Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.mft
File: AlqBIsJH0--70vaoFKX2h0VBiN8.mft (raw, json)
Hash identifier: hSWpC40sTFXksu/7abwxLBpTuyqfjz+eC+dFgkhnkNg=
Subject key identifier: 57:D0:97:91:B5:AA:D0:D1:51:F1:45:EF:F4:45:6F:C4:EA:6A:D8:80
Authority key identifier: 02:5A:81:22:C2:47:D3:EF:BB:D2:F6:A8:14:A5:F6:87:45:41:88:DF
Certificate issuer: /CN=025a8122c247d3efbbd2f6a814a5f687454188df
Certificate serial: 01A0C88F0901C8735B2E170E661ACA48B72C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AlqBIsJH0--70vaoFKX2h0VBiN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.mft
Manifest number: 1A68
Signing time: Tue 22 Sep 2026 10:00:11 +0000
Manifest this update: Tue 22 Sep 2026 10:00:11 +0000
Manifest next update: Wed 23 Sep 2026 10:00:11 +0000
Files and hashes: 1: AlqBIsJH0--70vaoFKX2h0VBiN8.crl (hash: RGQM64rh56rerG5aADQLZCusFaYOvRhUf6/8dG2Z2UI=)
2: DiLBDAdX2Rn6IbzlG165KKHARDw.roa (hash: efTlYN5L+Bk95Nj1I+etEzgtXBHg5cg9mNZu0CNmkQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AlqBIsJH0--70vaoFKX2h0VBiN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:8f:09:01:c8:73:5b:2e:17:0e:66:1a:ca:48:b7:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=025a8122c247d3efbbd2f6a814a5f687454188df
Validity
Not Before: Sep 22 10:00:11 2026 GMT
Not After : Sep 23 10:00:11 2026 GMT
Subject: CN=57d09791b5aad0d151f145eff4456fc4ea6ad880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3c:a3:86:28:48:16:ec:dd:24:15:98:5f:ed:
a1:dd:8c:3b:82:73:50:f8:a8:d4:f3:e8:54:b3:7a:
60:12:9b:9a:9b:eb:f6:cf:16:d3:75:c6:4c:d0:07:
3d:a2:1f:59:10:ff:45:22:91:24:39:3c:f0:ea:e9:
d9:b1:e6:b5:4a:36:22:db:88:de:e8:9a:44:43:b2:
c2:3b:3b:51:a7:44:93:a3:0e:57:53:61:f8:f1:f5:
d5:86:29:07:69:79:09:7f:a9:0b:f8:8e:d2:82:9b:
cb:7a:c9:83:0e:fe:6d:c7:21:b8:11:ef:0c:a0:25:
5d:d9:50:b7:1f:a3:4d:8f:94:a5:59:23:ef:28:4b:
aa:c3:61:7e:e3:b7:ac:20:a5:9a:ca:81:2f:62:a6:
6c:c2:23:e5:34:69:ec:2d:d0:91:7d:c1:fc:e7:fc:
fa:94:dc:1f:77:c6:6b:e7:eb:8b:30:d1:be:d1:0d:
bf:3f:e1:d6:a5:ee:71:19:fc:da:44:0d:eb:3d:93:
39:03:72:e7:7e:30:bb:74:f4:b4:2e:f2:d5:4e:ec:
a4:8f:1e:8e:17:99:1b:0a:75:ff:d3:f3:4e:ee:33:
12:0d:0f:29:2b:f9:26:03:67:49:12:74:08:2d:62:
96:8f:10:44:7e:ad:2f:98:b9:ae:51:72:90:7f:36:
4b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D0:97:91:B5:AA:D0:D1:51:F1:45:EF:F4:45:6F:C4:EA:6A:D8:80
X509v3 Authority Key Identifier:
keyid:02:5A:81:22:C2:47:D3:EF:BB:D2:F6:A8:14:A5:F6:87:45:41:88:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlqBIsJH0--70vaoFKX2h0VBiN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:cf:25:63:86:4d:00:fc:2e:c7:f1:4b:0c:8e:3c:11:60:fe:
a8:97:11:38:3d:11:e0:c8:eb:4c:f5:13:ed:5f:85:08:06:e1:
2e:f2:67:f2:f8:28:c2:a7:1d:f1:ad:56:dd:4e:f9:3b:e2:9f:
f8:cd:82:09:64:be:1e:66:f7:87:34:66:2b:32:05:76:0f:c2:
d6:3b:ee:c5:5d:e5:17:03:67:72:87:b0:0b:b8:9a:09:bb:32:
0a:02:f2:e1:a5:dd:fe:01:33:c2:4d:80:a9:9f:81:f6:3b:2f:
0e:3d:ad:85:b7:26:e7:67:16:ba:cb:d1:fc:36:4e:26:5a:41:
be:5f:7b:63:83:e8:04:65:aa:57:57:69:eb:22:ce:6f:9e:02:
64:e5:dc:67:5b:09:a8:c7:b6:a4:f2:33:a2:d4:25:c3:9d:26:
9d:4d:0a:ae:e4:24:7e:99:ed:15:ce:4f:eb:19:8d:c9:9c:4d:
8a:db:53:47:2d:1a:9a:09:71:ca:8c:ef:20:94:b7:c7:04:f1:
d8:e9:23:f6:bb:52:01:cd:16:6c:b5:a8:96:bc:0a:8a:5c:32:
12:0f:59:b8:e2:e6:76:c9:5a:a9:3a:2e:52:2a:13:ee:a0:77:
65:b9:25:c1:9e:77:19:e6:03:70:5f:8d:13:a0:a6:fa:d0:61:
c6:af:65:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:37:46 2026 by rpki-client