Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.mft
File: alQ3DEupveK5g3a_j5QqlJJsFRk.mft (raw, json)
Hash identifier: JBhIzRMCUh8Y0vDA0kPCUA7psPS/ez/XnNMPbe+e7x8=
Subject key identifier: 70:D9:B7:A7:CE:27:83:80:33:B2:0C:BC:75:82:C2:A9:94:04:BF:D6
Authority key identifier: 6A:54:37:0C:4B:A9:BD:E2:B9:83:76:BF:8F:94:2A:94:92:6C:15:19
Certificate issuer: /CN=6a54370c4ba9bde2b98376bf8f942a94926c1519
Certificate serial: 019D296128730F185B17E577F4C36348D261
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alQ3DEupveK5g3a_j5QqlJJsFRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.mft
Manifest number: 057B
Signing time: Thu 26 Mar 2026 09:02:06 +0000
Manifest this update: Thu 26 Mar 2026 09:02:06 +0000
Manifest next update: Fri 27 Mar 2026 09:02:06 +0000
Files and hashes: 1: alQ3DEupveK5g3a_j5QqlJJsFRk.crl (hash: HhTXLRqHVKTZ9NUFBFzlPT6cVbkwmttxoIt9q9fJtUA=)
2: qW9AF__zUvkNDM1hwnTXNbw4MmE.roa (hash: L8YbidEFG/0Uh1hABI0PUB51vRjUgh6q12O5a/Ue0jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/alQ3DEupveK5g3a_j5QqlJJsFRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:28:73:0f:18:5b:17:e5:77:f4:c3:63:48:d2:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a54370c4ba9bde2b98376bf8f942a94926c1519
Validity
Not Before: Mar 26 09:02:06 2026 GMT
Not After : Mar 27 09:02:06 2026 GMT
Subject: CN=70d9b7a7ce27838033b20cbc7582c2a99404bfd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:97:e7:7b:40:d4:0a:a9:36:67:64:3f:16:09:
30:4f:0a:cd:99:58:04:1f:63:9a:95:ab:d2:b3:27:
0c:72:76:19:16:09:c1:38:b0:b7:20:3a:34:d8:c3:
7f:17:45:b3:e9:05:d6:4c:4e:a0:90:03:a7:7a:c8:
03:bf:d1:73:ec:9f:c5:03:53:13:f9:fd:65:ee:be:
b0:3b:1c:72:b7:bb:00:7c:31:06:4a:6b:32:3c:21:
24:ba:3c:ea:25:b8:6d:fa:52:af:ab:b6:72:f4:16:
28:dd:2e:67:bf:ba:ec:38:cd:02:93:10:81:57:1e:
45:5c:a4:f8:76:8d:5d:a9:ef:29:f3:94:b4:50:e4:
51:dc:6e:39:2b:43:c0:ff:28:ec:87:21:f8:3d:95:
b2:da:dc:60:de:00:8d:11:21:30:52:d8:a6:7e:15:
b6:b2:d4:b6:56:c9:c6:7b:1b:19:62:11:cb:7e:ad:
df:10:cd:7c:84:dc:ba:da:0c:e3:3e:4f:55:ae:6d:
fc:00:16:4b:2d:1d:7a:22:9f:e4:ba:b6:25:79:a1:
de:59:5c:ef:24:f8:e7:37:f3:18:9f:08:5c:77:16:
22:b0:49:31:27:f7:0a:2d:f4:21:a5:da:d3:53:d0:
40:ad:fe:84:01:eb:05:10:56:db:4f:4d:69:41:f7:
44:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D9:B7:A7:CE:27:83:80:33:B2:0C:BC:75:82:C2:A9:94:04:BF:D6
X509v3 Authority Key Identifier:
keyid:6A:54:37:0C:4B:A9:BD:E2:B9:83:76:BF:8F:94:2A:94:92:6C:15:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alQ3DEupveK5g3a_j5QqlJJsFRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:50:d3:af:fe:3c:f0:83:2e:c5:f7:05:03:a8:f5:9b:4f:47:
c4:24:d4:a2:12:17:10:8d:c0:e8:cb:ee:d1:b5:88:87:f2:93:
d4:88:7d:c3:cc:7b:53:a5:16:79:00:d2:2d:f8:87:2f:f3:1f:
ca:76:e1:60:ed:51:59:7e:ba:01:bc:b4:cd:b0:27:a0:9d:1e:
29:9c:f3:c5:9b:01:a8:64:83:9b:02:8b:db:57:e3:50:87:cf:
e0:ad:95:26:21:a2:7d:e7:d8:c2:c8:f8:89:a3:9b:0a:dd:14:
71:4b:73:fa:9d:91:a7:1a:4c:0f:6b:8b:fb:14:da:f8:d6:bf:
10:24:b0:15:52:5a:f8:1e:b9:22:01:d4:84:59:a0:34:4a:fd:
88:75:9c:14:72:62:4c:ff:8f:70:83:fd:eb:35:35:f4:c3:28:
c8:82:ab:1d:ff:6b:63:da:75:a3:5f:e3:4c:54:22:8c:44:0f:
09:e3:2e:c8:6e:4b:97:95:ef:f1:27:62:e3:b8:6b:99:a3:84:
dc:0e:58:6b:65:dd:31:9f:16:01:c5:f5:0e:5c:c5:2e:0b:50:
3d:e7:1e:2e:c4:5e:dd:9c:08:38:ad:bf:14:c5:32:d0:9e:a9:
e7:c6:2a:00:eb:35:95:98:51:1e:42:ac:55:7b:75:c1:1d:8d:
29:17:2e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:16:26 2026 by rpki-client