Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft
File: aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft (raw, json)
Hash identifier: pvxFxxZl+fr1MN6kpzSD1Y0IF5yN0Oa3GFj5ptWp9mc=
Subject key identifier: 84:A7:60:C7:DF:4D:55:0F:F0:DF:31:F9:CA:C8:F1:B8:53:45:BF:01
Authority key identifier: 68:B0:BA:75:FC:E5:57:21:C3:06:37:58:9B:E3:D3:4F:A2:59:C2:B5
Certificate issuer: /CN=68b0ba75fce55721c30637589be3d34fa259c2b5
Certificate serial: 019CADFE2E7091F594BB61EC7379BE4690E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLC6dfzlVyHDBjdYm-PTT6JZwrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft
Manifest number: 0731
Signing time: Mon 02 Mar 2026 10:00:42 +0000
Manifest this update: Mon 02 Mar 2026 10:00:42 +0000
Manifest next update: Tue 03 Mar 2026 10:00:42 +0000
Files and hashes: 1: aLC6dfzlVyHDBjdYm-PTT6JZwrU.crl (hash: u3plbcfZOVox1Bp+C4DgoFfcKO7iuco4rhFnYTOMePs=)
2: ntgegMbbIA6GUWw4rJnlciehyyI.roa (hash: fx6yFVGdC5vzJw5TVi8hUxp9utpG9evi2LCd+bEJjJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aLC6dfzlVyHDBjdYm-PTT6JZwrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:2e:70:91:f5:94:bb:61:ec:73:79:be:46:90:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b0ba75fce55721c30637589be3d34fa259c2b5
Validity
Not Before: Mar 2 10:00:42 2026 GMT
Not After : Mar 3 10:00:42 2026 GMT
Subject: CN=84a760c7df4d550ff0df31f9cac8f1b85345bf01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e4:bf:51:3f:4c:fc:f2:84:69:94:a4:ec:dc:
6c:d9:ac:07:ee:ce:44:82:16:a3:40:ba:8b:2a:8e:
b1:53:46:ea:62:b6:38:ea:31:72:90:05:3b:5e:aa:
87:d6:ed:2a:86:ea:0b:88:ab:54:b8:ad:4f:9a:9e:
4b:6e:2e:26:49:66:b2:84:0d:51:bb:8c:aa:1d:06:
c7:dd:2a:bd:72:d5:4b:43:26:90:22:76:94:b0:10:
5f:64:f4:3c:e7:ba:0b:ae:85:97:3a:c6:0d:51:b8:
29:89:c4:82:94:52:a1:b4:7d:61:5d:6d:5b:df:36:
7f:5a:47:8b:56:a7:a5:88:43:15:73:cd:1a:fb:28:
9b:bb:e5:f2:d7:68:a1:f4:54:73:10:66:80:87:c5:
cd:79:17:bf:09:12:c4:ce:8f:f1:97:0d:16:9f:2f:
a0:66:31:f8:68:f3:4b:9f:e2:fe:2e:2f:42:bb:6c:
e6:92:e3:7f:70:fa:22:76:c0:b1:54:53:a7:68:47:
a8:47:93:74:c3:a9:76:fe:ab:91:15:0a:27:38:8c:
e9:9d:5f:5e:57:d3:a5:5a:df:f0:15:58:23:03:43:
40:cc:2f:bb:c4:a0:ee:f3:c8:6c:a8:29:0b:4d:ec:
e5:4a:14:d1:06:f8:96:86:33:d7:4a:b5:52:95:98:
ca:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A7:60:C7:DF:4D:55:0F:F0:DF:31:F9:CA:C8:F1:B8:53:45:BF:01
X509v3 Authority Key Identifier:
keyid:68:B0:BA:75:FC:E5:57:21:C3:06:37:58:9B:E3:D3:4F:A2:59:C2:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLC6dfzlVyHDBjdYm-PTT6JZwrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:37:ae:ac:eb:09:24:c1:7a:34:61:53:42:e9:58:f3:63:5e:
b2:2b:78:94:01:96:09:4d:cc:a1:f8:fd:ac:ab:59:ed:ae:3d:
68:87:93:ec:e2:03:5f:e2:9f:35:2d:38:04:46:0a:b2:04:5c:
a9:e2:ae:fb:38:45:fb:8c:13:d1:a9:2e:15:9d:98:94:54:94:
aa:d3:d6:b6:6f:c1:57:08:48:32:74:9c:91:6a:3b:53:b4:7f:
43:48:18:91:0f:d6:ce:c8:af:6c:f7:5e:9a:af:b3:fb:27:87:
d8:81:c0:b0:b4:ea:d2:d3:c6:ec:8c:3f:a6:0a:f3:d6:fe:82:
f4:f9:50:13:e0:82:96:7c:32:ba:41:dc:1f:09:db:bc:82:3f:
63:ed:e5:5b:bb:22:a0:d4:80:ef:ac:85:e6:88:17:91:09:5f:
d0:89:dc:89:43:e2:dc:43:52:66:5b:11:69:b6:2b:5d:88:f6:
7b:bb:87:85:9c:3c:e8:7a:08:c9:e9:8d:21:f2:6a:93:a1:ca:
59:cd:4b:1d:81:83:27:c6:4f:3e:97:28:7e:2e:e8:d1:bd:03:
49:2e:14:84:c0:e9:ce:ea:1e:31:eb:23:4c:a5:9b:3a:a0:c6:
6e:f1:07:88:3c:56:f7:27:2b:9e:20:7d:bf:e6:f8:0f:72:a9:
34:3f:29:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:45:12 2026 by rpki-client