Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
File: aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft (raw, json)
Hash identifier: 3PGvrVwd1MO5PJ/eev0TaKjICDTQ3gRUtK4oTYhUZqs=
Subject key identifier: 87:7F:1F:06:FE:EF:DE:56:BD:5F:A8:24:C9:01:C1:01:95:95:69:1D
Authority key identifier: 68:BD:10:F1:B1:4B:BB:27:67:FF:DC:AE:C4:B4:17:28:80:BA:46:1A
Certificate issuer: /CN=68bd10f1b14bbb2767ffdcaec4b4172880ba461a
Certificate serial: 019CAB3418635882F37F31DC235EA51E4B5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
Manifest number: 0D71
Signing time: Sun 01 Mar 2026 21:00:43 +0000
Manifest this update: Sun 01 Mar 2026 21:00:43 +0000
Manifest next update: Mon 02 Mar 2026 21:00:43 +0000
Files and hashes: 1: S04NKU0J13eA6-TGQ2BZfun47ys.roa (hash: xIlFQJwTJx7ez8Zx99ToD2cR7A/Ipyz0mMaGV2drzPQ=)
2: aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl (hash: WkBE2rfc9/Howb09OgsqU+ch9hroCsEOl4dJpMpfBhw=)
3: rJKcaNGOpOiZ0iciVQt-oX04cPI.roa (hash: BT7ocoNehLiRKdELBQmLzdxfWaOUS/P7hDDrN7lDDSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:18:63:58:82:f3:7f:31:dc:23:5e:a5:1e:4b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68bd10f1b14bbb2767ffdcaec4b4172880ba461a
Validity
Not Before: Mar 1 21:00:43 2026 GMT
Not After : Mar 2 21:00:43 2026 GMT
Subject: CN=877f1f06feefde56bd5fa824c901c1019595691d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b2:63:eb:38:53:6d:62:2e:27:23:42:84:07:
12:d1:ed:1b:61:85:6c:d1:a4:68:8b:d7:37:ab:ea:
df:f5:96:cf:7a:cb:ec:26:d1:70:62:d7:31:65:46:
68:06:f0:3b:68:c6:e4:94:0c:ee:ca:15:c8:59:a6:
99:df:72:cb:c1:d1:7c:e6:d3:00:3a:4e:c0:6e:fd:
03:4e:7f:54:bb:6e:ce:b1:ee:39:02:5d:38:37:92:
3c:28:c0:ad:f0:63:ea:75:13:70:9f:c9:45:53:49:
ca:4b:23:25:d7:2a:41:58:db:89:9c:e6:8c:47:de:
da:1d:f3:7d:a3:fe:9d:ca:37:e2:32:42:d5:02:81:
e1:b1:94:4c:fd:69:5a:56:c2:95:87:a3:04:b5:7e:
68:ed:44:51:0c:73:13:6f:48:a8:71:6b:fa:b8:20:
91:23:40:08:34:f2:33:f5:5a:6f:30:ca:1d:66:9b:
b8:86:f9:47:20:ba:d1:45:07:60:28:1f:e0:35:1e:
39:14:2f:f3:fe:0b:48:86:16:c5:ae:ef:2c:d1:0e:
03:bb:96:24:3e:7e:71:c1:25:13:a8:0b:0f:7a:5b:
85:1a:f7:09:91:72:4a:f7:7c:a1:9b:d2:76:a6:fc:
c0:1e:24:3b:c0:0e:68:b1:97:73:14:a3:51:05:01:
49:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:7F:1F:06:FE:EF:DE:56:BD:5F:A8:24:C9:01:C1:01:95:95:69:1D
X509v3 Authority Key Identifier:
keyid:68:BD:10:F1:B1:4B:BB:27:67:FF:DC:AE:C4:B4:17:28:80:BA:46:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:c1:d7:5a:24:49:ac:2b:1f:66:26:59:e8:91:3e:55:11:4c:
a4:c1:f1:b3:95:24:b4:ac:b5:0e:a4:90:a6:97:fd:1c:3e:98:
63:02:cc:5e:6e:25:90:53:c2:7d:4b:25:58:ce:dd:52:40:d3:
5f:42:c2:ce:b4:b7:cd:d4:d9:9d:e1:50:87:df:b2:14:ed:ac:
6c:11:ca:0a:38:7c:19:50:48:d9:a1:8c:40:eb:fb:9d:c1:34:
2d:b6:67:e2:79:ef:fc:83:08:2c:dc:e7:55:1d:a2:05:c5:ce:
93:a6:16:a2:97:2d:84:28:3a:a4:66:28:0c:7c:a2:59:db:a3:
35:e2:6f:09:c2:b3:c7:e2:fd:69:7e:3c:6f:ae:53:b1:d6:8b:
3a:cd:41:a0:3c:a1:28:e0:eb:f6:08:9e:14:15:79:0a:92:37:
a8:e2:69:e2:43:c3:fa:17:cd:1c:ce:ec:df:cb:30:05:8c:5f:
b0:c5:b9:80:84:05:11:37:04:0b:0c:57:b3:05:7d:65:8f:15:
3c:e5:b7:fb:6c:3b:bd:d0:f4:18:85:45:63:f6:31:63:08:25:
b4:fd:5a:2d:6c:e4:ca:9c:f1:dd:48:0f:cd:90:f9:37:08:5a:
eb:b3:6a:74:ea:cb:ff:d3:58:53:e9:23:a3:78:be:39:46:41:
63:cb:61:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:19:06 2026 by rpki-client