Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
File: sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft (raw, json)
Hash identifier: QPTtgghqndSkTwuMTpoKI3cOMog2KhbH/KV64LDTOhM=
Subject key identifier: 19:A1:21:73:5C:61:D5:32:5C:FA:20:43:41:DD:6E:8D:7D:C6:BF:1B
Authority key identifier: B0:09:5E:D0:11:C9:43:58:24:5C:32:75:7D:46:BE:D8:60:DF:4C:19
Certificate issuer: /CN=b0095ed011c94358245c32757d46bed860df4c19
Certificate serial: 01A0FA8F46CC8ECFD2F0A740CBE6C7958D3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
Manifest number: 0A2D
Signing time: Fri 02 Oct 2026 03:01:28 +0000
Manifest this update: Fri 02 Oct 2026 03:01:28 +0000
Manifest next update: Sat 03 Oct 2026 03:01:28 +0000
Files and hashes: 1: 4Rj8oxGUFHYrJxPoQ7CVMuOFbXc.roa (hash: RCK1ceQp3wSH8NYHA7LP9zIIM5o/+C88uArD/S/VsPI=)
2: sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl (hash: hnkf8XxOX1rJJ48Vv6xCKZRSECHJjDMaG8nsLLi0f1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fa:8f:46:cc:8e:cf:d2:f0:a7:40:cb:e6:c7:95:8d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0095ed011c94358245c32757d46bed860df4c19
Validity
Not Before: Oct 2 03:01:28 2026 GMT
Not After : Oct 3 03:01:28 2026 GMT
Subject: CN=19a121735c61d5325cfa204341dd6e8d7dc6bf1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b7:dd:9a:2f:07:0f:6b:35:2d:a4:f3:f7:68:
be:c0:5e:89:84:9f:af:e7:99:69:91:17:29:0b:55:
59:f2:2c:11:bc:bd:bc:e2:c8:a1:83:47:5d:54:b0:
8f:4e:7d:e9:ef:28:3c:1f:07:28:7a:c2:43:78:60:
5a:72:f5:78:b2:25:e4:02:07:23:13:d6:21:2e:7a:
10:b4:7f:2f:9f:85:28:18:54:cd:f6:32:bd:c1:9f:
d1:12:71:f2:ae:b8:f1:9e:ff:80:27:e6:63:ee:99:
48:88:ce:06:7f:24:b9:2f:ed:d2:04:1b:c8:b0:b5:
55:35:2a:eb:9f:09:0e:b8:f2:95:cd:01:77:3b:53:
04:38:5a:e0:59:94:a2:2d:08:c6:46:45:b7:ad:aa:
e1:da:f9:f9:6d:11:dc:cf:e4:6a:75:fe:9d:91:1e:
0a:b2:92:3d:e6:09:82:a3:60:ad:54:3d:3d:48:fa:
0d:f1:bc:69:b9:52:2e:c1:9c:64:0a:8f:0e:ed:ff:
b5:1d:b6:02:23:f3:c7:ff:f5:4a:ac:68:84:98:ed:
10:d3:b5:ac:63:f8:dd:60:3b:4c:c5:e4:eb:a8:2b:
74:4d:64:31:6e:8d:cb:ad:db:4a:96:f4:60:ba:9a:
70:3e:19:68:a7:21:80:b6:b5:3b:b6:ae:64:73:fc:
3a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A1:21:73:5C:61:D5:32:5C:FA:20:43:41:DD:6E:8D:7D:C6:BF:1B
X509v3 Authority Key Identifier:
keyid:B0:09:5E:D0:11:C9:43:58:24:5C:32:75:7D:46:BE:D8:60:DF:4C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:44:55:6b:db:67:2f:23:51:4b:ff:2d:5c:64:fd:91:33:16:
37:60:99:5e:f4:94:aa:82:b0:b2:37:3d:79:1b:a7:3a:3e:d7:
68:22:33:e1:e4:8f:2c:3a:d7:fe:e8:b2:b1:03:ed:77:b7:31:
da:5f:0f:28:4a:54:bb:96:29:17:7d:c0:41:ec:fd:91:eb:73:
d8:64:3e:40:37:d7:c8:17:60:c9:33:09:3d:16:81:74:73:ac:
1c:85:48:bc:7a:2d:3d:7b:93:92:33:f2:af:d9:f1:21:7b:6a:
b8:08:4a:99:13:26:79:2c:81:94:69:07:9e:65:13:cd:64:83:
09:be:95:bb:0e:b1:e3:c7:41:16:27:e1:20:d2:24:20:ad:66:
e5:d4:0c:df:01:ce:d1:0e:bb:2b:3a:d3:6b:3b:dc:ee:bd:86:
3c:e3:a4:48:bb:85:48:8c:44:60:32:6a:98:ce:56:3d:87:c5:
91:ac:bf:0d:f5:f1:9d:92:ed:76:ab:62:d5:23:1e:75:1d:b8:
0e:11:28:b5:44:0b:b9:21:03:45:d9:a9:e0:31:27:62:c4:e2:
95:02:71:e4:0c:23:0c:71:8c:c5:67:9f:25:14:e9:7d:3b:15:
1c:e1:22:2f:88:02:c4:95:14:dd:7f:53:b4:da:b6:30:74:66:
e5:16:65:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 07:44:53 2026 by rpki-client