Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/d02b32-967d-4751-82d3-121a14a9a40e/1/aLw5QAVdFXTyY7X5arCQDGu0xfk.mft
File: aLw5QAVdFXTyY7X5arCQDGu0xfk.mft (raw, json)
Hash identifier: 4yR5WEKwWAvR+obga/wHydYXv0iyOxAA5nBpX/8ropU=
Subject key identifier: 29:2A:B9:5E:D7:CB:76:BA:6E:54:3C:14:D5:10:E3:77:70:ED:BC:6A
Authority key identifier: 68:BC:39:40:05:5D:15:74:F2:63:B5:F9:6A:B0:90:0C:6B:B4:C5:F9
Certificate issuer: /CN=68bc3940055d1574f263b5f96ab0900c6bb4c5f9
Certificate serial: 019F90FF08B5C11167E44B3DE85EC6CE21FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLw5QAVdFXTyY7X5arCQDGu0xfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/d02b32-967d-4751-82d3-121a14a9a40e/1/aLw5QAVdFXTyY7X5arCQDGu0xfk.mft
Manifest number: 0732
Signing time: Thu 23 Jul 2026 22:01:00 +0000
Manifest this update: Thu 23 Jul 2026 22:01:00 +0000
Manifest next update: Fri 24 Jul 2026 22:01:00 +0000
Files and hashes: 1: BcT1YlHw7D1Dk2z_LIFmn3rThJY.roa (hash: Eovd3kGKSBHE8soZjKT4R8yDeoxnP/onLhr4NTs+e6o=)
2: aLw5QAVdFXTyY7X5arCQDGu0xfk.crl (hash: 8Ec9PJvhuedpMk4FQew8Ia9h2yw9bcP58UEKsRPCAuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/d02b32-967d-4751-82d3-121a14a9a40e/1/aLw5QAVdFXTyY7X5arCQDGu0xfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/d02b32-967d-4751-82d3-121a14a9a40e/1/aLw5QAVdFXTyY7X5arCQDGu0xfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aLw5QAVdFXTyY7X5arCQDGu0xfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:08:b5:c1:11:67:e4:4b:3d:e8:5e:c6:ce:21:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68bc3940055d1574f263b5f96ab0900c6bb4c5f9
Validity
Not Before: Jul 23 22:01:00 2026 GMT
Not After : Jul 24 22:01:00 2026 GMT
Subject: CN=292ab95ed7cb76ba6e543c14d510e37770edbc6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1d:e1:86:8a:6c:c7:72:3b:d9:15:74:16:5d:
a0:b1:83:28:b9:31:0f:a7:fe:dd:6b:71:24:fd:8a:
0c:b7:bf:b6:1c:87:4e:51:e7:cd:aa:6b:cd:44:16:
ab:2c:7a:22:b9:50:27:cb:40:3c:a5:fc:48:45:dd:
02:18:8a:54:f3:50:f8:f9:7e:a8:d3:b0:a0:7e:cf:
77:3e:c8:d0:11:75:65:d1:bc:eb:e3:a4:d4:5b:95:
c3:d7:a1:3b:d7:9b:90:00:7d:eb:c6:81:92:24:66:
3a:5b:70:8e:7b:61:85:5e:d2:fe:e1:41:23:69:07:
2e:a4:01:a6:55:f8:dd:e2:0c:23:d8:2c:f3:95:da:
0f:5b:c7:3d:23:2e:d7:2f:22:a1:a4:5b:96:e0:57:
04:56:f0:fa:13:e6:9e:0a:53:fe:60:88:4e:6f:33:
8c:35:ec:41:66:44:fe:46:5b:3e:f3:b4:98:3c:9f:
93:43:33:c5:a9:42:5d:1c:d8:4d:72:90:dc:ba:ff:
8b:35:ec:40:9b:1e:dc:da:4c:6f:f7:9f:39:09:52:
5d:5c:53:02:0e:c7:c6:7e:5d:4d:fe:be:50:dd:90:
79:ed:95:40:77:87:25:99:21:3f:4c:8a:ea:eb:e5:
02:3f:27:3e:a9:da:ce:ae:24:61:da:83:26:94:0c:
4d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:2A:B9:5E:D7:CB:76:BA:6E:54:3C:14:D5:10:E3:77:70:ED:BC:6A
X509v3 Authority Key Identifier:
keyid:68:BC:39:40:05:5D:15:74:F2:63:B5:F9:6A:B0:90:0C:6B:B4:C5:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLw5QAVdFXTyY7X5arCQDGu0xfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/d02b32-967d-4751-82d3-121a14a9a40e/1/aLw5QAVdFXTyY7X5arCQDGu0xfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/d02b32-967d-4751-82d3-121a14a9a40e/1/aLw5QAVdFXTyY7X5arCQDGu0xfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:e6:a2:03:8b:c5:e9:5c:b1:e0:3b:82:2d:97:f8:92:55:b1:
03:f2:c6:a6:34:89:61:af:5a:db:fb:21:9b:1e:ff:1c:e5:59:
78:ad:cb:78:cd:07:5c:10:4d:2d:99:63:69:a4:b7:a6:07:37:
a5:8a:61:76:52:05:14:ed:8d:83:39:d3:a7:94:33:27:2f:87:
1a:69:ef:eb:93:12:2c:1a:13:d2:89:b0:e5:3a:42:f0:29:ea:
ca:0b:ac:94:c3:37:75:5f:da:0a:36:ee:df:79:8f:8f:5f:ae:
39:89:80:b0:52:f1:f0:e5:70:08:e4:04:b4:1c:80:2b:f8:0a:
59:11:1c:cd:42:49:76:1f:7b:d1:3a:90:85:63:9c:35:86:62:
ab:8f:31:3d:2d:a8:56:d1:4f:5d:2c:7a:55:3a:02:8b:2a:b3:
ee:08:a2:64:50:5e:ff:74:6b:0d:d9:c7:29:83:f9:85:f9:6f:
b1:1b:0d:80:8c:75:ec:96:83:a7:d9:af:87:63:43:a4:7d:95:
c4:fe:a5:b4:70:63:10:48:2c:87:0d:41:9d:95:17:d0:c7:17:
78:03:6f:cd:81:49:25:73:be:6a:76:12:22:e9:06:74:a2:c3:
5c:71:12:33:ff:86:95:0f:84:53:4d:fa:87:01:44:28:b1:6c:
cc:51:bb:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:19:06 2026 by rpki-client