Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft
File: aLReYLH18sssYUoANB6BmW2U0TQ.mft (raw, json)
Hash identifier: A8LarGG4iCYYUmpVDGf51/R9+IzDinqGkRxEtLXRNhE=
Subject key identifier: 69:8B:5F:32:45:25:AF:47:DB:7C:1C:6F:CD:D9:14:91:31:5C:85:DA
Authority key identifier: 68:B4:5E:60:B1:F5:F2:CB:2C:61:4A:00:34:1E:81:99:6D:94:D1:34
Certificate issuer: /CN=68b45e60b1f5f2cb2c614a00341e81996d94d134
Certificate serial: 019CAA213DB3C70C78BB8C6FBCE2F82A328F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLReYLH18sssYUoANB6BmW2U0TQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft
Manifest number: 0526
Signing time: Sun 01 Mar 2026 16:00:31 +0000
Manifest this update: Sun 01 Mar 2026 16:00:31 +0000
Manifest next update: Mon 02 Mar 2026 16:00:31 +0000
Files and hashes: 1: IIK_PCi18i4nJOHS2yy-kPNRbU8.roa (hash: aOKFLng/u9P5owW+nSLDrOFMq+zEl4wTq8j05LITn5g=)
2: aLReYLH18sssYUoANB6BmW2U0TQ.crl (hash: DS4oX40BFk7E/laH6XQewuKDyUYMrhMBlu5wPH81MVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aLReYLH18sssYUoANB6BmW2U0TQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:3d:b3:c7:0c:78:bb:8c:6f:bc:e2:f8:2a:32:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b45e60b1f5f2cb2c614a00341e81996d94d134
Validity
Not Before: Mar 1 16:00:31 2026 GMT
Not After : Mar 2 16:00:31 2026 GMT
Subject: CN=698b5f324525af47db7c1c6fcdd91491315c85da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8c:c1:f4:26:75:15:a8:40:d3:03:42:8f:ac:
1f:21:2c:6e:c8:0e:b1:09:46:69:87:96:e7:53:32:
6e:64:0a:b2:54:63:83:63:0b:50:a7:e1:9b:91:de:
02:22:70:68:fd:a1:a0:b8:3b:c4:fc:a7:9d:20:8f:
95:6d:b2:36:ba:63:ad:27:49:8d:56:27:68:ac:42:
81:e9:02:42:a2:d6:41:e5:71:7e:61:64:65:2c:14:
64:c5:94:27:f1:49:61:94:48:f7:30:a9:03:30:4a:
c6:5e:98:12:53:71:be:6b:f5:78:8f:43:ac:29:b8:
1b:21:82:a2:c1:a2:e7:29:df:8b:7b:fb:84:4c:72:
80:f2:b9:c6:91:ff:11:c9:09:b5:74:36:27:19:c6:
3e:f0:c1:33:df:a0:9f:20:16:16:cb:03:14:f1:1a:
2a:98:22:17:6c:fa:34:ce:0d:a6:bb:7a:5f:46:13:
c0:91:04:9d:cf:7b:a9:01:42:b9:1f:31:71:29:86:
e4:90:d7:a2:ba:e3:d6:97:43:6f:ee:e9:fa:f2:a1:
8e:38:43:ea:07:64:82:e7:9f:16:ee:22:50:33:49:
88:8d:3a:07:e1:e8:90:31:e9:16:20:39:55:11:31:
d1:bc:ef:4c:5a:c6:d1:d2:f9:3a:12:24:ca:33:7b:
9e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:8B:5F:32:45:25:AF:47:DB:7C:1C:6F:CD:D9:14:91:31:5C:85:DA
X509v3 Authority Key Identifier:
keyid:68:B4:5E:60:B1:F5:F2:CB:2C:61:4A:00:34:1E:81:99:6D:94:D1:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLReYLH18sssYUoANB6BmW2U0TQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:12:96:36:1f:e7:a8:7b:f8:4b:8c:02:89:36:ff:7d:6e:0f:
46:a1:e1:ab:64:0b:af:81:eb:77:f0:f3:ae:22:0c:70:96:e2:
fb:83:66:c5:48:1b:78:07:ca:6f:31:fd:49:0a:e3:a7:f5:3c:
26:15:9a:1a:a3:d6:91:c6:a2:6c:96:09:15:40:82:0c:90:13:
63:02:75:d1:f0:a6:f5:1b:27:f6:88:3d:22:c6:fa:4f:20:b4:
fc:ef:1e:f1:ec:fc:62:ea:ab:e2:64:d5:d1:37:9e:48:0e:52:
b5:77:ec:14:79:67:55:24:dd:40:4f:fb:2b:e2:30:b3:b3:5c:
b3:cc:e9:0e:e3:9c:17:ca:84:95:cd:fb:cb:ff:fd:bb:53:68:
1c:a0:65:4c:0d:36:bb:24:29:b4:f9:c0:d4:b6:f4:9a:5f:bf:
2e:70:55:ef:71:b3:89:c1:91:b0:cb:c7:39:6b:42:27:f4:97:
5e:c3:52:65:b8:83:57:af:f6:be:5a:04:a4:38:70:98:3a:09:
aa:ea:e1:27:2c:e1:7a:ef:0b:76:d0:b2:9c:4d:8e:7b:f5:1b:
66:a8:89:50:54:48:23:f1:a4:94:8e:68:8b:6a:37:b4:ca:b1:
f9:cb:44:01:48:06:3c:bc:14:8d:a4:84:63:5e:e2:96:da:34:
e5:65:4f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:29 2026 by rpki-client