Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/854c21-5e1a-451d-aea1-fca0741a586e/1/aluKc4anCgzU9gC-dYHe-JRHOkE.mft
File: aluKc4anCgzU9gC-dYHe-JRHOkE.mft (raw, json)
Hash identifier: k+L18WjpYMijEFveKPg8m7eWLYlbngftS9T5MaCMrjM=
Subject key identifier: 2E:4C:0E:44:89:13:12:D8:57:FB:E3:A9:9A:10:EA:5C:73:A6:88:B0
Authority key identifier: 6A:5B:8A:73:86:A7:0A:0C:D4:F6:00:BE:75:81:DE:F8:94:47:3A:41
Certificate issuer: /CN=6a5b8a7386a70a0cd4f600be7581def894473a41
Certificate serial: 019CADFE6D4D3657677DE12BC7B6E61E3714
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aluKc4anCgzU9gC-dYHe-JRHOkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/854c21-5e1a-451d-aea1-fca0741a586e/1/aluKc4anCgzU9gC-dYHe-JRHOkE.mft
Manifest number: 0966
Signing time: Mon 02 Mar 2026 10:00:58 +0000
Manifest this update: Mon 02 Mar 2026 10:00:58 +0000
Manifest next update: Tue 03 Mar 2026 10:00:58 +0000
Files and hashes: 1: aluKc4anCgzU9gC-dYHe-JRHOkE.crl (hash: o1kGYfR70FwQM7DErqqnRRtrDtydNPfJNYEep60ZQEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/854c21-5e1a-451d-aea1-fca0741a586e/1/aluKc4anCgzU9gC-dYHe-JRHOkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/854c21-5e1a-451d-aea1-fca0741a586e/1/aluKc4anCgzU9gC-dYHe-JRHOkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aluKc4anCgzU9gC-dYHe-JRHOkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:6d:4d:36:57:67:7d:e1:2b:c7:b6:e6:1e:37:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5b8a7386a70a0cd4f600be7581def894473a41
Validity
Not Before: Mar 2 10:00:58 2026 GMT
Not After : Mar 3 10:00:58 2026 GMT
Subject: CN=2e4c0e44891312d857fbe3a99a10ea5c73a688b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0f:48:75:e7:05:2c:55:4e:da:c8:85:af:77:
47:14:df:6e:84:6f:44:b2:9a:51:78:c4:89:df:67:
32:78:61:65:8a:b4:b0:de:cd:f4:e9:55:b1:b5:f4:
24:f7:d5:43:20:29:7c:aa:20:b0:7e:90:72:34:20:
ae:b0:b8:6e:c9:46:d3:b1:e7:34:28:68:b2:34:89:
8a:d9:61:34:85:2c:5b:d5:fd:e4:62:7a:40:4c:a4:
74:42:8b:fc:ac:f4:34:00:d8:4f:40:77:53:eb:1e:
11:7b:0e:9e:51:38:e6:4a:17:c5:f6:51:ca:0b:c4:
84:92:fc:81:02:b3:33:79:c6:80:95:5c:83:c6:79:
28:d5:0e:55:fb:39:8e:52:19:7c:25:38:66:56:b4:
aa:05:59:10:73:9c:6c:18:81:8a:ce:5a:1f:9e:9d:
0b:af:5c:8b:92:13:16:28:4b:ed:b6:30:bb:77:c2:
80:01:98:a7:45:97:4e:3f:04:eb:89:d1:f6:c9:7e:
99:4a:5a:f2:fb:d8:fa:4d:cd:47:51:e8:23:5e:11:
77:26:5a:8d:b1:b1:01:21:71:51:be:7d:ca:64:b8:
f6:05:55:db:3c:12:5e:e3:14:fd:39:28:3b:6c:f1:
88:b1:69:bc:a8:2a:49:7f:46:73:0e:07:cc:6d:5d:
1c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:4C:0E:44:89:13:12:D8:57:FB:E3:A9:9A:10:EA:5C:73:A6:88:B0
X509v3 Authority Key Identifier:
keyid:6A:5B:8A:73:86:A7:0A:0C:D4:F6:00:BE:75:81:DE:F8:94:47:3A:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aluKc4anCgzU9gC-dYHe-JRHOkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/854c21-5e1a-451d-aea1-fca0741a586e/1/aluKc4anCgzU9gC-dYHe-JRHOkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/854c21-5e1a-451d-aea1-fca0741a586e/1/aluKc4anCgzU9gC-dYHe-JRHOkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:1b:44:86:8e:91:a3:24:38:f5:b9:14:8a:30:d7:36:cb:e5:
bb:e5:07:8b:6e:00:bc:4b:72:84:a7:05:97:38:d7:fb:d4:fb:
4a:ff:d0:20:b4:9a:9d:65:83:e7:d1:b0:a0:f3:84:6c:8c:5f:
3c:22:4c:ba:22:bf:3c:19:a2:ab:3f:72:24:d5:38:76:37:84:
3a:d4:fd:e7:14:0d:84:58:62:50:64:31:47:4f:5a:e1:17:8a:
6c:97:f7:a5:89:57:a5:09:8d:79:6b:5f:6b:89:6d:17:ac:de:
b2:e7:1a:5b:ca:6d:91:d3:04:aa:f9:3b:33:0e:cf:9a:87:51:
84:7b:72:5c:f2:50:fd:ec:dc:d2:7c:9f:31:fa:14:86:8d:03:
3e:e8:2a:5e:c6:23:4a:81:09:e4:29:7a:e2:02:36:96:d5:fe:
a1:3d:e8:6c:d2:39:05:29:12:08:f1:62:81:06:b0:59:cc:0a:
c0:b2:2a:ac:a6:6e:b7:eb:d2:31:e9:80:44:e4:2e:39:7d:24:
d6:f5:b1:e9:d7:57:25:19:ba:7f:c9:ef:70:4e:40:04:24:71:
f9:13:82:cb:7d:f4:b4:b4:8c:2a:23:43:90:4f:b2:13:ef:a3:
65:cd:b3:7c:bc:8d:55:c2:cd:cd:44:a9:db:83:fa:2d:80:58:
c6:1a:c8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:49:05 2026 by rpki-client