Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.mft
File: aLf4F6tRQbXhOCgM32GQFmu5y4c.mft (raw, json)
Hash identifier: QU0YgLVU7PLhJ+2k/UvScplA9CDTybc/j6nji8XbZzo=
Subject key identifier: 3D:10:12:D8:6B:F5:4B:56:93:D0:B7:E6:7C:B2:71:11:86:C4:0F:BE
Authority key identifier: 68:B7:F8:17:AB:51:41:B5:E1:38:28:0C:DF:61:90:16:6B:B9:CB:87
Certificate issuer: /CN=68b7f817ab5141b5e138280cdf6190166bb9cb87
Certificate serial: 019F9391DF05BE7DF22C4C1A67964C47EDFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLf4F6tRQbXhOCgM32GQFmu5y4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 10:00:38 +0000
Manifest this update: Fri 24 Jul 2026 10:00:38 +0000
Manifest next update: Sat 25 Jul 2026 10:00:38 +0000
Files and hashes: 1: aLf4F6tRQbXhOCgM32GQFmu5y4c.crl (hash: olyIrRNTqC9UgEdhus3tcvUho4PBzXHjtJNUoNhbhgM=)
2: dwxKXYq5F0w7--7RCrBYQ23c5iY.roa (hash: K/Q42vj3khDPlWwooNw7J1cFttbzhnLd2GjnJonXf1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/aLf4F6tRQbXhOCgM32GQFmu5y4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:df:05:be:7d:f2:2c:4c:1a:67:96:4c:47:ed:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b7f817ab5141b5e138280cdf6190166bb9cb87
Validity
Not Before: Jul 24 10:00:38 2026 GMT
Not After : Jul 25 10:00:38 2026 GMT
Subject: CN=3d1012d86bf54b5693d0b7e67cb2711186c40fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d5:cb:13:18:c6:c8:62:c2:8b:31:ba:32:a4:
29:da:39:19:e5:70:f0:9c:df:e2:3c:f2:1e:9a:b7:
a3:80:ff:ca:14:d6:95:53:58:df:09:2c:a2:55:d5:
10:15:f9:53:3d:a6:89:99:61:4c:00:06:93:83:9e:
5c:2c:ae:bc:02:9a:68:e3:74:5a:c5:0c:89:a4:f9:
9b:f4:f6:48:6e:7c:2b:75:7d:cb:ca:48:31:d7:6e:
a8:8d:74:dd:6b:71:e7:29:6e:3d:68:cb:a0:9c:95:
bf:e4:78:f7:4a:b5:7d:f4:56:fb:f0:a6:b2:6a:a6:
f1:20:79:08:ca:8a:7f:5c:0d:35:c9:6f:29:74:a9:
37:a0:b8:f7:4d:0d:da:69:5a:c0:87:7f:3b:5b:e7:
f5:e0:da:a0:5d:c4:03:d4:66:b1:40:84:1c:1a:a7:
a7:14:b3:13:1a:0c:3d:40:da:f6:34:d8:f6:e1:11:
95:1b:56:d5:91:86:f9:76:d0:ce:5e:a8:3b:df:43:
5d:8c:db:75:bd:d5:bf:14:18:86:85:7f:bf:62:cf:
5f:0c:3c:b5:7c:f1:89:49:6d:a5:0c:33:7b:a4:4f:
9d:60:1f:b7:77:e4:e4:c9:60:3e:5c:5f:cc:3f:19:
08:e7:6b:39:40:48:b0:24:10:e7:31:cf:3e:3c:5b:
1f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:10:12:D8:6B:F5:4B:56:93:D0:B7:E6:7C:B2:71:11:86:C4:0F:BE
X509v3 Authority Key Identifier:
keyid:68:B7:F8:17:AB:51:41:B5:E1:38:28:0C:DF:61:90:16:6B:B9:CB:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLf4F6tRQbXhOCgM32GQFmu5y4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:b8:b6:ac:cb:e6:61:9d:34:cc:09:6f:5a:c2:7a:5a:a2:76:
ee:95:75:26:6c:92:f6:4b:33:1e:3e:75:ff:f9:81:26:e8:37:
37:59:f0:4a:d7:74:7a:fa:47:ae:0f:b8:a3:40:d5:d5:c0:d8:
c0:2e:75:6c:f7:d2:06:54:4c:6b:73:6f:9b:dc:9e:0f:70:a3:
d9:f0:3d:f1:02:cc:a7:0d:4c:f8:a4:5c:3c:33:25:bd:1c:41:
a1:dd:9a:b7:dc:f7:c4:28:d4:26:c7:b5:9a:d0:0d:d8:05:6c:
9e:7f:64:b5:23:34:ad:fe:00:0b:28:02:0a:cb:e2:2e:bc:06:
a2:5c:5b:8a:d2:0c:d7:64:1b:65:48:3b:cf:7f:c1:d0:e0:bd:
78:21:3c:a9:e2:5f:7d:32:a6:bf:d9:ab:ff:88:53:18:9d:67:
09:78:e4:d7:4c:ac:19:d6:0c:38:32:74:4a:8b:d4:b7:52:17:
2b:3f:cc:cb:c9:6e:da:23:37:52:50:58:ee:08:6d:20:c0:b9:
bc:c8:33:8c:59:68:d2:f8:6b:a5:be:4f:1d:ea:7a:60:f9:31:
69:cd:a4:a4:cf:95:13:d5:00:75:f0:83:bf:d5:21:6b:08:5c:
ea:7e:70:94:5c:48:97:67:63:2f:d2:82:8c:9c:43:c8:71:d5:
b8:cc:a8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:05:45 2026 by rpki-client