Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
File: aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft (raw, json)
Hash identifier: I3f0E5fuQWLf2GZtaezBgQDSLdjYfWj5925TTz+BmOI=
Subject key identifier: 02:13:B7:9D:E2:E9:29:7E:CF:8E:56:5F:7E:7D:18:6B:40:D4:18:92
Authority key identifier: 68:B2:2E:EA:4A:4A:3B:81:65:4A:22:7E:DA:94:E0:E7:59:37:B0:15
Certificate issuer: /CN=68b22eea4a4a3b81654a227eda94e0e75937b015
Certificate serial: 019FA9E2AC6B4F05EFDDA4F50F6826F2E36D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
Manifest number: 159C
Signing time: Tue 28 Jul 2026 18:00:32 +0000
Manifest this update: Tue 28 Jul 2026 18:00:32 +0000
Manifest next update: Wed 29 Jul 2026 18:00:32 +0000
Files and hashes: 1: Rc3F-GHPtna2uoaeYmvRb-dnnrw.roa (hash: O6ngTo5TuDQj2qWilyUQS84tY6mMFLMkzqiBF36kpVY=)
2: aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl (hash: 9+xO6At4EUWFSnqZxohBD/SDTgq53e5fEau/D1uBnPY=)
3: iQgCqwK7l4P2GKdSjJc-dEwoUDE.roa (hash: 6ZaHwDSQPPYhJ5ldPXpCjzOWcdqBA9Sc4lSpH6CyEmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:ac:6b:4f:05:ef:dd:a4:f5:0f:68:26:f2:e3:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b22eea4a4a3b81654a227eda94e0e75937b015
Validity
Not Before: Jul 28 18:00:32 2026 GMT
Not After : Jul 29 18:00:32 2026 GMT
Subject: CN=0213b79de2e9297ecf8e565f7e7d186b40d41892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a0:80:d6:2e:db:4d:0b:76:d3:12:4b:6b:46:
11:4b:75:b2:2d:d3:b0:4c:ac:be:29:71:95:bd:91:
ca:61:9c:38:4b:5c:45:42:6b:13:89:9f:9b:a7:36:
9a:c3:f4:34:ac:74:be:75:d3:e8:5e:91:0b:10:a7:
85:2f:7b:ab:8c:f8:d6:ea:e4:4c:c2:81:19:1f:94:
1c:e7:0e:3d:86:c5:33:d4:a7:ec:15:00:37:9f:f0:
72:8c:e0:ea:c4:1f:08:f4:36:59:8b:a6:a7:1b:58:
d5:65:2e:af:c8:65:1a:e7:74:3c:9c:c7:94:e0:47:
a1:f9:c9:58:8f:3d:46:06:a1:2d:42:c8:eb:0e:0f:
c3:e0:36:d7:e5:1d:9e:01:73:3a:16:a6:d3:61:9d:
8d:0a:a5:8e:9b:ee:c3:11:bd:18:67:66:09:72:c6:
28:45:02:ef:6a:8e:e9:01:fc:0e:68:8e:b3:ee:38:
9d:50:6d:5c:90:08:89:52:c6:73:6a:cd:e0:80:c4:
15:a0:68:be:7b:39:91:0c:7f:b4:e6:70:ab:c1:c5:
63:38:8f:30:ec:8e:c4:66:47:7d:12:9f:36:51:87:
bd:fc:b9:b6:db:33:ad:4b:37:7c:02:95:b7:e9:58:
be:09:9d:5f:fa:95:4f:27:e8:7a:a7:2b:07:c4:dc:
5c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:13:B7:9D:E2:E9:29:7E:CF:8E:56:5F:7E:7D:18:6B:40:D4:18:92
X509v3 Authority Key Identifier:
keyid:68:B2:2E:EA:4A:4A:3B:81:65:4A:22:7E:DA:94:E0:E7:59:37:B0:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:b4:85:ee:44:41:a7:89:fd:97:33:fb:17:f0:33:d0:a2:62:
05:ac:69:81:2b:4b:93:21:69:d6:4f:15:23:e3:3e:4d:b1:8c:
27:b5:cb:bb:e1:e1:27:74:ad:38:0d:70:6e:f0:f8:85:f4:48:
c5:91:bb:04:37:3f:8b:4e:7f:ea:90:fe:5a:a1:b6:a2:4f:dd:
cd:3a:37:cf:18:92:4f:54:ca:f5:b9:fd:06:c2:30:c1:36:da:
43:db:49:97:a6:27:bd:1e:32:9e:a7:0e:57:0f:9f:83:b1:1b:
84:2c:9d:66:6c:ac:a8:b9:29:3a:c8:95:d3:46:12:4c:64:22:
48:11:af:7e:c0:ee:d7:65:00:92:dd:3a:41:db:65:62:3b:43:
e6:9f:54:60:c4:16:85:f7:9f:d9:cd:c2:45:32:80:35:8b:f4:
fd:46:a1:e0:2c:18:67:93:6b:bd:58:09:87:50:68:4f:fa:42:
97:d3:56:b7:23:8c:76:7f:2a:db:1d:87:32:15:65:e7:c5:dd:
fb:01:1f:6e:c8:1f:2b:c3:68:58:fc:fd:f1:cf:fa:3f:eb:2b:
1c:75:52:0e:0a:bf:35:a9:4d:6c:02:b5:8d:33:fa:12:92:e4:
e2:fb:3a:10:24:f7:a2:38:c8:2a:8a:66:56:5f:64:ce:dc:42:
dd:ef:b0:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:18:26 2026 by rpki-client