Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.mft
File: alQ3DEupveK5g3a_j5QqlJJsFRk.mft (raw, json)
Hash identifier: sf16/twTHkfX4ygC40OgQxkV6fpsvbcfkRGFl6dPVhY=
Subject key identifier: 0B:89:86:96:CB:96:00:8F:8A:8F:62:1E:E4:49:26:81:F3:E9:5D:4F
Authority key identifier: 6A:54:37:0C:4B:A9:BD:E2:B9:83:76:BF:8F:94:2A:94:92:6C:15:19
Certificate issuer: /CN=6a54370c4ba9bde2b98376bf8f942a94926c1519
Certificate serial: 019CAFB59E2393055407543A0B2058930FE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alQ3DEupveK5g3a_j5QqlJJsFRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.mft
Manifest number: 053C
Signing time: Mon 02 Mar 2026 18:00:41 +0000
Manifest this update: Mon 02 Mar 2026 18:00:41 +0000
Manifest next update: Tue 03 Mar 2026 18:00:41 +0000
Files and hashes: 1: alQ3DEupveK5g3a_j5QqlJJsFRk.crl (hash: jjaiebcoxIXfKVDNoxWr7So2/aO+/eRC5u1xQx9NO9U=)
2: qW9AF__zUvkNDM1hwnTXNbw4MmE.roa (hash: L8YbidEFG/0Uh1hABI0PUB51vRjUgh6q12O5a/Ue0jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/alQ3DEupveK5g3a_j5QqlJJsFRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:b5:9e:23:93:05:54:07:54:3a:0b:20:58:93:0f:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a54370c4ba9bde2b98376bf8f942a94926c1519
Validity
Not Before: Mar 2 18:00:41 2026 GMT
Not After : Mar 3 18:00:41 2026 GMT
Subject: CN=0b898696cb96008f8a8f621ee4492681f3e95d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:14:7e:af:20:37:c6:1c:4f:22:b6:ef:4c:b3:
4d:df:7d:8c:9c:16:f1:14:71:6e:36:e5:f8:01:a0:
7f:0e:71:6c:d1:3c:de:1d:c5:d0:4c:fd:d0:39:c0:
bd:99:6a:f4:ba:e2:c2:92:3d:e5:40:5a:d8:dc:88:
e0:50:bb:8d:67:ab:bc:b8:07:a8:fc:9e:94:e8:fb:
57:a0:3b:73:d7:91:ca:83:73:f1:48:79:a7:9b:d2:
d5:0f:83:2b:a1:f7:52:22:d0:57:20:bb:00:e6:55:
cb:55:aa:b2:38:2f:73:f6:80:c0:6e:4e:90:d6:7b:
2a:d6:04:18:6e:44:6d:e3:ae:eb:75:ca:f5:a7:53:
66:f4:6e:02:fb:b8:80:30:30:9d:0e:ae:2a:0f:7c:
eb:56:8a:dc:fa:0e:54:72:22:cc:3a:cb:d0:0b:b8:
c6:a3:ec:66:b6:a1:8e:aa:83:94:3f:43:03:5e:d5:
94:9b:70:56:05:66:9b:04:01:59:66:52:86:ec:f4:
cd:48:5c:6a:f8:05:7a:2c:6d:4a:8c:4e:13:63:89:
d0:e1:23:7c:1a:31:29:e8:49:10:fd:0e:35:34:02:
f6:5f:0d:ab:d6:01:9f:1d:94:ce:2e:03:94:7d:09:
ea:50:c3:c8:7c:f3:34:1a:1e:4b:72:93:06:f2:30:
a2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:89:86:96:CB:96:00:8F:8A:8F:62:1E:E4:49:26:81:F3:E9:5D:4F
X509v3 Authority Key Identifier:
keyid:6A:54:37:0C:4B:A9:BD:E2:B9:83:76:BF:8F:94:2A:94:92:6C:15:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alQ3DEupveK5g3a_j5QqlJJsFRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:64:9d:16:a2:a5:7e:7c:a6:db:a0:ea:d4:d5:e9:87:b9:db:
81:27:17:80:a8:70:13:03:04:75:c1:ed:0c:18:c3:d7:a5:f7:
ad:c5:34:77:0c:fd:05:99:0c:2c:38:1c:11:79:bf:fc:0a:fa:
23:36:c0:de:d5:7a:19:c1:ec:1c:e4:87:d0:5b:ef:a0:43:fd:
ef:ba:a2:33:60:91:e1:a3:cb:d6:b0:7a:5b:fb:d0:a0:04:a0:
13:55:3e:31:52:50:37:b9:cc:52:ce:3e:45:bd:b4:99:21:17:
a6:e8:a1:05:6f:c7:d2:31:82:a8:ae:a0:60:93:59:9b:da:93:
76:38:dd:e9:a4:fb:59:93:c9:3e:c3:00:73:56:f5:15:dc:91:
41:34:38:62:81:fc:3b:39:d9:44:b5:31:dc:c3:8c:96:11:ad:
b5:0d:3c:c4:9a:c6:4c:9e:4c:04:3c:15:ca:7b:d8:90:48:5c:
b2:71:76:9c:8c:2b:ab:5b:24:1c:e9:39:45:b1:b3:dc:c6:c1:
0a:87:a6:1d:d9:19:4a:a4:c6:8c:c3:2c:f0:f9:a5:0f:76:69:
f7:bd:9c:bf:14:d6:0d:fd:fa:71:4d:07:34:f9:ee:6c:dc:3f:
97:c1:3c:4c:d6:55:b4:f8:5a:2c:b3:6f:6e:e0:de:7b:6c:ea:
21:9b:5c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:48:54 2026 by rpki-client