Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
File: aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft (raw, json)
Hash identifier: snLhqxXClMXXzZEqrbYG6RdoERyfT2NEqTFSHipNl6s=
Subject key identifier: 55:99:EE:28:DA:70:DC:77:1C:B8:86:5D:25:EE:AE:48:19:2B:C6:5F
Authority key identifier: 68:B2:2E:EA:4A:4A:3B:81:65:4A:22:7E:DA:94:E0:E7:59:37:B0:15
Certificate issuer: /CN=68b22eea4a4a3b81654a227eda94e0e75937b015
Certificate serial: 019F90C7CD80D4A569905C9DBE563A1D9E2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
Manifest number: 158F
Signing time: Thu 23 Jul 2026 21:00:41 +0000
Manifest this update: Thu 23 Jul 2026 21:00:41 +0000
Manifest next update: Fri 24 Jul 2026 21:00:41 +0000
Files and hashes: 1: Rc3F-GHPtna2uoaeYmvRb-dnnrw.roa (hash: O6ngTo5TuDQj2qWilyUQS84tY6mMFLMkzqiBF36kpVY=)
2: aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl (hash: SQgK7ogLK9WC+H+1B5YRi2oBMPN3xcjvj5Y2LPbXl80=)
3: iQgCqwK7l4P2GKdSjJc-dEwoUDE.roa (hash: 6ZaHwDSQPPYhJ5ldPXpCjzOWcdqBA9Sc4lSpH6CyEmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:cd:80:d4:a5:69:90:5c:9d:be:56:3a:1d:9e:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b22eea4a4a3b81654a227eda94e0e75937b015
Validity
Not Before: Jul 23 21:00:41 2026 GMT
Not After : Jul 24 21:00:41 2026 GMT
Subject: CN=5599ee28da70dc771cb8865d25eeae48192bc65f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:da:fe:11:a5:94:01:d1:29:30:99:5d:78:aa:
c0:16:9d:72:4e:c5:a2:c4:4e:fd:e3:2d:bf:0d:ef:
8c:19:96:62:c7:3f:02:d5:65:d9:57:c0:73:37:42:
77:62:5f:79:09:89:f7:37:c7:b0:53:b5:0a:53:ef:
cc:ff:69:66:7b:b9:ae:18:a5:da:cc:46:57:b9:ec:
d8:63:b1:14:07:95:7a:2a:22:27:54:8c:4f:1d:50:
17:64:37:6c:a9:ee:b8:d6:fe:6d:80:fb:ff:68:8b:
93:4f:f7:bc:bb:69:37:25:6d:a3:45:a0:4f:30:de:
a4:8d:d5:03:d5:b5:66:73:4e:10:dc:e4:ca:f6:04:
72:d3:74:3b:30:9d:d8:e4:4b:61:0a:bb:f7:38:6c:
3d:95:66:b8:58:86:06:a7:9e:12:3e:d1:4e:f2:ca:
ca:17:36:ca:5b:ad:46:1c:76:be:5c:aa:7f:99:5d:
b6:11:24:db:1b:57:ba:fd:81:7a:50:04:7f:9c:bb:
ac:12:06:b3:dc:a3:ad:88:c0:2b:f1:7f:48:47:b0:
15:e1:03:f7:7d:f5:1d:c7:05:86:73:1f:2b:af:93:
10:0d:b0:a5:5e:3a:10:d9:e4:5f:b3:96:f2:c8:16:
58:f5:26:ef:32:55:93:24:2c:e0:9c:47:9f:4e:64:
7b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:99:EE:28:DA:70:DC:77:1C:B8:86:5D:25:EE:AE:48:19:2B:C6:5F
X509v3 Authority Key Identifier:
keyid:68:B2:2E:EA:4A:4A:3B:81:65:4A:22:7E:DA:94:E0:E7:59:37:B0:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:9f:3f:93:33:ec:7e:3c:ac:c9:c6:0a:27:4d:33:a3:bc:78:
90:56:5d:df:d0:a8:51:c1:b5:9b:68:5d:15:3d:2d:7e:81:16:
0b:c0:51:09:f4:89:ca:1e:a0:f9:41:07:dc:cd:4b:03:4a:c0:
8b:12:b3:5c:eb:52:a9:d5:52:e2:26:8e:0b:51:ab:fd:f8:8c:
cc:df:00:47:03:e8:5f:93:dc:ee:a7:5e:f1:b9:b0:58:a9:55:
c1:80:9a:70:3c:eb:66:cd:5c:78:59:f4:3b:bf:c3:db:93:31:
31:dd:63:4e:b7:9a:dd:b2:a3:5a:67:7f:8c:6f:bc:39:2c:78:
8b:f7:ac:87:e4:1a:19:34:15:77:ee:90:1b:15:f7:af:ef:1c:
e9:aa:59:a1:76:d1:71:e4:5c:f2:e9:31:98:30:08:6b:fb:e7:
98:a0:b1:ff:89:77:44:44:c0:71:0b:9b:ac:3f:d6:c7:ab:a3:
87:73:c4:c2:18:6d:e9:63:14:12:a6:f6:4a:51:94:53:9b:3d:
e6:ac:46:79:fc:35:a3:d2:41:d2:e8:dd:03:e6:75:c1:3c:2a:
26:59:35:e7:ee:0e:34:45:33:43:72:d9:82:a8:43:1d:38:9a:
19:f0:39:50:85:68:e2:6f:f7:e2:83:a6:4e:8d:72:a2:8f:52:
74:9b:42:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Qx82A1KVpkFydvlY6HZ4qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YjIyZWVhNGE0YTNiODE2NTRhMjI3ZWRhOTRlMGU3NTkz
N2IwMTUwHhcNMjYwNzIzMjEwMDQxWhcNMjYwNzI0MjEwMDQxWjAzMTEwLwYDVQQD
Eyg1NTk5ZWUyOGRhNzBkYzc3MWNiODg2NWQyNWVlYWU0ODE5MmJjNjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9r+EaWUAdEpMJldeKrAFp1yTsWi
xE794y2/De+MGZZixz8C1WXZV8BzN0J3Yl95CYn3N8ewU7UKU+/M/2lme7muGKXa
zEZXuezYY7EUB5V6KiInVIxPHVAXZDdsqe641v5tgPv/aIuTT/e8u2k3JW2jRaBP
MN6kjdUD1bVmc04Q3OTK9gRy03Q7MJ3Y5EthCrv3OGw9lWa4WIYGp54SPtFO8srK
FzbKW61GHHa+XKp/mV22ESTbG1e6/YF6UAR/nLusEgaz3KOtiMAr8X9IR7AV4QP3
ffUdxwWGcx8rr5MQDbClXjoQ2eRfs5byyBZY9SbvMlWTJCzgnEefTmR7GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFWZ7ijacNx3HLiGXSXurkgZK8ZfMB8GA1UdIwQY
MBaAFGiyLupKSjuBZUoiftqU4OdZN7AVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUxJdTZrcEtPNEZsU2lKLTJwVGc1MWszc0JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy82OWNiYzAtYjZjNS00ZTY3LWE3M2It
MmI2NWE3YThiZThjLzEvYUxJdTZrcEtPNEZsU2lKLTJwVGc1MWszc0JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy82OWNiYzAtYjZjNS00ZTY3LWE3M2ItMmI2NWE3YThiZThj
LzEvYUxJdTZrcEtPNEZsU2lKLTJwVGc1MWszc0JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWp8/kzPs
fjysycYKJ00zo7x4kFZd39CoUcG1m2hdFT0tfoEWC8BRCfSJyh6g+UEH3M1LA0rA
ixKzXOtSqdVS4iaOC1Gr/fiMzN8ARwPoX5Pc7qde8bmwWKlVwYCacDzrZs1ceFn0
O7/D25MxMd1jTrea3bKjWmd/jG+8OSx4i/esh+QaGTQVd+6QGxX3r+8c6apZoXbR
ceRc8ukxmDAIa/vnmKCx/4l3RETAcQubrD/Wx6ujh3PEwhht6WMUEqb2SlGUU5s9
5qxGefw1o9JB0ujdA+Z1wTwqJlk15+4ONEUzQ3LZgqhDHTiaGfA5UIVo4m/34oOm
To1yoo9SdJtCfw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:26:21 2026 by rpki-client