Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.mft
File: AlqBIsJH0--70vaoFKX2h0VBiN8.mft (raw, json)
Hash identifier: cC+aRMJ6KOS+1aW2IC7kah97wY9SyBbuI4nQOe1DMZQ=
Subject key identifier: EE:40:91:17:27:78:B8:4D:D8:1A:C3:1A:24:00:C1:2F:9F:77:26:C6
Authority key identifier: 02:5A:81:22:C2:47:D3:EF:BB:D2:F6:A8:14:A5:F6:87:45:41:88:DF
Certificate issuer: /CN=025a8122c247d3efbbd2f6a814a5f687454188df
Certificate serial: 019FA8D02732F62B15590CAF1141DD1F1A9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AlqBIsJH0--70vaoFKX2h0VBiN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 13:00:41 +0000
Manifest this update: Tue 28 Jul 2026 13:00:41 +0000
Manifest next update: Wed 29 Jul 2026 13:00:41 +0000
Files and hashes: 1: AlqBIsJH0--70vaoFKX2h0VBiN8.crl (hash: dfjD8YSObks0rxx45Kx/TXj/4dniL08PX6dkTJCCYng=)
2: DiLBDAdX2Rn6IbzlG165KKHARDw.roa (hash: efTlYN5L+Bk95Nj1I+etEzgtXBHg5cg9mNZu0CNmkQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AlqBIsJH0--70vaoFKX2h0VBiN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:27:32:f6:2b:15:59:0c:af:11:41:dd:1f:1a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=025a8122c247d3efbbd2f6a814a5f687454188df
Validity
Not Before: Jul 28 13:00:41 2026 GMT
Not After : Jul 29 13:00:41 2026 GMT
Subject: CN=ee4091172778b84dd81ac31a2400c12f9f7726c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:54:cc:5d:14:ca:e6:e8:ee:c4:8b:e5:62:aa:
5b:7f:5c:a6:f5:7d:53:5a:f9:01:b3:d6:28:fc:f2:
86:fa:ab:7f:51:68:3d:a2:31:d7:aa:74:6d:91:f3:
46:c4:14:46:98:a9:34:fa:95:5c:0e:2a:0b:fc:30:
2f:35:dc:34:0f:36:4c:1e:af:6e:c1:dd:70:9c:3d:
15:61:ed:92:91:06:c8:44:d6:10:58:e4:59:ca:49:
79:be:c1:11:23:eb:55:41:7d:e0:2f:16:c9:9c:55:
a3:01:48:77:16:da:40:91:fb:4a:91:42:24:a1:68:
a9:c7:53:85:a5:d1:28:bc:5b:d8:8a:f9:98:85:8e:
d2:44:0b:33:e6:d4:af:27:9a:b8:ba:ed:08:d9:b9:
a6:1a:9d:e1:d4:0f:e1:1b:35:01:cf:02:47:02:3c:
c9:cf:99:e9:9b:97:2d:23:5b:04:d8:96:30:72:fa:
99:24:fe:02:0c:94:1d:50:61:0e:19:7b:85:25:3c:
b0:94:88:05:1b:2a:83:61:36:60:87:75:f6:2d:30:
a7:4a:ef:82:0a:3e:75:37:51:42:ac:eb:66:41:bf:
de:44:aa:f0:48:4d:9a:d3:98:3e:4f:69:33:17:8d:
e6:2d:47:d2:35:81:0c:61:de:ad:77:d1:19:ce:d1:
81:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:40:91:17:27:78:B8:4D:D8:1A:C3:1A:24:00:C1:2F:9F:77:26:C6
X509v3 Authority Key Identifier:
keyid:02:5A:81:22:C2:47:D3:EF:BB:D2:F6:A8:14:A5:F6:87:45:41:88:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlqBIsJH0--70vaoFKX2h0VBiN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:86:7e:ea:f0:49:c8:82:6c:80:4c:5f:1f:e0:8d:85:00:ba:
