Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
File: sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft (raw, json)
Hash identifier: HAxZvOl7AFEJRbhMM3muBf3zSFLArxFlMiLXUrEelOU=
Subject key identifier: F8:6A:6C:9C:03:35:63:04:BF:43:02:3F:26:02:A3:CE:AD:40:D2:AD
Authority key identifier: B0:09:5E:D0:11:C9:43:58:24:5C:32:75:7D:46:BE:D8:60:DF:4C:19
Certificate issuer: /CN=b0095ed011c94358245c32757d46bed860df4c19
Certificate serial: 019FAA87EC6935A9931CF2FFA5F4F8C25B0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
Manifest number: 097F
Signing time: Tue 28 Jul 2026 21:01:02 +0000
Manifest this update: Tue 28 Jul 2026 21:01:02 +0000
Manifest next update: Wed 29 Jul 2026 21:01:02 +0000
Files and hashes: 1: 4Rj8oxGUFHYrJxPoQ7CVMuOFbXc.roa (hash: RCK1ceQp3wSH8NYHA7LP9zIIM5o/+C88uArD/S/VsPI=)
2: sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl (hash: RDE7Z43jlkLjkeKAvcXuB7ZFKrXjIoj/zpiNkfN7W0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:ec:69:35:a9:93:1c:f2:ff:a5:f4:f8:c2:5b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0095ed011c94358245c32757d46bed860df4c19
Validity
Not Before: Jul 28 21:01:02 2026 GMT
Not After : Jul 29 21:01:02 2026 GMT
Subject: CN=f86a6c9c03356304bf43023f2602a3cead40d2ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:24:76:18:6d:59:fa:d3:0d:e9:2b:d4:45:4e:
b8:fc:09:9e:6d:e7:86:a0:b1:81:1d:ea:ec:ff:a1:
b7:0a:2c:ff:8c:38:8e:9f:f2:b6:d0:c2:0b:04:61:
74:91:71:24:f8:00:1c:2d:b4:cf:89:3f:4d:8d:5d:
2e:c4:f9:76:2c:7d:5e:da:4c:f1:34:1a:49:5a:10:
5e:6e:1a:08:fb:76:e4:00:0c:9a:f1:91:62:35:d0:
17:26:b1:d0:d7:8f:37:22:9b:bb:95:61:02:e3:38:
c5:d9:d7:81:06:a5:dd:c4:6c:71:f3:82:c8:3c:9c:
9a:b8:4b:42:4e:3b:e9:a9:79:a8:2c:25:e8:08:1a:
d3:17:d0:3a:f7:97:ac:25:1a:88:69:b7:14:7e:e4:
55:f0:0d:3c:c5:fe:5b:c5:fe:68:fa:5c:71:43:63:
08:4a:a5:f0:fd:b6:8c:f2:d8:82:06:10:1a:4d:ff:
0e:a9:ad:1d:56:7b:89:eb:9a:7a:69:b0:1a:fe:9c:
1e:6f:ae:31:99:98:b1:3a:db:5a:c2:f1:26:ac:28:
1a:e6:9d:ac:e0:4d:09:93:b0:3c:81:c8:b7:eb:94:
5d:e9:c8:72:40:f3:af:81:f8:ca:b1:2c:6e:18:c3:
7a:a8:b6:19:83:c4:50:83:28:9d:73:d7:ee:0d:6c:
42:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:6A:6C:9C:03:35:63:04:BF:43:02:3F:26:02:A3:CE:AD:40:D2:AD
X509v3 Authority Key Identifier:
keyid:B0:09:5E:D0:11:C9:43:58:24:5C:32:75:7D:46:BE:D8:60:DF:4C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:c1:03:3d:65:29:65:a4:e2:74:a8:c6:87:f1:47:36:9b:c0:
4f:62:4d:d2:37:86:7a:e9:f0:28:6f:6e:1c:94:d9:44:d1:01:
47:34:1c:16:85:a9:51:1b:55:25:65:0e:45:40:ae:a3:ac:7c:
0e:44:2b:00:aa:9c:de:50:ad:5a:be:ea:23:7b:46:39:76:bc:
1e:6c:92:78:86:78:a5:37:80:82:53:6a:8a:a0:e5:9c:c5:b4:
58:bc:10:70:3a:73:02:59:d5:e4:46:93:74:47:dd:d4:05:fb:
f9:3c:cc:1f:eb:cd:07:c2:92:a7:59:bd:89:17:a8:48:8c:ec:
ab:2d:0d:fb:8b:ca:3b:20:68:17:97:62:27:73:d8:2b:ba:6d:
69:3b:fd:51:c2:77:14:cc:d7:52:57:39:7d:4d:c0:8a:6a:76:
d8:91:f3:ee:10:4b:31:b9:d9:73:c4:b5:d7:48:83:5e:2d:84:
6b:5a:23:68:f5:b6:c9:fa:03:b5:54:54:e9:a6:37:7d:5d:be:
d6:09:4a:e5:97:eb:01:57:32:5a:3c:9c:2e:fa:f0:53:bf:79:
bf:60:67:e4:c8:b3:04:d7:cf:6e:7f:2f:cc:37:b7:72:6b:23:
d7:5d:b3:11:f2:e4:8b:68:3c:9b:e5:48:02:d9:cd:f1:e2:46:
23:9e:67:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:27:08 2026 by rpki-client