Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
File: aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft (raw, json)
Hash identifier: uBzWVWRPGYalMOrDiUH0wVb3Yb7SfxGatA06/+YGd1U=
Subject key identifier: 6F:30:E8:46:3A:B0:E7:3E:00:DF:D3:8D:64:35:29:F0:E8:54:74:C1
Authority key identifier: 68:B2:2E:EA:4A:4A:3B:81:65:4A:22:7E:DA:94:E0:E7:59:37:B0:15
Certificate issuer: /CN=68b22eea4a4a3b81654a227eda94e0e75937b015
Certificate serial: 01A0C9A290C76C3C0AAF29F4DAECC6BCB59B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
Manifest number: 1631
Signing time: Tue 22 Sep 2026 15:01:09 +0000
Manifest this update: Tue 22 Sep 2026 15:01:09 +0000
Manifest next update: Wed 23 Sep 2026 15:01:09 +0000
Files and hashes: 1: Rc3F-GHPtna2uoaeYmvRb-dnnrw.roa (hash: O6ngTo5TuDQj2qWilyUQS84tY6mMFLMkzqiBF36kpVY=)
2: aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl (hash: odlILe4Dy5Nhw2Du5WMe1Jj4U2NA4KPqabmJME8LrmU=)
3: iQgCqwK7l4P2GKdSjJc-dEwoUDE.roa (hash: 6ZaHwDSQPPYhJ5ldPXpCjzOWcdqBA9Sc4lSpH6CyEmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:a2:90:c7:6c:3c:0a:af:29:f4:da:ec:c6:bc:b5:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b22eea4a4a3b81654a227eda94e0e75937b015
Validity
Not Before: Sep 22 15:01:09 2026 GMT
Not After : Sep 23 15:01:09 2026 GMT
Subject: CN=6f30e8463ab0e73e00dfd38d643529f0e85474c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:04:fd:52:25:cd:8b:06:da:8c:d3:c1:0f:6f:
12:3c:7b:4d:af:9e:88:9c:a9:36:63:56:55:a1:cf:
f2:b4:aa:61:0d:2e:2c:ec:7b:39:ae:60:50:06:f9:
fa:f4:7c:17:e6:78:b8:7b:18:7b:b6:11:fe:46:f8:
d3:d3:12:7e:4f:5e:f0:fb:32:bf:78:01:03:2a:20:
ed:f2:ae:89:23:55:aa:81:c1:89:14:8f:b2:db:01:
61:ea:90:f7:31:bc:ba:ba:19:df:39:02:36:e1:2e:
64:09:4e:ea:97:37:ec:84:97:f5:dc:0b:7c:4b:ed:
2a:70:28:8f:60:eb:bf:1b:0a:f3:8e:3a:09:89:e5:
d3:89:5e:e6:1f:17:2d:61:be:1c:9a:46:6c:cb:dd:
fd:27:0c:3c:a5:86:7a:87:c2:e2:28:5c:d3:98:39:
a9:55:36:05:9c:de:a3:2a:a3:01:20:df:59:88:17:
ca:e6:e4:71:ef:02:90:95:85:20:32:46:72:51:9c:
0e:19:d5:86:d6:fa:34:ce:77:57:15:4c:43:73:1b:
0c:aa:16:b0:78:d6:dc:76:48:09:d2:ec:ba:e9:78:
e5:15:8e:9a:ba:22:55:39:87:59:e9:c0:e1:d8:24:
c7:48:05:ec:37:13:44:c4:8f:8d:7f:ea:50:ea:f5:
2c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:30:E8:46:3A:B0:E7:3E:00:DF:D3:8D:64:35:29:F0:E8:54:74:C1
X509v3 Authority Key Identifier:
keyid:68:B2:2E:EA:4A:4A:3B:81:65:4A:22:7E:DA:94:E0:E7:59:37:B0:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:4e:f6:82:0c:ff:d8:76:fc:52:ec:10:c6:10:bc:9b:c1:60:
84:44:f5:bd:39:ec:c8:b8:e6:0e:a0:46:97:37:95:d0:8a:98:
a2:23:8c:d8:6a:7a:98:0b:94:f7:c3:16:3d:4d:b1:f9:02:3b:
cc:b3:23:5e:c7:9b:a4:0d:49:df:60:aa:0d:02:f2:83:da:fb:
7c:bb:31:dc:f4:02:3f:89:5e:06:90:71:c6:b2:f0:8d:8f:b0:
df:3b:99:c0:32:48:73:3a:a6:a0:97:2a:43:ca:f0:47:75:41:
8a:de:ac:fd:63:30:d4:3a:69:9c:cc:d3:e0:61:d4:d8:e6:83:
0c:90:51:72:b5:b1:93:03:73:2d:32:80:7c:b7:b9:7c:d8:d3:
32:d7:ec:25:f1:3a:fa:ab:77:78:26:7c:c7:fe:da:d9:9f:35:
f0:2c:30:59:32:dd:35:7d:44:db:dd:f6:c3:d5:ca:3d:05:a3:
84:a4:b3:6e:8b:af:88:bb:aa:c4:16:c5:9f:6f:f3:49:56:60:
e0:f2:1d:42:1c:18:6d:6e:5e:13:4f:b8:c6:d9:33:04:c3:ca:
7a:29:86:7d:2a:87:87:6d:04:be:ab:25:13:48:06:bc:b0:af:
e2:9e:79:4d:4e:08:7a:fe:95:91:e4:93:d4:15:de:88:01:23:
42:fe:17:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:30:22 2026 by rpki-client