Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.mft
File: aLf4F6tRQbXhOCgM32GQFmu5y4c.mft (raw, json)
Hash identifier: OzyptCkIJKCEzB6DyIQs4NSWpKqGpQBtz5AXpNQ+638=
Subject key identifier: 7A:02:6A:87:B7:2E:7A:32:61:F1:6A:5D:0F:E0:FE:F7:DC:F4:81:38
Authority key identifier: 68:B7:F8:17:AB:51:41:B5:E1:38:28:0C:DF:61:90:16:6B:B9:CB:87
Certificate issuer: /CN=68b7f817ab5141b5e138280cdf6190166bb9cb87
Certificate serial: 01A10A38D7179782B2F4ECAB46F0F59107AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLf4F6tRQbXhOCgM32GQFmu5y4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.mft
Manifest number: 1A8A
Signing time: Mon 05 Oct 2026 04:00:59 +0000
Manifest this update: Mon 05 Oct 2026 04:00:59 +0000
Manifest next update: Tue 06 Oct 2026 04:00:59 +0000
Files and hashes: 1: aLf4F6tRQbXhOCgM32GQFmu5y4c.crl (hash: f7wAard6Mzhiy9ptNokb5hrCxSomdVIZuRTM1GmLFus=)
2: dwxKXYq5F0w7--7RCrBYQ23c5iY.roa (hash: K/Q42vj3khDPlWwooNw7J1cFttbzhnLd2GjnJonXf1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/aLf4F6tRQbXhOCgM32GQFmu5y4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 23:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:38:d7:17:97:82:b2:f4:ec:ab:46:f0:f5:91:07:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b7f817ab5141b5e138280cdf6190166bb9cb87
Validity
Not Before: Oct 5 04:00:59 2026 GMT
Not After : Oct 6 04:00:59 2026 GMT
Subject: CN=7a026a87b72e7a3261f16a5d0fe0fef7dcf48138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a4:5f:6d:69:54:e2:d1:f9:d0:51:83:18:23:
51:bd:0c:db:90:4d:08:c1:70:26:bb:13:f8:c7:6a:
6d:b1:20:d6:48:7c:10:1c:d9:99:a0:77:30:f4:f8:
d0:d5:d6:39:94:45:30:30:25:86:cf:16:f0:89:0e:
43:c3:a5:c6:d0:b1:d7:6b:74:11:93:2c:12:57:7e:
53:88:5c:22:44:a5:cd:35:86:9c:ea:e0:84:a9:e7:
69:4e:4d:55:07:32:a5:c3:89:7a:e6:cb:2b:34:94:
b1:4b:6e:61:aa:e6:b4:b8:0d:f1:b8:65:2c:21:d4:
b8:aa:ed:d8:78:3d:a7:c2:e7:45:95:d4:52:af:49:
30:de:6b:7e:7d:ff:cb:99:48:95:47:68:54:45:0e:
9f:ad:c6:ae:bb:c6:2a:fd:89:8b:a2:64:ba:43:24:
a1:a4:0a:b7:12:6d:2c:d2:68:9b:e6:cd:9c:49:fc:
6b:77:78:b0:9c:5b:52:16:14:dc:bf:f7:31:59:c6:
33:05:fa:08:07:4b:8a:30:3b:29:dd:79:a1:8c:c6:
30:b1:90:4a:92:77:97:09:82:95:87:9b:96:78:78:
6c:38:28:ff:4e:59:2a:4f:bf:a5:a7:e3:da:b6:82:
7b:7f:44:4c:b0:bc:b2:ee:21:ba:17:3e:9d:fc:7f:
ba:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:02:6A:87:B7:2E:7A:32:61:F1:6A:5D:0F:E0:FE:F7:DC:F4:81:38
X509v3 Authority Key Identifier:
keyid:68:B7:F8:17:AB:51:41:B5:E1:38:28:0C:DF:61:90:16:6B:B9:CB:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLf4F6tRQbXhOCgM32GQFmu5y4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ff:5a:cc:dc:18:2d:b1:aa:a5:26:4e:df:87:63:22:01:1b:
5b:fd:a3:a1:73:c2:f5:42:01:47:a1:6f:5d:62:b4:f6:5c:d3:
ce:5f:a9:a6:6c:ec:c2:49:d8:18:e0:0b:b1:38:25:69:ae:05:
02:81:60:ff:7b:ec:4e:32:99:2a:45:bf:54:2c:fa:30:6c:fd:
60:e5:67:45:fa:1f:c9:5c:b3:c8:4a:f6:75:28:03:ef:3c:26:
f8:ed:55:b0:7d:50:19:2b:9c:f8:0d:27:6b:96:68:11:e0:8d:
ee:29:6b:32:60:eb:b7:f1:84:50:0a:aa:6a:86:29:cb:2f:4c:
2d:3a:fd:a2:8d:68:fb:5f:18:a0:43:9a:99:68:3d:68:be:f4:
69:2a:b6:ab:13:d0:90:1e:99:22:89:65:af:21:c4:b8:a5:9e:
2a:8e:db:fe:7b:51:3f:3c:3f:10:fa:3c:25:5b:9e:0f:bc:dc:
87:0a:a8:b5:d8:9c:fe:3c:e9:8d:d4:6f:41:db:15:ae:ec:58:
cf:28:eb:33:d4:f3:f4:9c:60:4e:3a:64:c8:f1:f0:2e:8e:3f:
db:06:95:2a:09:0b:c1:da:93:5e:7c:1b:22:d0:0a:e9:04:ce:
c1:93:76:89:bc:6e:f3:e0:df:b9:61:2e:5d:70:e1:e0:ef:35:
e7:f5:58:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 07:31:07 2026 by rpki-client