Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft
File: aLReYLH18sssYUoANB6BmW2U0TQ.mft (raw, json)
Hash identifier: V9ZvVHbM7SQxmjc7F6x0Qhr7GZS6F6XnEfC3IQk8RxY=
Subject key identifier: 5D:45:E2:20:11:DE:BB:34:B3:F1:05:4F:76:F9:3D:11:9A:EB:2D:2A
Authority key identifier: 68:B4:5E:60:B1:F5:F2:CB:2C:61:4A:00:34:1E:81:99:6D:94:D1:34
Certificate issuer: /CN=68b45e60b1f5f2cb2c614a00341e81996d94d134
Certificate serial: 019D9998D5FA3AAFABF5DA2BB98DA625CDB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLReYLH18sssYUoANB6BmW2U0TQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft
Manifest number: 05A2
Signing time: Fri 17 Apr 2026 04:00:23 +0000
Manifest this update: Fri 17 Apr 2026 04:00:23 +0000
Manifest next update: Sat 18 Apr 2026 04:00:23 +0000
Files and hashes: 1: IIK_PCi18i4nJOHS2yy-kPNRbU8.roa (hash: aOKFLng/u9P5owW+nSLDrOFMq+zEl4wTq8j05LITn5g=)
2: aLReYLH18sssYUoANB6BmW2U0TQ.crl (hash: Px5Hmb2NMvkt8lD6JYTWUR3TFUDZIh7W1CfsDIV964A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aLReYLH18sssYUoANB6BmW2U0TQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:d5:fa:3a:af:ab:f5:da:2b:b9:8d:a6:25:cd:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b45e60b1f5f2cb2c614a00341e81996d94d134
Validity
Not Before: Apr 17 04:00:23 2026 GMT
Not After : Apr 18 04:00:23 2026 GMT
Subject: CN=5d45e22011debb34b3f1054f76f93d119aeb2d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:22:a2:8c:a8:a4:45:79:06:21:27:a9:0a:7a:
ae:b6:5c:3c:cd:b2:55:d3:2a:ba:47:6b:11:13:40:
a4:a5:75:80:d4:b8:4b:67:5c:53:26:7f:b0:d2:f7:
92:3e:67:f1:c9:a1:b8:dc:da:65:ed:8d:c9:9e:3d:
9b:3a:dc:56:b5:d2:88:0e:ff:05:29:a2:55:e0:e4:
be:90:2e:a4:07:23:c0:4b:91:bf:01:a7:27:a9:52:
20:a5:b6:b4:2b:44:5e:64:93:ff:ed:5e:e8:24:d5:
60:46:d6:cb:aa:17:90:cb:79:36:d4:c0:b8:cb:3b:
cb:58:19:47:c7:47:25:6b:ac:d3:fd:75:15:fb:54:
ba:96:9a:ec:4c:cc:4c:ee:64:6c:93:16:a9:2e:5d:
95:01:76:e4:05:98:b3:19:f8:46:6d:f4:bf:cf:f0:
21:81:ae:3a:1f:86:b7:cd:ee:8a:86:48:20:15:2d:
7e:24:d9:8f:17:b7:87:a5:fa:45:75:6d:b5:c9:ba:
b0:3e:9b:b7:03:70:8b:30:fc:0b:0c:a4:9d:50:23:
cd:f4:ab:40:72:88:c9:6c:f2:cc:ea:7e:49:15:4b:
04:d6:22:b5:35:4a:19:4b:6a:5d:fe:01:35:00:a0:
bd:8d:ad:2f:f9:5b:c2:b9:7d:0a:48:a5:32:58:55:
88:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:45:E2:20:11:DE:BB:34:B3:F1:05:4F:76:F9:3D:11:9A:EB:2D:2A
X509v3 Authority Key Identifier:
keyid:68:B4:5E:60:B1:F5:F2:CB:2C:61:4A:00:34:1E:81:99:6D:94:D1:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLReYLH18sssYUoANB6BmW2U0TQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:56:09:5e:f5:17:9c:91:63:23:16:2d:8b:e2:2f:d8:96:2d:
4e:36:e0:ea:a6:42:2e:b2:b9:6d:d0:6f:28:49:47:f9:97:21:
bc:73:76:db:a2:7b:cb:e4:9d:fb:1b:00:41:09:db:e3:6c:64:
db:6e:96:2d:b4:94:49:bc:54:e6:dd:cf:e4:33:ea:fa:1e:51:
dc:98:59:86:5b:c0:e2:78:2e:20:7c:89:0d:50:6e:5d:3c:8b:
8f:dd:8f:5d:70:2c:a5:cf:46:72:b5:90:4b:d3:a0:4a:b6:c8:
b6:13:32:b3:43:0f:5f:b3:37:2f:03:8d:8c:2d:b0:2b:3b:9b:
8b:27:7b:0c:6e:50:3c:3f:92:d4:26:06:64:c6:73:5b:0e:c9:
78:6a:22:5e:f0:e9:fc:5c:b9:8e:99:b0:b5:06:96:a2:b2:18:
d6:53:40:d3:5f:3d:69:fe:ba:e5:89:bf:47:1e:9c:1b:c4:3a:
16:93:ee:e4:3c:52:ff:bf:0f:33:64:26:e8:6a:1a:d9:27:06:
47:b3:a4:5d:f0:38:d4:89:bb:d4:5c:fd:2b:3d:73:ac:6a:9e:
27:c0:93:c3:ed:0a:4f:03:23:47:db:8e:d8:21:0b:d3:ea:72:
16:79:82:bf:c0:79:ae:98:5e:ff:ea:7f:af:b9:af:8d:31:de:
45:5e:40:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:05:24 2026 by rpki-client