Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.mft
File: aLf4F6tRQbXhOCgM32GQFmu5y4c.mft (raw, json)
Hash identifier: RDxK2R1AVdhbRZVBmJKW0nEB71/IizydWDTVVnVmGLg=
Subject key identifier: 80:68:E3:53:97:B8:46:4A:AD:85:D2:3A:17:9B:6F:8D:AA:8D:2B:21
Authority key identifier: 68:B7:F8:17:AB:51:41:B5:E1:38:28:0C:DF:61:90:16:6B:B9:CB:87
Certificate issuer: /CN=68b7f817ab5141b5e138280cdf6190166bb9cb87
Certificate serial: 01A1084A6EAECBC533E79CFE5F58162A9B46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLf4F6tRQbXhOCgM32GQFmu5y4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.mft
Manifest number: 1A89
Signing time: Sun 04 Oct 2026 19:00:57 +0000
Manifest this update: Sun 04 Oct 2026 19:00:57 +0000
Manifest next update: Mon 05 Oct 2026 19:00:57 +0000
Files and hashes: 1: aLf4F6tRQbXhOCgM32GQFmu5y4c.crl (hash: gluDVB8ZVWsVlrnrzlKt7M3zFIy/9pa/x1v0mocrNoA=)
2: dwxKXYq5F0w7--7RCrBYQ23c5iY.roa (hash: K/Q42vj3khDPlWwooNw7J1cFttbzhnLd2GjnJonXf1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/aLf4F6tRQbXhOCgM32GQFmu5y4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 19:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:4a:6e:ae:cb:c5:33:e7:9c:fe:5f:58:16:2a:9b:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b7f817ab5141b5e138280cdf6190166bb9cb87
Validity
Not Before: Oct 4 19:00:57 2026 GMT
Not After : Oct 5 19:00:57 2026 GMT
Subject: CN=8068e35397b8464aad85d23a179b6f8daa8d2b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b1:10:a3:5f:b7:de:a2:fa:fe:63:f2:9f:19:
19:00:d2:3b:15:2b:a4:fa:cb:c0:06:af:6d:14:8e:
f8:70:9c:a0:53:e8:d7:d9:27:0a:8c:82:cb:2e:fe:
83:47:63:92:3e:73:ad:8f:ae:ae:55:af:db:2e:d6:
11:e0:49:80:89:91:b1:4d:f2:58:eb:06:5b:91:c2:
1e:f5:d8:09:74:39:d5:90:60:7e:d1:dc:03:fb:a0:
34:d5:12:45:6d:23:7f:35:13:bf:13:1b:e3:3c:6c:
31:1b:49:30:25:6b:47:a1:00:01:d3:7d:0a:27:65:
e2:37:a0:1b:0e:a9:65:4f:ad:53:88:64:64:1d:15:
de:90:6a:60:9e:a8:28:47:30:7f:05:50:cc:b1:84:
c3:f6:6a:f8:b7:bc:dd:18:89:62:6c:61:de:27:bc:
77:06:e8:ff:65:d7:d7:c4:3f:f8:7b:59:d5:38:71:
c3:cd:ac:63:4e:a7:8a:7d:d6:b2:36:ee:a3:61:7b:
ba:ec:20:41:b6:88:98:2f:d3:b6:d4:b1:00:ae:06:
a3:68:08:c3:80:4e:2d:4a:65:e6:92:19:b1:7d:13:
11:62:5b:58:cd:92:33:8d:f2:26:5c:a6:87:2d:3b:
76:e5:e9:d2:58:8a:88:32:0f:c7:15:2c:35:ee:01:
39:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:68:E3:53:97:B8:46:4A:AD:85:D2:3A:17:9B:6F:8D:AA:8D:2B:21
X509v3 Authority Key Identifier:
keyid:68:B7:F8:17:AB:51:41:B5:E1:38:28:0C:DF:61:90:16:6B:B9:CB:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLf4F6tRQbXhOCgM32GQFmu5y4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:20:3c:d7:7e:bb:29:84:bf:02:16:ef:23:5e:e6:37:5d:32:
c0:26:bb:18:f6:b5:b6:e4:9a:88:0e:c3:5f:d7:4c:ea:15:23:
bb:34:e0:9e:2b:d2:5f:6f:c4:3f:3a:dd:d4:20:3a:f9:b1:f9:
82:d8:47:55:e5:65:79:a1:80:c5:a1:93:5f:71:1f:a3:f0:5e:
ef:38:3c:f3:62:a1:19:61:a8:de:0e:03:6d:ca:0c:91:4b:f1:
95:75:9e:0e:fd:66:07:10:c5:01:3f:51:7f:3e:c7:79:d0:9b:
b0:4b:df:61:7f:9c:b7:f7:86:38:9f:66:52:89:30:b2:89:e8:
83:63:77:a9:f7:f2:7c:33:10:26:55:5d:e7:f6:08:8f:ed:76:
c0:52:25:97:37:85:27:7f:bc:01:1d:fb:9f:5f:7e:97:2f:f1:
c8:14:15:25:2c:01:27:d1:ea:cb:de:bd:27:d5:08:ff:33:39:
1f:4c:ac:ea:28:fd:98:65:87:fb:5c:5f:f7:48:e7:8f:8d:28:
7a:72:ef:db:5a:99:29:f8:91:d4:8b:92:fe:2c:c1:95:98:c7:
18:c2:d9:08:09:8e:8f:9e:82:95:54:9a:39:f2:6a:2c:80:9e:
8b:ea:7c:d1:7f:ba:f4:d6:58:84:63:b1:03:7a:0f:d0:02:74:
27:19:0c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:48:29 2026 by rpki-client