Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/aL0515MSXGhN_ycviGIrrEMhgPA.mft
File: aL0515MSXGhN_ycviGIrrEMhgPA.mft (raw, json)
Hash identifier: 4wMrnS8dziGopFPUfqapBrx8hlQdQJVoK24gUccnUro=
Subject key identifier: 0D:8E:19:34:3B:EF:00:67:A5:97:BF:BE:3E:A1:D5:47:8B:0E:8C:91
Authority key identifier: 68:BD:39:D7:93:12:5C:68:4D:FF:27:2F:88:62:2B:AC:43:21:80:F0
Certificate issuer: /CN=68bd39d793125c684dff272f88622bac432180f0
Certificate serial: 019D26CD485FE8E5059561DA2B2DC2D974C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aL0515MSXGhN_ycviGIrrEMhgPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/aL0515MSXGhN_ycviGIrrEMhgPA.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 21:01:20 +0000
Manifest this update: Wed 25 Mar 2026 21:01:20 +0000
Manifest next update: Thu 26 Mar 2026 21:01:20 +0000
Files and hashes: 1: aL0515MSXGhN_ycviGIrrEMhgPA.crl (hash: bC39l9a4D2d2Dq05vEgZhKP8/j9iUfkPnHfvlx8LYQY=)
2: oi4g4l999AP6onKm27Ed-wdQpPs.roa (hash: I8WiOuarlTLTaPl9Rt0sGmGw4q5pBrI5UJKZRMtdZkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/aL0515MSXGhN_ycviGIrrEMhgPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/aL0515MSXGhN_ycviGIrrEMhgPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aL0515MSXGhN_ycviGIrrEMhgPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:48:5f:e8:e5:05:95:61:da:2b:2d:c2:d9:74:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68bd39d793125c684dff272f88622bac432180f0
Validity
Not Before: Mar 25 21:01:20 2026 GMT
Not After : Mar 26 21:01:20 2026 GMT
Subject: CN=0d8e19343bef0067a597bfbe3ea1d5478b0e8c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ed:4a:04:5a:a5:42:1a:29:98:4d:97:20:48:
63:3d:b5:c4:ff:79:8b:0d:b0:20:e8:b0:75:7a:ee:
1b:a9:27:a0:7f:7d:34:81:d6:c9:24:3f:80:bb:92:
b0:a0:20:89:65:3e:69:4c:4f:df:fe:92:d0:0c:83:
d7:40:e3:14:a8:b9:01:80:8a:fb:04:be:39:0d:3d:
c3:a6:63:f6:10:8e:27:9b:72:aa:b4:c1:91:a9:fd:
f9:d3:3e:8b:72:d8:ec:4c:ea:36:49:07:92:6b:c7:
95:6b:e4:f8:17:6d:10:89:a1:64:6a:d7:69:33:24:
fb:df:43:31:5e:e7:fc:d2:6d:74:c4:0c:63:f1:03:
12:dd:0a:6b:ac:d7:36:b5:8d:0f:76:ca:9c:74:68:
dc:f6:b2:33:31:e7:b1:9f:0d:f0:4f:1b:18:43:3f:
c1:ba:d7:19:bd:86:75:c4:02:5f:75:0c:8e:99:42:
69:5c:15:12:22:02:88:67:ef:c9:94:c6:2d:66:23:
01:ba:7f:7b:d0:ce:3b:ff:bf:38:81:b6:01:c6:60:
54:74:68:4f:33:09:45:71:12:32:f3:b5:9d:65:91:
17:6f:2a:62:f7:42:53:82:85:3b:8e:23:19:e7:47:
7d:45:97:e6:0f:60:a5:4e:e6:89:b8:94:05:12:b1:
a9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:8E:19:34:3B:EF:00:67:A5:97:BF:BE:3E:A1:D5:47:8B:0E:8C:91
X509v3 Authority Key Identifier:
