Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/d02b32-967d-4751-82d3-121a14a9a40e/1/aLw5QAVdFXTyY7X5arCQDGu0xfk.mft
File: aLw5QAVdFXTyY7X5arCQDGu0xfk.mft (raw, json)
Hash identifier: 7Rfci9qGTR+OnrlxFs+KKIKnKMlLY/yy9/21aYLPlR8=
Subject key identifier: F8:7F:9B:9B:2C:44:79:0B:DE:A9:F4:94:E9:20:15:79:97:0C:66:61
Authority key identifier: 68:BC:39:40:05:5D:15:74:F2:63:B5:F9:6A:B0:90:0C:6B:B4:C5:F9
Certificate issuer: /CN=68bc3940055d1574f263b5f96ab0900c6bb4c5f9
Certificate serial: 019FAC08138105B7FDFCDDD1060B5724DF7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLw5QAVdFXTyY7X5arCQDGu0xfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/d02b32-967d-4751-82d3-121a14a9a40e/1/aLw5QAVdFXTyY7X5arCQDGu0xfk.mft
Manifest number: 0740
Signing time: Wed 29 Jul 2026 04:00:38 +0000
Manifest this update: Wed 29 Jul 2026 04:00:38 +0000
Manifest next update: Thu 30 Jul 2026 04:00:38 +0000
Files and hashes: 1: BcT1YlHw7D1Dk2z_LIFmn3rThJY.roa (hash: Eovd3kGKSBHE8soZjKT4R8yDeoxnP/onLhr4NTs+e6o=)
2: aLw5QAVdFXTyY7X5arCQDGu0xfk.crl (hash: BMw084lJt0SuyMCRP1+G9YCjZFGf+bCR7NKaAuC5fgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/d02b32-967d-4751-82d3-121a14a9a40e/1/aLw5QAVdFXTyY7X5arCQDGu0xfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/d02b32-967d-4751-82d3-121a14a9a40e/1/aLw5QAVdFXTyY7X5arCQDGu0xfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aLw5QAVdFXTyY7X5arCQDGu0xfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:13:81:05:b7:fd:fc:dd:d1:06:0b:57:24:df:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68bc3940055d1574f263b5f96ab0900c6bb4c5f9
Validity
Not Before: Jul 29 04:00:38 2026 GMT
Not After : Jul 30 04:00:38 2026 GMT
Subject: CN=f87f9b9b2c44790bdea9f494e9201579970c6661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b6:05:92:00:d2:4d:9f:30:be:87:77:32:46:
75:80:5c:b2:2b:13:22:c6:b8:75:6e:a0:cf:8e:9f:
56:16:a3:a7:0f:dc:62:a5:1c:57:29:88:00:42:45:
00:8f:c7:11:e3:fa:ce:76:55:67:0d:ae:0b:e4:93:
a1:88:9f:00:f3:9c:ca:36:cc:17:f9:48:b1:1a:af:
39:6c:51:16:7f:78:ba:04:00:4c:99:fc:d7:8c:37:
c5:0b:0d:56:42:60:34:84:ac:c0:2e:59:4a:b3:cc:
31:03:4b:46:26:3b:fd:f3:b3:d9:53:48:be:9b:1b:
fa:bd:0e:98:1b:73:ad:6d:f0:5b:31:ba:d3:08:8e:
02:4e:52:74:14:f2:a4:8d:8b:72:01:f9:50:21:99:
16:d8:7b:9d:7b:c8:da:07:14:6d:0a:d1:f9:54:5e:
89:2f:f3:3a:53:38:65:42:c8:bb:ee:3c:80:14:bc:
41:60:dc:0a:6f:7e:41:05:70:9d:58:dd:80:8a:bc:
a7:1d:c1:aa:9f:88:c0:85:bf:21:b6:09:a7:a5:de:
a6:c3:2e:a8:71:ce:32:e4:85:ea:ab:2a:ce:aa:d8:
f8:5e:d4:1f:6e:ad:a7:1a:73:7f:42:ab:52:5c:50:
65:4b:73:64:11:6f:db:75:c6:fa:59:5b:f9:3a:54:
bc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:7F:9B:9B:2C:44:79:0B:DE:A9:F4:94:E9:20:15:79:97:0C:66:61
X509v3 Authority Key Identifier:
keyid:68:BC:39:40:05:5D:15:74:F2:63:B5:F9:6A:B0:90:0C:6B:B4:C5:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLw5QAVdFXTyY7X5arCQDGu0xfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/d02b32-967d-4751-82d3-121a14a9a40e/1/aLw5QAVdFXTyY7X5arCQDGu0xfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/d02b32-967d-4751-82d3-121a14a9a40e/1/aLw5QAVdFXTyY7X5arCQDGu0xfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:6f:2a:44:58:ea:e5:64:16:f4:2b:6a:07:f0:30:22:93:0b:
69:63:90:11:6e:c6:4c:90:8f:c7:9a:f1:bb:47:3d:10:10:70:
15:fd:75:97:31:6c:50:1f:13:f9:ab:cb:c5:fa:8b:7a:b4:e8:
71:a5:7b:0a:8e:19:a4:c2:39:59:fc:36:96:16:45:79:28:c6:
c8:03:c3:3f:56:e1:03:01:5c:6f:da:c5:22:a8:ba:f9:ec:00:
2c:11:e7:81:af:f2:a1:94:f4:a8:37:d9:d8:5b:6a:08:cf:c7:
a2:63:0c:39:84:e7:74:c6:4d:e4:ea:89:ad:cd:16:7c:16:7b:
dc:04:f4:87:48:64:24:01:46:b1:32:ff:e5:00:57:66:bf:20:
8a:0a:f3:eb:f3:16:46:b6:93:e0:55:61:c3:a6:08:fa:a8:70:
b9:5e:9f:40:8a:62:71:f8:ff:dd:a1:44:54:c0:7a:c0:43:45:
e5:d0:7f:48:4a:8f:90:e6:24:82:d7:08:84:c8:fb:88:f0:d1:
a1:76:15:80:bd:13:ba:f1:e7:c3:3d:6e:31:76:17:40:a8:35:
02:d6:4a:5e:cb:35:a4:1d:ee:28:05:12:46:9c:ee:96:d3:48:
d0:9b:52:31:3c:a6:fd:15:e6:27:91:45:67:91:0b:1e:51:f9:
2b:4a:02:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:28:46 2026 by rpki-client