Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft
File: aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft (raw, json)
Hash identifier: wqcLep+SgQQWUjNPcAwx6kRE1nontzf1BnhZI19WiF0=
Subject key identifier: 66:64:CC:B3:79:06:BB:DC:2A:E7:CC:2A:4B:FD:80:AE:B5:D3:54:83
Authority key identifier: 68:B0:BA:75:FC:E5:57:21:C3:06:37:58:9B:E3:D3:4F:A2:59:C2:B5
Certificate issuer: /CN=68b0ba75fce55721c30637589be3d34fa259c2b5
Certificate serial: 019D9B87A3DB34453A1BB70A67CF6F192208
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLC6dfzlVyHDBjdYm-PTT6JZwrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft
Manifest number: 07AC
Signing time: Fri 17 Apr 2026 13:00:50 +0000
Manifest this update: Fri 17 Apr 2026 13:00:50 +0000
Manifest next update: Sat 18 Apr 2026 13:00:50 +0000
Files and hashes: 1: aLC6dfzlVyHDBjdYm-PTT6JZwrU.crl (hash: AQw4nR1i5q4BPvDM0hCvp/lRYFyKaKGAuB75qTcd1cs=)
2: ntgegMbbIA6GUWw4rJnlciehyyI.roa (hash: fx6yFVGdC5vzJw5TVi8hUxp9utpG9evi2LCd+bEJjJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aLC6dfzlVyHDBjdYm-PTT6JZwrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:a3:db:34:45:3a:1b:b7:0a:67:cf:6f:19:22:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b0ba75fce55721c30637589be3d34fa259c2b5
Validity
Not Before: Apr 17 13:00:50 2026 GMT
Not After : Apr 18 13:00:50 2026 GMT
Subject: CN=6664ccb37906bbdc2ae7cc2a4bfd80aeb5d35483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0f:82:2e:35:9f:d5:2d:e9:d1:e5:f1:72:56:
0c:01:6b:49:0a:32:fc:78:52:20:df:fc:61:3b:eb:
19:83:0e:82:ed:f6:ee:95:18:b4:b7:a6:32:9a:01:
0c:aa:99:28:d4:d3:1a:d5:1c:e6:33:5b:7c:60:38:
f7:3d:73:ff:1c:6d:a1:2a:7d:c2:40:f8:7c:94:61:
1d:52:2d:19:22:b6:b4:4a:d5:c7:df:b8:e2:5c:38:
4a:43:62:a0:a6:2f:5e:cf:38:a6:4d:30:03:53:e7:
6c:e4:15:60:1c:5f:87:9c:f0:52:7e:2b:3b:1e:ac:
68:46:08:aa:a2:3a:24:13:3c:54:8e:24:62:ce:3e:
1f:71:65:e7:96:79:5e:ed:fe:bf:98:10:c1:bb:6a:
9b:84:e7:ce:91:5e:73:e0:30:9b:4d:04:49:11:61:
bb:11:e2:14:f5:23:d5:27:4d:95:5c:02:1d:42:93:
28:87:74:ee:cb:a1:ea:64:33:88:9b:42:09:f3:94:
7d:37:13:92:5e:ce:ba:38:a1:0e:f6:fe:2b:7f:e9:
df:5f:6b:58:67:d0:62:6c:cd:cd:c7:1f:dc:03:96:
32:1f:15:67:3a:a9:17:d4:4f:12:4d:9e:c6:fc:50:
73:92:c1:1d:4e:c7:30:ff:dd:a1:f3:1c:56:0e:b6:
75:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:64:CC:B3:79:06:BB:DC:2A:E7:CC:2A:4B:FD:80:AE:B5:D3:54:83
X509v3 Authority Key Identifier:
keyid:68:B0:BA:75:FC:E5:57:21:C3:06:37:58:9B:E3:D3:4F:A2:59:C2:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLC6dfzlVyHDBjdYm-PTT6JZwrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:4e:52:be:17:21:f7:77:f9:d5:af:40:79:d6:8d:4d:38:c3:
c5:9d:0f:dc:8b:20:a5:55:e1:a1:03:67:e7:3d:80:a1:a7:4e:
35:7f:a1:2c:4f:40:11:ce:1c:f7:f0:48:62:1e:b9:a0:d9:bd:
6b:5c:10:11:51:89:e4:3a:c3:41:28:b7:20:e6:f2:29:26:b8:
bc:34:17:80:2d:4f:e2:00:1f:dc:32:a9:66:13:e7:f8:c0:67:
ca:87:88:fb:7c:24:1d:88:bd:ce:8f:cc:f0:40:d5:99:de:c6:
6a:21:d0:79:e4:39:be:ad:07:b5:0b:36:0b:59:ec:d0:4b:18:
68:eb:44:aa:71:b5:4b:2e:47:6a:bd:20:25:ea:65:48:9d:cc:
df:78:eb:1c:25:1b:b7:cb:95:e6:a0:21:80:9a:97:21:5e:5a:
e6:e4:19:1a:ef:da:0c:19:10:20:f4:a0:71:7e:c8:af:95:b5:
e7:40:9a:0a:cf:5e:10:90:5c:12:41:0c:14:19:ca:96:73:1d:
9e:21:73:a5:38:1d:1c:8b:30:a4:02:9b:9d:79:49:2c:63:1c:
f8:96:5d:23:cd:c8:5f:4d:f9:f5:8d:90:bb:f0:2b:e6:54:3d:
61:d6:97:8c:05:cc:7a:49:dc:b4:3f:f3:41:81:c8:6a:4f:4f:
19:fa:43:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:08:37 2026 by rpki-client