Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
File: aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft (raw, json)
Hash identifier: hcUjkugpQyoWe3vKYyOgh3/F0UiFHOEUetuTySW8Yv0=
Subject key identifier: 9F:AF:BB:0A:19:C8:FF:00:09:E6:0F:6F:55:AF:D6:A4:45:3B:CE:F7
Authority key identifier: 68:B2:2E:EA:4A:4A:3B:81:65:4A:22:7E:DA:94:E0:E7:59:37:B0:15
Certificate issuer: /CN=68b22eea4a4a3b81654a227eda94e0e75937b015
Certificate serial: 01A1DDCC0A1568121EC685C3FBED84B86397
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
Manifest number: 16C0
Signing time: Sun 15 Nov 2026 06:01:38 +0000
Manifest this update: Sun 15 Nov 2026 06:01:38 +0000
Manifest next update: Mon 16 Nov 2026 06:01:38 +0000
Files and hashes: 1: Rc3F-GHPtna2uoaeYmvRb-dnnrw.roa (hash: O6ngTo5TuDQj2qWilyUQS84tY6mMFLMkzqiBF36kpVY=)
2: aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl (hash: VKYqn0ksZGWpOo5E4PA5Q+xlKGABinAw96aAvemb4J4=)
3: iQgCqwK7l4P2GKdSjJc-dEwoUDE.roa (hash: 6ZaHwDSQPPYhJ5ldPXpCjzOWcdqBA9Sc4lSpH6CyEmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:cc:0a:15:68:12:1e:c6:85:c3:fb:ed:84:b8:63:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b22eea4a4a3b81654a227eda94e0e75937b015
Validity
Not Before: Nov 15 06:01:38 2026 GMT
Not After : Nov 16 06:01:38 2026 GMT
Subject: CN=9fafbb0a19c8ff0009e60f6f55afd6a4453bcef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0c:8b:de:10:87:fa:91:10:77:c7:45:04:d5:
d1:43:56:ac:94:d5:c8:57:5c:47:51:f9:73:87:98:
a2:32:2b:52:e9:c7:3e:03:6b:b5:05:e3:d5:84:76:
64:55:4e:05:73:62:31:11:82:8f:56:d8:f4:9b:fb:
6b:b5:40:66:39:c2:b2:0b:2f:d6:77:8f:61:f0:40:
b5:16:48:ca:60:89:b6:02:ab:23:b4:5d:8a:97:21:
ac:ef:bc:00:e0:cd:6a:ab:b1:80:de:fc:2c:cb:59:
5d:0b:cf:01:c6:e9:fd:8f:9a:99:5a:fc:2a:e9:d4:
f1:c2:c9:ea:60:4b:14:a9:8d:15:67:b0:8b:ea:ff:
88:a0:03:41:fd:30:09:82:22:f3:d2:6a:43:b2:0c:
aa:89:ba:56:cc:50:7c:a9:9a:47:40:07:9d:b3:2c:
69:42:f1:fb:e7:f3:92:c8:b3:d7:4b:4f:14:f2:44:
49:4b:7f:22:c9:28:2a:e2:ba:42:e4:5e:1c:d1:40:
66:b9:e3:38:9b:f0:b9:10:71:a7:5f:aa:60:69:70:
11:7a:3d:58:45:9c:53:a3:7f:04:a0:7e:26:c0:cc:
74:c7:00:ed:37:e1:20:8a:af:63:62:5b:ed:fd:16:
95:ac:99:9f:10:8b:47:18:a3:dc:49:39:ce:48:67:
8a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:AF:BB:0A:19:C8:FF:00:09:E6:0F:6F:55:AF:D6:A4:45:3B:CE:F7
X509v3 Authority Key Identifier:
keyid:68:B2:2E:EA:4A:4A:3B:81:65:4A:22:7E:DA:94:E0:E7:59:37:B0:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:a1:84:2e:7b:18:52:14:6a:94:53:de:30:13:ae:e6:c1:1f:
