Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
File: aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft (raw, json)
Hash identifier: PJfNv51+KZu7Hvr2iMZkGr1D9tDanAIH7FWRSuX9v1A=
Subject key identifier: 59:BF:5B:1E:7C:74:08:B0:6D:7E:D9:F3:06:CF:B0:F9:49:13:C9:BE
Authority key identifier: 68:B2:2E:EA:4A:4A:3B:81:65:4A:22:7E:DA:94:E0:E7:59:37:B0:15
Certificate issuer: /CN=68b22eea4a4a3b81654a227eda94e0e75937b015
Certificate serial: 019E1DFE79F619BBD24E07BFCB8F383ED1EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
Manifest number: 14CF
Signing time: Tue 12 May 2026 21:01:17 +0000
Manifest this update: Tue 12 May 2026 21:01:17 +0000
Manifest next update: Wed 13 May 2026 21:01:17 +0000
Files and hashes: 1: Rc3F-GHPtna2uoaeYmvRb-dnnrw.roa (hash: O6ngTo5TuDQj2qWilyUQS84tY6mMFLMkzqiBF36kpVY=)
2: aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl (hash: +S/TPAkt5tiYUlNEgs4mNZnM+HcULTLhA7zrA58EatA=)
3: iQgCqwK7l4P2GKdSjJc-dEwoUDE.roa (hash: 6ZaHwDSQPPYhJ5ldPXpCjzOWcdqBA9Sc4lSpH6CyEmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:79:f6:19:bb:d2:4e:07:bf:cb:8f:38:3e:d1:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b22eea4a4a3b81654a227eda94e0e75937b015
Validity
Not Before: May 12 21:01:17 2026 GMT
Not After : May 13 21:01:17 2026 GMT
Subject: CN=59bf5b1e7c7408b06d7ed9f306cfb0f94913c9be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3e:af:cc:0d:75:01:96:d4:8e:3f:9a:89:35:
73:b1:74:8c:96:fd:0c:3e:74:2b:e2:30:b5:f6:b0:
11:db:cf:86:5e:1b:89:13:3c:6b:3a:c5:8b:68:27:
6e:11:cd:05:31:21:c8:e6:8d:7f:c7:b3:2a:f5:79:
0a:41:25:8b:99:d7:e6:73:7c:97:7f:8d:fb:06:e4:
fa:25:86:fb:fa:60:d7:89:dd:2a:21:28:dc:ef:9e:
63:55:c0:9e:16:7b:02:ff:2e:b2:c1:be:b3:bb:fb:
b5:80:ac:f4:3e:b5:0c:0c:ee:4c:32:78:bc:ad:1c:
1f:eb:f7:49:ff:72:58:14:45:71:25:75:ad:d1:4b:
27:e6:c1:48:3c:55:cf:ae:90:a8:e6:7e:2b:06:4b:
7a:ab:f1:11:58:c4:1e:26:02:b7:58:d0:75:59:51:
82:0d:8a:90:b0:87:59:1a:89:da:2d:f5:7e:02:42:
2f:32:22:a9:09:4b:e5:ea:e2:99:c9:46:4d:95:7e:
07:1a:fb:78:7d:9b:31:75:52:3d:f6:ef:27:55:4c:
ff:1f:88:d9:b1:8c:53:60:6e:a1:f7:ab:9e:d0:3d:
ee:d5:42:fd:de:2c:13:51:46:cf:94:fd:0e:72:c5:
dd:87:5a:2b:ee:29:42:7d:a6:e2:ca:d4:2f:b6:48:
69:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:BF:5B:1E:7C:74:08:B0:6D:7E:D9:F3:06:CF:B0:F9:49:13:C9:BE
X509v3 Authority Key Identifier:
keyid:68:B2:2E:EA:4A:4A:3B:81:65:4A:22:7E:DA:94:E0:E7:59:37:B0:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:b6:c6:86:0b:9e:eb:3c:20:98:9c:c0:a1:31:62:bc:3b:07:
ce:05:17:9b:5f:bb:d3:c2:da:f4:79:43:4f:de:5b:91:cc:2b:
b5:a4:2f:d3:b6:07:9b:d9:1b:c9:72:8b:bb:79:b0:b4:47:a8:
9e:3c:a9:d8:3b:73:c2:4b:37:a1:04:25:8c:31:43:ae:03:02:
88:ea:a2:af:d3:09:3e:c0:b7:8c:30:65:d3:b8:a1:8f:7b:a6:
15:b8:ba:4e:81:5b:bb:56:0c:8d:79:05:38:9e:46:8d:62:83:
8d:a3:c0:3b:13:ea:c6:9e:b7:7d:dc:7f:f5:ee:1b:8c:91:7f:
bc:81:b6:6f:5d:25:fd:6a:19:a8:88:db:94:b3:99:48:61:ae:
6c:b5:97:cc:ce:b2:97:a0:fa:a6:8d:43:5f:35:35:e3:a6:af:
85:a5:82:5e:ed:93:ce:64:8c:e6:8f:e5:fd:f1:1c:3e:c2:1a:
ae:e4:d5:d7:1f:4d:bc:03:de:d9:39:0d:bd:9d:59:4c:d1:7a:
c4:9b:1d:34:14:3b:0d:db:39:10:80:50:2c:4f:b1:c4:69:c2:
0c:c9:ca:4c:36:d5:a4:7e:02:89:90:3c:1e:da:a8:98:c6:56:
f2:a3:97:d6:ed:52:47:15:a6:80:af:d6:78:4e:13:60:dc:f6:
37:cf:c4:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:30:04 2026 by rpki-client