keyid:68:BD:10:F1:B1:4B:BB:27:67:FF:DC:AE:C4:B4:17:28:80:BA:46:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:79:a3:86:25:2b:12:3c:8c:eb:74:c4:7a:e9:6b:3e:06:5a:
1c:1b:8a:2c:d5:f5:06:c3:57:12:17:84:5c:3b:f9:f1:a1:7d:
7e:27:28:f3:e9:16:d2:ef:5c:95:1d:37:3a:ef:1b:db:bf:95:
63:71:e6:a5:36:d1:94:07:c8:84:61:20:6b:ee:9c:f8:82:37:
8a:39:6e:0e:92:4e:da:73:21:61:76:d5:f4:d2:c0:7f:79:fb:
73:cc:69:a7:43:cd:f6:93:e7:c9:e4:05:16:96:8e:fb:31:8b:
83:ff:4e:64:e4:d4:dc:ab:79:21:9c:13:e0:b2:2b:51:63:4d:
a7:ee:b9:10:ce:08:b5:c9:40:f9:6a:94:59:f0:fa:da:f5:1c:
e0:d4:1f:c8:29:2a:93:ce:de:ef:5b:c6:82:f5:66:6c:f0:60:
17:de:42:66:0c:83:94:c1:39:d8:30:2f:d4:e8:b8:d0:ea:3e:
bc:44:51:ad:a5:6c:d2:91:e7:e3:5c:25:d0:19:4e:6c:3a:8a:
af:ed:26:6e:27:17:63:e2:58:31:b2:f8:14:0f:8e:71:cb:ec:
d1:4f:24:92:30:0b:a9:1d:92:d5:8d:24:4f:b7:ef:15:12:dd:
64:df:31:8b:c9:92:7d:47:cc:f9:20:52:c4:f4:b8:36:46:00:
60:f1:ef:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:13:43 2026 by rpki-client