Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/d02b32-967d-4751-82d3-121a14a9a40e/1/aLw5QAVdFXTyY7X5arCQDGu0xfk.mft
File: aLw5QAVdFXTyY7X5arCQDGu0xfk.mft (raw, json)
Hash identifier: s/9BbBSJVqrSw38xdlLrxmF0EXv0QS5sUoRSe8Uaeeo=
Subject key identifier: 6E:F0:55:3A:49:02:BD:06:D3:46:95:A0:71:4C:40:32:64:F2:44:B9
Authority key identifier: 68:BC:39:40:05:5D:15:74:F2:63:B5:F9:6A:B0:90:0C:6B:B4:C5:F9
Certificate issuer: /CN=68bc3940055d1574f263b5f96ab0900c6bb4c5f9
Certificate serial: 01A0CBC81E4708991D400D05DE336CE0D9F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLw5QAVdFXTyY7X5arCQDGu0xfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/d02b32-967d-4751-82d3-121a14a9a40e/1/aLw5QAVdFXTyY7X5arCQDGu0xfk.mft
Manifest number: 07D5
Signing time: Wed 23 Sep 2026 01:01:24 +0000
Manifest this update: Wed 23 Sep 2026 01:01:24 +0000
Manifest next update: Thu 24 Sep 2026 01:01:24 +0000
Files and hashes: 1: BcT1YlHw7D1Dk2z_LIFmn3rThJY.roa (hash: Eovd3kGKSBHE8soZjKT4R8yDeoxnP/onLhr4NTs+e6o=)
2: aLw5QAVdFXTyY7X5arCQDGu0xfk.crl (hash: ueae5esM94prRvCXhgAWayi8RK/imb8nCaJsfE5tHzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/d02b32-967d-4751-82d3-121a14a9a40e/1/aLw5QAVdFXTyY7X5arCQDGu0xfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/d02b32-967d-4751-82d3-121a14a9a40e/1/aLw5QAVdFXTyY7X5arCQDGu0xfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aLw5QAVdFXTyY7X5arCQDGu0xfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:c8:1e:47:08:99:1d:40:0d:05:de:33:6c:e0:d9:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68bc3940055d1574f263b5f96ab0900c6bb4c5f9
Validity
Not Before: Sep 23 01:01:24 2026 GMT
Not After : Sep 24 01:01:24 2026 GMT
Subject: CN=6ef0553a4902bd06d34695a0714c403264f244b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b2:4b:67:30:91:8d:da:e5:4a:a3:93:92:51:
8f:64:ef:c4:9a:fa:69:87:8e:7c:f0:7e:db:b4:a1:
c0:9d:3c:80:6f:17:06:4f:3e:82:8b:16:bb:a5:be:
8f:f1:2d:d0:ec:af:98:a1:18:94:4b:45:9a:4e:54:
d7:24:06:1a:28:70:47:3b:fd:b2:95:e0:08:ce:94:
ec:2c:5e:12:f5:f1:45:bc:07:9b:a6:24:ed:45:ec:
3d:0f:62:da:5c:52:d6:b2:7f:af:86:44:12:b5:ca:
1c:ca:97:40:39:3f:db:fe:69:2e:da:bd:6c:5e:33:
9f:55:f6:95:5d:8c:6b:72:8e:38:24:f3:de:05:9c:
ad:7f:11:2c:54:c3:a1:da:0a:59:ce:64:a3:64:76:
d7:88:84:8d:98:b9:6b:82:73:d8:cb:b0:46:7d:02:
ef:e8:08:62:65:3a:91:94:5d:e2:d5:da:6c:bb:c3:
1b:4d:28:59:29:55:45:06:6b:79:bb:37:72:e3:72:
0d:29:36:b7:f1:fe:69:4a:04:05:24:7a:9b:cb:59:
53:8d:bc:7b:cb:ec:dd:3e:06:ad:ab:2c:2e:65:fb:
29:0f:d5:a5:cb:e3:93:0d:6a:15:86:de:87:58:7c:
72:d6:a7:84:31:23:6b:40:36:85:de:a4:c0:61:46:
84:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F0:55:3A:49:02:BD:06:D3:46:95:A0:71:4C:40:32:64:F2:44:B9
X509v3 Authority Key Identifier:
keyid:68:BC:39:40:05:5D:15:74:F2:63:B5:F9:6A:B0:90:0C:6B:B4:C5:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLw5QAVdFXTyY7X5arCQDGu0xfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/d02b32-967d-4751-82d3-121a14a9a40e/1/aLw5QAVdFXTyY7X5arCQDGu0xfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/d02b32-967d-4751-82d3-121a14a9a40e/1/aLw5QAVdFXTyY7X5arCQDGu0xfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:39:d2:2e:9d:aa:19:64:77:fa:f8:9b:00:e6:64:43:18:c4:
68:dc:23:e3:9c:79:70:86:1a:18:d1:9f:89:86:35:be:13:c7:
fb:8c:ea:80:61:d9:42:8a:99:af:f7:52:82:55:28:fd:22:f8:
2f:08:c4:d5:ee:fb:9a:4f:ef:c1:35:61:1e:c2:d6:29:76:23:
e4:10:e5:c0:8b:46:c0:6c:92:90:67:84:d1:74:6a:bc:08:40:
c6:aa:7e:a0:67:71:76:c7:cd:04:0c:b0:82:41:6b:bc:e4:59:
10:56:e2:53:c4:ca:b7:84:8a:ca:34:0c:65:4b:95:5a:4f:66:
8c:57:46:b1:87:15:60:4f:1b:58:55:ab:c0:d6:c4:9f:5d:ad:
1d:2b:4b:07:12:17:20:fc:d1:1c:e7:f7:06:b1:81:bb:be:a7:
3f:c6:37:f9:4b:42:6b:8d:dc:f6:41:fc:23:3b:ab:1b:d0:89:
aa:10:21:0d:0d:6c:c2:2c:71:b7:86:e5:d3:7f:95:f6:35:01:
6b:fe:6b:c4:f3:ac:f2:29:fd:d9:25:d4:a6:20:e0:ca:b8:95:
f9:52:be:8c:c9:89:0c:fb:e4:77:e7:84:b9:f2:46:f0:69:52:
4d:33:aa:38:d5:fc:37:b2:29:95:55:20:8a:68:2b:eb:22:b9:
91:46:91:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:18:25 2026 by rpki-client