Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft
File: aLReYLH18sssYUoANB6BmW2U0TQ.mft (raw, json)
Hash identifier: VnJw6vY0i9bwPAVss4/aHjvso/ouvcxtDGDMpcqipEg=
Subject key identifier: 84:61:4C:20:FB:99:B3:54:3F:9E:8C:28:0D:39:6E:D4:41:63:F2:18
Authority key identifier: 68:B4:5E:60:B1:F5:F2:CB:2C:61:4A:00:34:1E:81:99:6D:94:D1:34
Certificate issuer: /CN=68b45e60b1f5f2cb2c614a00341e81996d94d134
Certificate serial: 019D27A919B6D6F392201084264B6D2D32F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLReYLH18sssYUoANB6BmW2U0TQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft
Manifest number: 0567
Signing time: Thu 26 Mar 2026 01:01:26 +0000
Manifest this update: Thu 26 Mar 2026 01:01:26 +0000
Manifest next update: Fri 27 Mar 2026 01:01:26 +0000
Files and hashes: 1: IIK_PCi18i4nJOHS2yy-kPNRbU8.roa (hash: aOKFLng/u9P5owW+nSLDrOFMq+zEl4wTq8j05LITn5g=)
2: aLReYLH18sssYUoANB6BmW2U0TQ.crl (hash: sitvU0YsuOA+H0MNt+LdlelGc7wIBDxpULxEYuFavoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aLReYLH18sssYUoANB6BmW2U0TQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:19:b6:d6:f3:92:20:10:84:26:4b:6d:2d:32:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b45e60b1f5f2cb2c614a00341e81996d94d134
Validity
Not Before: Mar 26 01:01:26 2026 GMT
Not After : Mar 27 01:01:26 2026 GMT
Subject: CN=84614c20fb99b3543f9e8c280d396ed44163f218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8b:ab:e4:a6:08:5d:c2:6b:38:79:08:3f:41:
d8:a5:5b:5f:61:cd:98:d3:4a:b7:94:a7:a4:5d:12:
4b:e4:d0:e9:ff:77:30:82:5d:cf:ef:f3:89:67:e4:
6e:b0:dc:4f:d4:e2:50:91:1a:28:4c:17:ce:a4:7e:
54:8f:c1:e2:a7:ee:f0:ff:37:9b:0a:d0:23:e6:86:
e1:d7:42:32:2b:ef:45:c0:ea:46:4a:31:90:24:31:
ce:0a:88:32:83:ab:2b:5b:b1:4f:17:38:51:ba:e8:
f0:1e:8f:08:57:a0:28:67:17:d1:b7:9d:40:bb:ca:
8a:d9:9d:13:88:5a:74:c9:73:cc:2e:65:6f:a1:ac:
e2:31:5d:5c:74:0d:cc:dc:b8:0b:4d:c6:27:72:34:
ee:89:09:c2:dc:19:88:34:2a:8f:d0:8c:6c:84:ce:
7f:37:09:1a:66:81:38:57:41:35:ac:96:56:5d:bd:
f7:91:92:bc:85:0b:0c:18:a3:31:9f:68:79:0f:8f:
d1:7e:e8:12:37:77:39:00:14:95:bb:71:78:ce:c1:
48:29:a3:f7:10:e3:25:04:6d:06:f4:f4:df:e6:07:
af:33:1e:75:14:1e:cf:cd:63:d9:14:5f:d8:2c:33:
8c:cb:99:20:b6:df:fc:b0:e6:c9:0e:95:c9:73:0e:
88:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:61:4C:20:FB:99:B3:54:3F:9E:8C:28:0D:39:6E:D4:41:63:F2:18
X509v3 Authority Key Identifier:
keyid:68:B4:5E:60:B1:F5:F2:CB:2C:61:4A:00:34:1E:81:99:6D:94:D1:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLReYLH18sssYUoANB6BmW2U0TQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:82:61:e7:28:cf:a8:6a:ce:37:e3:2f:99:51:d0:01:07:3d:
98:3c:81:bb:45:0e:76:79:e3:b3:7d:aa:89:9a:fc:f6:2d:5f:
eb:fa:bf:fa:ef:df:50:df:9d:de:7f:99:98:ea:97:df:a0:9d:
53:9c:c4:68:2c:65:2d:b6:5d:ac:99:d7:f7:d6:81:8f:35:c3:
13:69:4e:de:82:a6:45:85:c3:57:f9:7d:db:70:a8:40:d4:f9:
a2:9e:5e:08:31:f7:7e:17:77:2b:7b:d0:f1:f8:f7:c7:72:d2:
02:b8:16:98:57:ff:5a:a6:f6:11:f6:7f:e5:15:89:3a:e3:f9:
ed:11:23:31:88:b7:a9:da:a9:85:c9:69:9e:ff:ae:11:f5:0a:
38:bf:14:23:63:ec:ba:4c:10:2b:52:9e:d2:21:41:93:1b:bf:
96:72:8d:1d:b2:f7:e5:2e:59:24:f4:4d:0a:95:d7:0c:17:1e:
f2:b0:d5:8b:62:79:7f:27:da:0b:a8:21:65:cb:bf:ae:b5:95:
e1:02:ee:89:37:75:3f:1b:49:57:23:58:02:fa:74:d0:a3:27:
5a:eb:2b:25:d6:39:1a:c3:0a:c8:29:99:8c:27:e5:8e:c6:70:
a3:83:10:3c:ac:fa:e4:1a:8e:cc:7a:fc:02:63:b5:35:f8:90:
26:b1:92:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqRm21vOSIBCEJkttLTLwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YjQ1ZTYwYjFmNWYyY2IyYzYxNGEwMDM0MWU4MTk5NmQ5
NGQxMzQwHhcNMjYwMzI2MDEwMTI2WhcNMjYwMzI3MDEwMTI2WjAzMTEwLwYDVQQD
Eyg4NDYxNGMyMGZiOTliMzU0M2Y5ZThjMjgwZDM5NmVkNDQxNjNmMjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsour5KYIXcJrOHkIP0HYpVtfYc2Y
00q3lKekXRJL5NDp/3cwgl3P7/OJZ+RusNxP1OJQkRooTBfOpH5Uj8Hip+7w/zeb
CtAj5obh10IyK+9FwOpGSjGQJDHOCogyg6srW7FPFzhRuujwHo8IV6AoZxfRt51A
u8qK2Z0TiFp0yXPMLmVvoaziMV1cdA3M3LgLTcYncjTuiQnC3BmINCqP0IxshM5/
NwkaZoE4V0E1rJZWXb33kZK8hQsMGKMxn2h5D4/RfugSN3c5ABSVu3F4zsFIKaP3
EOMlBG0G9PTf5gevMx51FB7PzWPZFF/YLDOMy5kgtt/8sObJDpXJcw6IRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIRhTCD7mbNUP56MKA05btRBY/IYMB8GA1UdIwQY
MBaAFGi0XmCx9fLLLGFKADQegZltlNE0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUxSZVlMSDE4c3NzWVVvQU5CNkJtVzJVMFRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8wODdhNTYtMGM2My00NzM4LTk5ZmMt
ZTNjNTViYjc3MjhlLzEvYUxSZVlMSDE4c3NzWVVvQU5CNkJtVzJVMFRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8wODdhNTYtMGM2My00NzM4LTk5ZmMtZTNjNTViYjc3Mjhl
LzEvYUxSZVlMSDE4c3NzWVVvQU5CNkJtVzJVMFRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZIJh5yjP
qGrON+MvmVHQAQc9mDyBu0UOdnnjs32qiZr89i1f6/q/+u/fUN+d3n+ZmOqX36Cd
U5zEaCxlLbZdrJnX99aBjzXDE2lO3oKmRYXDV/l923CoQNT5op5eCDH3fhd3K3vQ
8fj3x3LSArgWmFf/Wqb2EfZ/5RWJOuP57REjMYi3qdqphclpnv+uEfUKOL8UI2Ps
ukwQK1Ke0iFBkxu/lnKNHbL35S5ZJPRNCpXXDBce8rDVi2J5fyfaC6ghZcu/rrWV
4QLuiTd1PxtJVyNYAvp00KMnWusrJdY5GsMKyCmZjCfljsZwo4MQPKz65BqOzHr8
AmO1NfiQJrGSbw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:44 2026 by rpki-client