Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
File: sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft (raw, json)
Hash identifier: ZsWpeMBoD+HQY0kq59DJ/jvOWsuzNqTjyaqbyEf5h7A=
Subject key identifier: 71:E4:5B:82:27:5A:B1:7F:7D:EF:C0:F4:61:A3:F4:3D:B9:DF:AD:73
Authority key identifier: B0:09:5E:D0:11:C9:43:58:24:5C:32:75:7D:46:BE:D8:60:DF:4C:19
Certificate issuer: /CN=b0095ed011c94358245c32757d46bed860df4c19
Certificate serial: 019CAA8F5EE80224EB0A60B06E19113DC838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
Manifest number: 07EF
Signing time: Sun 01 Mar 2026 18:00:48 +0000
Manifest this update: Sun 01 Mar 2026 18:00:48 +0000
Manifest next update: Mon 02 Mar 2026 18:00:48 +0000
Files and hashes: 1: 5l92TKSO_nkIuzIJ4zucDeK79pk.roa (hash: XUtIUMfFBwHG02M6rf+xdt+n5Vz/NsIVHT2NMMg6/cc=)
2: sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl (hash: 0CUrMIkZCHWYHPILJk7mc5Jtu+x6IHMK1aoBtcL9T84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:5e:e8:02:24:eb:0a:60:b0:6e:19:11:3d:c8:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0095ed011c94358245c32757d46bed860df4c19
Validity
Not Before: Mar 1 18:00:48 2026 GMT
Not After : Mar 2 18:00:48 2026 GMT
Subject: CN=71e45b82275ab17f7defc0f461a3f43db9dfad73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2c:2c:a9:3a:52:18:f3:d8:d3:e7:c9:40:5f:
bf:96:cd:b0:da:07:22:ca:0d:36:37:49:d7:c5:ae:
59:ac:18:1f:79:83:87:d6:b5:66:90:23:e0:63:a0:
7a:f3:fe:ec:17:0a:94:28:11:af:ee:8d:a3:03:dc:
00:3d:51:4e:c1:db:38:95:78:3d:09:e1:fa:d0:13:
99:a0:1b:b5:5e:88:0b:f1:8c:c6:ba:2a:a8:ed:7c:
aa:0c:aa:ac:87:ec:5d:68:23:22:eb:86:c4:e6:8e:
c9:7d:a2:4a:b0:67:e1:c1:48:71:56:6e:c1:1f:db:
be:d0:d9:33:3b:44:4d:39:48:85:0c:b6:b8:15:9d:
61:88:f1:11:df:1f:a0:25:85:d9:9b:95:01:33:e2:
dd:14:92:99:d0:cb:79:81:7a:66:93:01:61:d3:6d:
a3:ae:e4:3c:17:6f:ce:31:8e:cb:13:43:1c:af:72:
c6:97:16:ef:67:d9:bf:18:69:54:f1:6f:1c:5a:cb:
1f:62:92:01:2b:07:94:bb:3d:dc:05:5e:b8:c4:f3:
68:31:78:79:82:11:e4:28:94:4c:6f:ae:38:3e:3f:
46:86:64:05:cb:51:2d:17:38:6c:ff:18:38:08:21:
cb:f2:55:cf:0d:24:d0:87:e0:0e:80:97:00:d0:6c:
bb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E4:5B:82:27:5A:B1:7F:7D:EF:C0:F4:61:A3:F4:3D:B9:DF:AD:73
X509v3 Authority Key Identifier:
keyid:B0:09:5E:D0:11:C9:43:58:24:5C:32:75:7D:46:BE:D8:60:DF:4C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:97:49:42:71:0f:7a:96:01:db:c0:c1:ba:9f:10:bb:1f:f3:
6c:4a:5c:15:ee:1a:49:ae:2b:ff:95:b6:cf:b2:5f:ae:ea:b0:
fa:13:5e:22:0e:da:26:c4:ba:93:2c:85:3e:1c:84:04:72:f0:
91:f2:10:df:e9:a1:00:fd:b4:47:68:87:67:74:bb:4f:5f:f1:
cf:cf:81:e9:b9:bc:91:97:e0:32:b3:f6:50:78:15:fc:be:8b:
51:9f:ce:74:34:72:e9:fe:3f:dd:99:67:9b:82:53:e9:08:8b:
64:25:ab:b8:1e:45:8c:56:b5:d3:f8:fd:bb:2a:1f:3d:af:e5:
32:54:4c:bc:44:7b:71:aa:0f:f5:f7:7c:d7:fc:68:1b:51:ae:
38:02:68:f8:38:2b:2a:79:02:87:6d:72:8d:c9:4e:d9:d7:93:
d9:fb:4c:87:83:bf:76:66:55:eb:13:9e:83:3a:03:ee:43:a6:
1f:34:ab:30:6e:42:03:a4:04:26:7f:4f:00:df:fa:a8:f4:60:
ec:bc:8f:bd:90:78:33:7c:b7:dc:5f:41:bc:c6:f5:9f:e5:02:
d4:c2:9f:8f:ec:45:4f:57:dd:3b:c3:8d:78:1b:08:98:f1:c3:
5f:95:4c:61:d5:19:d1:05:56:a5:77:8b:27:9c:55:8b:8b:24:
27:73:e2:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:57:40 2026 by rpki-client