keyid:68:BD:39:D7:93:12:5C:68:4D:FF:27:2F:88:62:2B:AC:43:21:80:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aL0515MSXGhN_ycviGIrrEMhgPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/aL0515MSXGhN_ycviGIrrEMhgPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/aL0515MSXGhN_ycviGIrrEMhgPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:dd:09:c5:3a:72:9c:00:ab:27:13:d1:45:58:16:a2:3e:d2:
ba:0d:c6:9f:99:90:1e:b5:35:1d:67:f6:b9:c2:b6:b1:f3:06:
5b:55:df:6b:34:46:ed:f2:f6:19:6a:ab:af:4e:41:56:19:2f:
f6:f2:29:3e:a1:0c:17:56:65:65:bf:40:bd:d8:11:f9:b8:73:
5b:93:0b:56:15:83:74:7e:75:2b:23:de:a8:d2:da:9a:54:9a:
a0:96:18:a6:57:66:cb:60:38:ca:61:b5:d1:ee:b7:4b:b1:0f:
6f:72:7a:e7:d2:7f:f6:09:92:31:bb:d1:a9:bb:ea:bb:22:69:
3c:92:43:6c:a1:0f:33:4e:a6:bc:c9:69:82:85:01:3d:67:90:
52:df:f3:f4:4e:5b:ca:5c:9d:14:b7:08:84:ab:b5:07:24:ef:
99:d6:cd:6c:1a:0c:80:5f:a3:ee:70:e2:83:c1:0a:94:39:42:
c3:df:54:23:43:b6:b3:6d:04:55:15:41:7a:8e:b6:05:f3:ce:
00:6d:9b:ff:12:41:7d:3d:48:f7:a1:66:67:99:28:d4:fa:b7:
ae:c0:11:31:98:4f:77:16:d4:8b:af:69:be:6a:3e:44:66:1e:
15:79:14:66:84:92:60:6f:96:61:7b:83:dc:00:69:be:34:49:
88:3e:8c:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzUhf6OUFlWHaKy3C2XTGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YmQzOWQ3OTMxMjVjNjg0ZGZmMjcyZjg4NjIyYmFjNDMy
MTgwZjAwHhcNMjYwMzI1MjEwMTIwWhcNMjYwMzI2MjEwMTIwWjAzMTEwLwYDVQQD
EygwZDhlMTkzNDNiZWYwMDY3YTU5N2JmYmUzZWExZDU0NzhiMGU4YzkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAou1KBFqlQhopmE2XIEhjPbXE/3mL
DbAg6LB1eu4bqSegf300gdbJJD+Au5KwoCCJZT5pTE/f/pLQDIPXQOMUqLkBgIr7
BL45DT3DpmP2EI4nm3KqtMGRqf350z6LctjsTOo2SQeSa8eVa+T4F20QiaFkatdp
MyT730MxXuf80m10xAxj8QMS3QprrNc2tY0PdsqcdGjc9rIzMeexnw3wTxsYQz/B
utcZvYZ1xAJfdQyOmUJpXBUSIgKIZ+/JlMYtZiMBun970M47/784gbYBxmBUdGhP
MwlFcRIy87WdZZEXbypi90JTgoU7jiMZ50d9RZfmD2ClTuaJuJQFErGp8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA2OGTQ77wBnpZe/vj6h1UeLDoyRMB8GA1UdIwQY
MBaAFGi9OdeTElxoTf8nL4hiK6xDIYDwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUwwNTE1TVNYR2hOX3ljdmlHSXJyRU1oZ1BBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy80MjRiOTQtZTcwMi00YjIyLWFlMmUt
MDg5MDUyMGI4ODQ2LzEvYUwwNTE1TVNYR2hOX3ljdmlHSXJyRU1oZ1BBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy80MjRiOTQtZTcwMi00YjIyLWFlMmUtMDg5MDUyMGI4ODQ2
LzEvYUwwNTE1TVNYR2hOX3ljdmlHSXJyRU1oZ1BBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwd0JxTpy
nACrJxPRRVgWoj7Sug3Gn5mQHrU1HWf2ucK2sfMGW1XfazRG7fL2GWqrr05BVhkv
9vIpPqEMF1ZlZb9AvdgR+bhzW5MLVhWDdH51KyPeqNLamlSaoJYYpldmy2A4ymG1
0e63S7EPb3J659J/9gmSMbvRqbvquyJpPJJDbKEPM06mvMlpgoUBPWeQUt/z9E5b
ylydFLcIhKu1ByTvmdbNbBoMgF+j7nDig8EKlDlCw99UI0O2s20EVRVBeo62BfPO
AG2b/xJBfT1I96FmZ5ko1Pq3rsARMZhPdxbUi69pvmo+RGYeFXkUZoSSYG+WYXuD
3ABpvjRJiD6MQA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:10 2026 by rpki-client