Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
File: aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft (raw, json)
Hash identifier: JamhDcppd1Edt8SGZveLJyexoKE27fKpIiEER6dAl+o=
Subject key identifier: 70:8F:78:83:A8:3D:8A:8B:FF:4B:2B:4E:AF:B9:B6:E4:D0:2C:E5:0A
Authority key identifier: 68:B2:2E:EA:4A:4A:3B:81:65:4A:22:7E:DA:94:E0:E7:59:37:B0:15
Certificate issuer: /CN=68b22eea4a4a3b81654a227eda94e0e75937b015
Certificate serial: 019D98BD7A2E1478F8CB90276D97B7CB9F64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
Manifest number: 148A
Signing time: Fri 17 Apr 2026 00:00:47 +0000
Manifest this update: Fri 17 Apr 2026 00:00:47 +0000
Manifest next update: Sat 18 Apr 2026 00:00:47 +0000
Files and hashes: 1: Rc3F-GHPtna2uoaeYmvRb-dnnrw.roa (hash: O6ngTo5TuDQj2qWilyUQS84tY6mMFLMkzqiBF36kpVY=)
2: aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl (hash: vjAgXV3mcpzTa8p6Lq+8jzQQDd+gyFcdwUVU2dWeMAk=)
3: iQgCqwK7l4P2GKdSjJc-dEwoUDE.roa (hash: 6ZaHwDSQPPYhJ5ldPXpCjzOWcdqBA9Sc4lSpH6CyEmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:7a:2e:14:78:f8:cb:90:27:6d:97:b7:cb:9f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b22eea4a4a3b81654a227eda94e0e75937b015
Validity
Not Before: Apr 17 00:00:47 2026 GMT
Not After : Apr 18 00:00:47 2026 GMT
Subject: CN=708f7883a83d8a8bff4b2b4eafb9b6e4d02ce50a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:69:6f:03:73:7e:d0:30:59:b4:2e:0c:02:5a:
b7:85:20:45:a9:7e:51:2f:cd:6b:e4:b5:87:9c:98:
b0:f0:58:9b:0d:bc:66:1f:2b:53:89:92:fb:8d:f8:
f4:51:2a:53:ee:4c:4b:24:b9:2d:92:2c:86:ba:51:
f1:19:7b:5d:21:fe:e4:f5:d6:18:87:7c:55:f6:e0:
5f:a7:b7:3d:91:c8:6f:cb:9a:19:1b:01:a8:41:28:
3f:bd:d0:b0:8a:20:e0:5b:58:84:7f:27:2c:89:b4:
94:ed:d3:4b:93:ad:dc:73:60:7c:0e:0c:ce:4d:4e:
4a:56:a8:6b:10:56:d3:f8:b1:f2:78:2f:b8:62:d6:
9f:4f:57:e3:9b:d1:08:2f:f1:80:0d:e2:be:7f:22:
b9:56:ed:86:0e:6b:8a:01:b3:43:ce:5c:d7:e2:d3:
ac:6f:02:24:8e:d0:e8:c3:26:6c:4c:0c:40:04:18:
af:d8:ef:bd:73:e2:18:e4:59:b6:11:0a:09:61:3d:
e4:75:43:6e:2e:24:cc:c8:29:fd:ff:90:35:db:92:
7a:a4:d6:a8:d1:91:12:da:eb:59:1e:10:0f:c1:42:
ef:90:63:24:50:85:69:46:a3:0e:a5:cc:6c:92:b2:
0c:11:ea:58:08:0f:ad:96:cb:f0:bd:69:0d:ca:1f:
e1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:8F:78:83:A8:3D:8A:8B:FF:4B:2B:4E:AF:B9:B6:E4:D0:2C:E5:0A
X509v3 Authority Key Identifier:
keyid:68:B2:2E:EA:4A:4A:3B:81:65:4A:22:7E:DA:94:E0:E7:59:37:B0:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:64:cb:49:54:97:eb:aa:95:2f:d5:ef:90:5b:92:75:5f:f6:
82:d1:58:58:27:d9:2d:17:55:f3:93:4e:3c:0f:eb:b6:a5:b1:
5c:31:90:cc:fa:5d:79:c5:67:e8:61:db:89:a0:1e:b2:df:34:
e0:34:e9:35:93:9e:e7:37:ce:84:05:4b:d9:ce:b7:d7:94:d3:
fd:25:8c:48:8e:15:de:f4:07:7c:fc:40:c8:b9:01:ac:38:f3:
af:2e:5d:7c:bb:88:97:8f:b6:c3:8d:38:33:ed:aa:ec:69:ef:
02:68:de:44:eb:6f:1a:dc:71:97:22:c5:45:5a:0e:d1:f0:00:
57:54:11:4e:6d:d1:3a:bd:ce:27:a6:cb:ef:dc:d0:e0:ac:d5:
1d:e2:8f:0a:7a:7c:82:b5:16:df:33:40:4e:0b:04:25:f4:7b:
69:6a:35:97:80:d5:2b:0b:c9:a1:12:ea:98:35:18:ad:70:08:
a1:66:78:8d:d4:71:d6:12:02:d9:b3:35:2a:ab:70:1c:f6:3c:
77:7d:53:cc:75:7f:b9:37:d7:e7:4b:c1:c5:50:c8:8d:d7:0d:
99:27:81:c0:f0:b9:b5:3b:68:67:99:6b:31:e2:16:23:26:b1:
2c:a4:4b:a3:89:b7:0b:11:bf:95:13:24:1d:fc:28:02:e5:5b:
f2:c1:e4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:28:26 2026 by rpki-client