Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
File: aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft (raw, json)
Hash identifier: cXsDO0dAt078+uEi6Z7uwWi2ukEohPLRr/YsyVYnBVo=
Subject key identifier: D2:D9:A9:2D:E0:8E:00:39:3D:4E:56:60:4A:1E:AD:E5:D4:AB:B8:EB
Authority key identifier: 68:BD:10:F1:B1:4B:BB:27:67:FF:DC:AE:C4:B4:17:28:80:BA:46:1A
Certificate issuer: /CN=68bd10f1b14bbb2767ffdcaec4b4172880ba461a
Certificate serial: 01A0C5C52219804E67A0D116DFCF4D95A4CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
Manifest number: 0F91
Signing time: Mon 21 Sep 2026 21:00:25 +0000
Manifest this update: Mon 21 Sep 2026 21:00:25 +0000
Manifest next update: Tue 22 Sep 2026 21:00:25 +0000
Files and hashes: 1: S04NKU0J13eA6-TGQ2BZfun47ys.roa (hash: xIlFQJwTJx7ez8Zx99ToD2cR7A/Ipyz0mMaGV2drzPQ=)
2: aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl (hash: H+cOFAaTzAr8tPqQj8OIRefMC41QEweg1m2SrgogfjU=)
3: rJKcaNGOpOiZ0iciVQt-oX04cPI.roa (hash: BT7ocoNehLiRKdELBQmLzdxfWaOUS/P7hDDrN7lDDSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:c5:22:19:80:4e:67:a0:d1:16:df:cf:4d:95:a4:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68bd10f1b14bbb2767ffdcaec4b4172880ba461a
Validity
Not Before: Sep 21 21:00:25 2026 GMT
Not After : Sep 22 21:00:25 2026 GMT
Subject: CN=d2d9a92de08e00393d4e56604a1eade5d4abb8eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c1:e8:6b:80:98:26:41:13:d0:93:73:3d:4e:
43:8c:ec:95:aa:0e:6a:1c:0d:82:d1:53:54:d9:40:
f3:be:87:63:1c:49:21:5e:a5:18:0e:94:65:58:ab:
2d:11:9b:67:4b:fb:17:3e:30:21:c1:48:84:c4:18:
a0:67:03:c6:14:ef:07:1d:b7:fb:b4:74:75:ad:6d:
f5:34:05:bf:ae:2b:80:ca:4c:6a:ed:5d:b4:72:8d:
42:1c:49:99:b9:0f:55:93:84:6b:18:db:45:a6:10:
71:0d:13:43:f3:38:85:45:2c:b7:a8:6d:0d:90:02:
24:2e:54:bf:2d:cf:e0:7b:44:8d:bd:6d:38:17:51:
ed:0c:ec:4f:1e:c0:6f:1d:30:8f:ab:fe:a6:f2:f9:
dd:ae:d1:04:df:70:49:38:b8:89:d9:d2:c3:80:62:
a7:26:f8:48:12:e5:f8:83:e4:75:21:22:de:67:7d:
75:3c:92:32:e9:c3:d0:9a:34:c2:77:e2:7a:a1:03:
0e:2a:86:3f:04:a3:f1:36:5e:f6:98:c9:45:56:fc:
ef:93:38:31:3b:33:b7:bd:88:d5:c5:b5:98:ee:55:
f0:b4:82:7d:b9:03:98:92:ca:71:3a:0a:74:3f:46:
1a:39:4c:43:05:f1:a7:17:38:1b:fd:f0:02:6e:23:
24:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D9:A9:2D:E0:8E:00:39:3D:4E:56:60:4A:1E:AD:E5:D4:AB:B8:EB
X509v3 Authority Key Identifier:
keyid:68:BD:10:F1:B1:4B:BB:27:67:FF:DC:AE:C4:B4:17:28:80:BA:46:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:78:98:ac:ba:c2:f8:d6:e5:e7:11:65:38:83:73:a3:5d:97:
f0:0a:b2:fa:89:f1:22:df:33:92:e5:e2:9b:a6:29:bf:17:03:
ff:e7:99:6d:3a:9d:0f:88:13:f8:73:61:87:dc:c2:95:08:a4:
73:0a:34:ed:89:3a:75:67:36:53:9e:96:fc:79:72:5b:7a:aa:
65:3b:92:ca:d1:71:d6:c3:47:f3:48:1d:0a:48:9b:8f:67:e9:
6f:91:2a:9e:bf:85:6b:4e:bf:50:0d:17:ba:63:85:f5:af:4b:
d1:ce:2d:eb:36:69:eb:98:a4:25:1c:d4:ce:00:d9:74:1e:47:
b1:29:c0:89:b6:91:2e:ef:41:6b:c2:96:b0:f8:29:c4:c0:55:
2a:d0:cd:64:1b:56:c9:57:98:85:94:f4:dd:2b:98:ca:da:a6:
e9:a2:86:c6:3e:8a:f4:d3:2f:a8:b5:5a:77:84:94:07:9d:c9:
3a:9d:55:b1:dc:ba:fe:56:f7:32:6e:8e:64:44:e2:59:bb:9b:
dd:50:68:95:4c:8e:4b:c0:6d:86:25:68:c1:23:ee:1b:6d:83:
c7:c6:28:4e:8f:7f:40:e0:a4:65:70:bf:d1:be:db:0a:5c:2c:
30:19:08:d8:68:a8:69:14:74:24:40:dd:ef:1e:09:79:45:b3:
d9:4f:ed:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:32:00 2026 by rpki-client