Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.mft
File: Aleh_L8udaLhA0ynSg6XJiO7xJw.mft (raw, json)
Hash identifier: uXSFmtk/qlqF5ootGARqmmyb+lCB/cckDFE59EZwDTU=
Subject key identifier: 43:5E:0F:88:62:3F:A0:A3:81:63:3C:6C:FE:F2:92:E3:38:42:2E:67
Authority key identifier: 02:57:A1:FC:BF:2E:75:A2:E1:03:4C:A7:4A:0E:97:26:23:BB:C4:9C
Certificate issuer: /CN=0257a1fcbf2e75a2e1034ca74a0e972623bbc49c
Certificate serial: 019D98BD3180D89BDD72674337D50E3CAA6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aleh_L8udaLhA0ynSg6XJiO7xJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.mft
Manifest number: 0624
Signing time: Fri 17 Apr 2026 00:00:28 +0000
Manifest this update: Fri 17 Apr 2026 00:00:28 +0000
Manifest next update: Sat 18 Apr 2026 00:00:28 +0000
Files and hashes: 1: 3k8uMArcbuH0UIfZHpHCCKPnq1c.roa (hash: a4hOTjhskjL4zmX9D1orSF+CFPWqkttgVH56kvVyr7A=)
2: Aleh_L8udaLhA0ynSg6XJiO7xJw.crl (hash: MxEfK82xAi3mtdqLeJNoy1+yfR7AjoqlJNffAJkcV1E=)
3: brdL3w5Iu4wZbQWBCkYZz0EI-JE.asa (hash: 1CG14PRb7ITkoZJg94EyHs3qFktZ2P66/X1jQUXJkqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aleh_L8udaLhA0ynSg6XJiO7xJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:31:80:d8:9b:dd:72:67:43:37:d5:0e:3c:aa:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0257a1fcbf2e75a2e1034ca74a0e972623bbc49c
Validity
Not Before: Apr 17 00:00:28 2026 GMT
Not After : Apr 18 00:00:28 2026 GMT
Subject: CN=435e0f88623fa0a381633c6cfef292e338422e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d3:ca:c1:3b:36:f1:ed:51:b0:fe:f9:6d:db:
e0:28:c4:f6:52:18:ba:f0:5f:94:0d:aa:3c:f7:b0:
ae:28:9b:d7:81:14:23:49:0e:71:be:ee:69:30:e1:
a9:60:7c:3e:9b:0e:49:ea:ac:94:57:60:9a:c7:3b:
1f:eb:29:18:20:ef:fc:2f:33:81:d3:a3:08:42:b4:
5c:b5:dc:0d:2b:d6:68:18:e8:62:8c:2c:fa:44:db:
59:2c:fa:4d:1e:99:47:97:29:e3:25:1d:b8:01:66:
31:21:3a:d6:49:e6:cc:fe:f2:86:45:93:80:4f:f0:
84:e6:14:40:2a:0c:d7:c8:16:d4:7f:4f:29:99:34:
e1:ec:1f:ad:18:9d:62:ca:03:28:f8:ec:9d:56:3e:
e1:da:c0:d8:7a:cc:06:aa:1c:31:dd:61:cf:48:06:
9e:f9:19:58:7d:ff:49:ba:5e:bc:f7:4f:10:3d:36:
5c:ed:03:1f:a3:21:77:5e:8f:e1:61:41:53:b7:66:
a0:9f:af:b4:16:55:91:1c:3e:b8:84:b8:7c:b8:7d:
84:5a:21:2e:af:3e:0d:bd:07:fd:a2:08:e2:f5:16:
fe:85:15:fc:f4:48:e3:14:86:db:c5:0c:b4:ce:8c:
88:41:b2:bf:17:66:86:9c:d6:06:1d:97:f6:6d:97:
04:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:5E:0F:88:62:3F:A0:A3:81:63:3C:6C:FE:F2:92:E3:38:42:2E:67
X509v3 Authority Key Identifier:
keyid:02:57:A1:FC:BF:2E:75:A2:E1:03:4C:A7:4A:0E:97:26:23:BB:C4:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aleh_L8udaLhA0ynSg6XJiO7xJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:fe:c2:eb:54:f0:b5:64:ea:2e:c2:b9:19:8e:34:88:a7:4f:
fc:f5:3d:a0:64:4e:7f:ce:4d:3e:ce:a4:1b:78:d8:1f:59:f6:
3d:2c:8b:68:ea:89:3d:e4:e0:24:97:78:22:8c:9d:08:3e:33:
f1:77:df:0b:31:38:00:0b:42:f4:06:ad:38:b8:6d:c9:8e:61:
ac:7a:af:3d:60:1e:7e:c3:c5:c2:5d:5e:43:35:f5:ca:b3:bc:
70:67:f1:72:3b:72:aa:ce:a2:7a:63:c5:82:ab:ec:ae:b9:36:
5d:9e:76:03:02:37:5a:40:49:af:9e:91:cc:24:be:90:7a:3a:
4f:54:13:ad:c7:1d:73:d4:6e:ef:2b:cc:f8:80:86:13:c2:c8:
d4:43:58:b2:98:fc:40:52:98:66:c8:e9:90:25:70:95:d4:f3:
04:4c:a7:79:06:8e:d5:ea:5f:f8:0e:d9:50:a8:84:56:2e:cb:
b1:ab:b7:54:d4:a1:1c:37:fd:d2:1a:d8:06:d2:dd:a2:78:de:
5a:63:13:e6:9a:8a:ff:b4:07:08:1a:b6:c7:83:db:43:28:0f:
1f:88:40:84:50:7a:47:a5:fe:29:fa:14:2a:a3:8f:ec:49:89:
80:12:37:f1:08:94:bc:b7:61:69:2a:bd:14:43:58:82:04:7e:
d9:fb:0f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:47:07 2026 by rpki-client