Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
File: aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft (raw, json)
Hash identifier: ZobJm90Qnuw7aaq2v3Jvv0BTRkwjycfPmq1mSzJ1uso=
Subject key identifier: 1B:EA:A8:66:27:AE:82:8D:84:BF:C8:54:55:3A:CC:F9:CE:33:1D:DA
Authority key identifier: 68:BD:10:F1:B1:4B:BB:27:67:FF:DC:AE:C4:B4:17:28:80:BA:46:1A
Certificate issuer: /CN=68bd10f1b14bbb2767ffdcaec4b4172880ba461a
Certificate serial: 019FA7F43CFCF46B49027DBAAE5990E7B033
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
Manifest number: 0EFD
Signing time: Tue 28 Jul 2026 09:00:29 +0000
Manifest this update: Tue 28 Jul 2026 09:00:29 +0000
Manifest next update: Wed 29 Jul 2026 09:00:29 +0000
Files and hashes: 1: S04NKU0J13eA6-TGQ2BZfun47ys.roa (hash: xIlFQJwTJx7ez8Zx99ToD2cR7A/Ipyz0mMaGV2drzPQ=)
2: aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl (hash: wNTCP+lnPP/7iMNke/H+jCXrW2QK6SMxAWr5efivc3k=)
3: rJKcaNGOpOiZ0iciVQt-oX04cPI.roa (hash: BT7ocoNehLiRKdELBQmLzdxfWaOUS/P7hDDrN7lDDSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 09:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:f4:3c:fc:f4:6b:49:02:7d:ba:ae:59:90:e7:b0:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68bd10f1b14bbb2767ffdcaec4b4172880ba461a
Validity
Not Before: Jul 28 09:00:29 2026 GMT
Not After : Jul 29 09:00:29 2026 GMT
Subject: CN=1beaa86627ae828d84bfc854553accf9ce331dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2b:2d:78:ff:cb:96:72:70:ea:97:99:d1:5d:
e6:15:ab:7d:19:db:45:e7:e0:f8:11:32:b0:8c:a7:
c9:16:87:cc:c0:2f:8b:e6:da:7c:35:be:94:37:25:
2f:fa:3d:41:35:d3:1b:e4:65:75:fa:07:93:8c:31:
6a:6c:2b:8e:68:68:0c:ca:e4:de:b8:ca:2a:b8:06:
59:3c:06:8e:a3:88:72:98:42:f2:4d:44:f4:88:57:
1a:10:0f:76:d3:8d:0c:33:3e:dd:7c:8d:53:7d:03:
d9:aa:6d:ae:a9:d1:cf:d4:b7:c6:f6:e1:77:98:67:
4c:08:9e:12:92:80:27:37:9d:03:9d:e2:89:dc:38:
26:48:ed:ea:4b:6b:b3:8f:ca:24:83:a8:7c:f9:dc:
87:4a:6c:80:57:12:64:f1:a1:12:65:5c:21:e0:c9:
38:40:79:04:df:f0:e7:d7:45:72:35:9b:33:27:1c:
a4:fe:3e:bd:7a:c1:71:e4:76:5c:9c:50:96:21:c8:
83:86:75:fd:91:c7:01:99:0f:85:c6:c5:12:fd:d7:
a0:f8:0d:fb:f5:35:bb:8e:d6:22:6e:a4:09:99:c7:
a1:26:71:9d:30:c1:20:48:86:f8:f8:be:da:4d:48:
18:df:c5:77:07:ba:f5:36:5c:8c:6d:a9:0f:8f:8c:
f1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:EA:A8:66:27:AE:82:8D:84:BF:C8:54:55:3A:CC:F9:CE:33:1D:DA
X509v3 Authority Key Identifier:
keyid:68:BD:10:F1:B1:4B:BB:27:67:FF:DC:AE:C4:B4:17:28:80:BA:46:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:97:fc:ff:db:e0:c3:d4:a7:fd:f5:98:51:7f:32:48:07:c9:
da:85:0c:51:10:c7:f2:b1:0e:a7:e8:13:a2:27:ae:89:55:17:
3b:20:38:2d:7d:49:b9:a7:80:c4:c6:35:96:9b:0f:3e:99:6d:
50:d0:c6:8a:70:8e:59:36:dc:9e:23:08:56:b9:8f:e2:b7:fb:
46:4d:17:95:2a:ac:7c:5e:21:67:e8:e9:d8:ab:aa:dd:1c:d6:
54:6e:e6:01:93:cf:b7:6c:fd:b3:6f:b1:25:4f:d3:fa:0b:d1:
52:58:c7:6f:87:55:91:0c:d6:aa:bc:26:b9:19:4c:91:63:8d:
3f:4b:ca:64:e3:23:0f:20:66:d6:8d:6a:e2:26:0a:ac:d9:57:
ff:35:eb:9a:5a:76:7c:92:ec:16:df:81:67:08:2e:d0:7e:dc:
e1:f5:3b:cd:61:6f:2b:ae:ea:f0:68:a0:e7:3e:50:d4:d2:47:
e9:1f:ee:0a:a4:86:03:e0:c7:cd:60:fb:48:46:75:78:43:d1:
b3:53:11:fd:e5:82:00:dd:71:36:6d:57:26:c3:a8:54:2b:ab:
d8:c5:ed:81:fb:b1:8f:fd:03:73:b2:1b:a9:53:cd:53:22:ff:
9b:08:bf:2c:bd:79:f5:83:f4:eb:a7:2f:35:fa:08:75:32:f0:
e3:ab:b6:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:32:53 2026 by rpki-client