10:d9:59:af:85:e0:f4:6d:8d:2e:27:b9:04:73:d3:20:fd:c9:
39:62:0f:96:a3:1e:2f:48:4d:d7:5d:13:3d:86:0d:8c:96:26:
a6:df:e1:3c:08:83:8b:01:d9:1b:77:3f:b6:ac:e5:cb:a1:f3:
00:be:85:d1:8b:94:d5:36:4e:48:f8:59:c6:d4:f0:df:dc:c6:
65:04:8b:24:20:0b:0a:15:66:5a:da:ab:c8:9c:11:50:a3:23:
3b:ab:76:1c:01:3d:d8:d3:60:3a:ff:a9:dd:1c:f3:5e:8c:3d:
38:79:09:40:66:8d:82:8f:37:70:9f:d7:22:0f:93:eb:8b:6d:
ef:0d:5c:53:37:37:62:61:fd:9b:cd:2b:bb:13:7e:d3:df:e0:
63:3b:35:4e:66:cf:bc:b6:1a:00:fb:f4:e0:34:15:52:57:7c:
1b:94:a3:2f:16:df:c7:66:69:22:80:98:cd:be:e3:bd:04:77:
7a:7a:e2:ba:9d:00:49:59:56:30:ff:d9:c3:8b:d4:55:33:1f:
b3:5e:a3:b2:f9:52:1d:f4:18:86:d6:de:cc:e9:53:26:cf:d9:
d8:6f:87:e5:ac:b0:4a:2f:f2:0b:62:1d:57:3b:ec:fa:a1:36:
ff:b3:fa:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHdzAoVaBIexoXD++2EuGOXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YjIyZWVhNGE0YTNiODE2NTRhMjI3ZWRhOTRlMGU3NTkz
N2IwMTUwHhcNMjYxMTE1MDYwMTM4WhcNMjYxMTE2MDYwMTM4WjAzMTEwLwYDVQQD
Eyg5ZmFmYmIwYTE5YzhmZjAwMDllNjBmNmY1NWFmZDZhNDQ1M2JjZWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgyL3hCH+pEQd8dFBNXRQ1aslNXI
V1xHUflzh5iiMitS6cc+A2u1BePVhHZkVU4Fc2IxEYKPVtj0m/trtUBmOcKyCy/W
d49h8EC1FkjKYIm2AqsjtF2KlyGs77wA4M1qq7GA3vwsy1ldC88Bxun9j5qZWvwq
6dTxwsnqYEsUqY0VZ7CL6v+IoANB/TAJgiLz0mpDsgyqibpWzFB8qZpHQAedsyxp
QvH75/OSyLPXS08U8kRJS38iySgq4rpC5F4c0UBmueM4m/C5EHGnX6pgaXARej1Y
RZxTo38EoH4mwMx0xwDtN+Egiq9jYlvt/RaVrJmfEItHGKPcSTnOSGeKIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ+vuwoZyP8ACeYPb1Wv1qRFO873MB8GA1UdIwQY
MBaAFGiyLupKSjuBZUoiftqU4OdZN7AVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUxJdTZrcEtPNEZsU2lKLTJwVGc1MWszc0JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy82OWNiYzAtYjZjNS00ZTY3LWE3M2It
MmI2NWE3YThiZThjLzEvYUxJdTZrcEtPNEZsU2lKLTJwVGc1MWszc0JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy82OWNiYzAtYjZjNS00ZTY3LWE3M2ItMmI2NWE3YThiZThj
LzEvYUxJdTZrcEtPNEZsU2lKLTJwVGc1MWszc0JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHaGELnsY
UhRqlFPeMBOu5sEfENlZr4Xg9G2NLie5BHPTIP3JOWIPlqMeL0hN110TPYYNjJYm
pt/hPAiDiwHZG3c/tqzly6HzAL6F0YuU1TZOSPhZxtTw39zGZQSLJCALChVmWtqr
yJwRUKMjO6t2HAE92NNgOv+p3RzzXow9OHkJQGaNgo83cJ/XIg+T64tt7w1cUzc3
YmH9m80ruxN+09/gYzs1TmbPvLYaAPv04DQVUld8G5SjLxbfx2ZpIoCYzb7jvQR3
enriup0ASVlWMP/Zw4vUVTMfs16jsvlSHfQYhtbezOlTJs/Z2G+H5aywSi/yC2Id
Vzvs+qE2/7P64A==
-----END CERTIFICATE-----
Generated at Sun Nov 15 11:40:38 2026 by rpki-client