52:a8:20:0e:b2:32:97:fc:a8:e3:0d:5e:59:ab:cd:54:4d:a2:
c3:c2:51:10:bb:e6:ee:5a:de:3f:44:98:7c:c8:fb:cd:eb:a6:
9c:e2:ca:f1:bf:03:2b:e5:60:fa:c9:fc:df:78:5c:9b:ed:5e:
c5:59:79:f3:5f:7e:9b:ac:ab:3f:22:1d:0c:ae:4c:f5:1d:d8:
03:b9:0f:0c:cd:8e:1d:0f:20:01:08:67:71:86:ac:b1:65:0d:
50:b5:5f:3c:91:10:67:23:b4:64:90:48:4c:90:c7:ac:6d:a3:
19:63:36:e3:77:29:85:27:eb:55:3b:47:0e:ae:2d:ca:4a:40:
04:33:e2:e0:39:14:44:ac:7a:10:cc:d9:4d:35:37:c7:ce:2e:
73:f0:50:2d:98:ae:ba:f3:d9:51:12:ac:b7:54:65:44:1d:c9:
18:12:39:9f:51:df:9a:e4:90:df:b9:2e:bf:df:42:17:ab:9f:
8a:03:c3:d0:a1:2a:a6:36:50:6c:f0:a7:3f:82:6f:29:42:0d:
e3:e6:c2:fa:0f:97:a5:8b:89:e6:c4:c2:27:6c:64:57:51:80:
78:fc:43:8e:33:d7:e4:fc:53:ae:d0:78:4c:c7:33:6c:62:34:
35:a5:0a:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+o0Ccy9isVWQyvEUHdHxqdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNWE4MTIyYzI0N2QzZWZiYmQyZjZhODE0YTVmNjg3NDU0
MTg4ZGYwHhcNMjYwNzI4MTMwMDQxWhcNMjYwNzI5MTMwMDQxWjAzMTEwLwYDVQQD
EyhlZTQwOTExNzI3NzhiODRkZDgxYWMzMWEyNDAwYzEyZjlmNzcyNmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1TMXRTK5ujuxIvlYqpbf1ym9X1T
WvkBs9Yo/PKG+qt/UWg9ojHXqnRtkfNGxBRGmKk0+pVcDioL/DAvNdw0DzZMHq9u
wd1wnD0VYe2SkQbIRNYQWORZykl5vsERI+tVQX3gLxbJnFWjAUh3FtpAkftKkUIk
oWipx1OFpdEovFvYivmYhY7SRAsz5tSvJ5q4uu0I2bmmGp3h1A/hGzUBzwJHAjzJ
z5npm5ctI1sE2JYwcvqZJP4CDJQdUGEOGXuFJTywlIgFGyqDYTZgh3X2LTCnSu+C
Cj51N1FCrOtmQb/eRKrwSE2a05g+T2kzF43mLUfSNYEMYd6td9EZztGBUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO5AkRcneLhN2BrDGiQAwS+fdybGMB8GA1UdIwQY
MBaAFAJagSLCR9Pvu9L2qBSl9odFQYjfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWxxQklzSkgwLS03MHZhb0ZLWDJoMFZCaU44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9lMjk5MWEtZGIwZi00YzNmLWJjMDgt
MWIzZTM1OTUxMDFiLzEvQWxxQklzSkgwLS03MHZhb0ZLWDJoMFZCaU44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9lMjk5MWEtZGIwZi00YzNmLWJjMDgtMWIzZTM1OTUxMDFi
LzEvQWxxQklzSkgwLS03MHZhb0ZLWDJoMFZCaU44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUYZ+6vBJ
yIJsgExfH+CNhQC6UqggDrIyl/yo4w1eWavNVE2iw8JRELvm7lreP0SYfMj7zeum
nOLK8b8DK+Vg+sn833hcm+1exVl5819+m6yrPyIdDK5M9R3YA7kPDM2OHQ8gAQhn
cYassWUNULVfPJEQZyO0ZJBITJDHrG2jGWM243cphSfrVTtHDq4tykpABDPi4DkU
RKx6EMzZTTU3x84uc/BQLZiuuvPZURKst1RlRB3JGBI5n1HfmuSQ37kuv99CF6uf
igPD0KEqpjZQbPCnP4JvKUIN4+bC+g+XpYuJ5sTCJ2xkV1GAePxDjjPX5PxTrtB4
TMczbGI0NaUK9A==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:16 2026 by rpki-client