Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/48f09e-7386-4139-91c8-3c88e40e711c/1/ALlD7lfDXyx_T-wGhel9YDsHytI.mft
File: ALlD7lfDXyx_T-wGhel9YDsHytI.mft (raw, json)
Hash identifier: jCWivd84GEIOD/l8kUXO9UefNiV4uQhJ66TnH1hxs7Q=
Subject key identifier: F0:AA:26:8B:5B:E2:0B:DC:25:A2:51:80:F0:49:4F:3E:25:32:DC:A0
Authority key identifier: 00:B9:43:EE:57:C3:5F:2C:7F:4F:EC:06:85:E9:7D:60:3B:07:CA:D2
Certificate issuer: /CN=00b943ee57c35f2c7f4fec0685e97d603b07cad2
Certificate serial: 01A0C17A9732018BD76A4671F8F8D4F2D286
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ALlD7lfDXyx_T-wGhel9YDsHytI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/48f09e-7386-4139-91c8-3c88e40e711c/1/ALlD7lfDXyx_T-wGhel9YDsHytI.mft
Manifest number: 0E26
Signing time: Mon 21 Sep 2026 01:00:31 +0000
Manifest this update: Mon 21 Sep 2026 01:00:31 +0000
Manifest next update: Tue 22 Sep 2026 01:00:31 +0000
Files and hashes: 1: ALlD7lfDXyx_T-wGhel9YDsHytI.crl (hash: TtCygj4xUGVfaeZiPCbgPGPH3HkxruMte8jZF+DyY24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/48f09e-7386-4139-91c8-3c88e40e711c/1/ALlD7lfDXyx_T-wGhel9YDsHytI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/48f09e-7386-4139-91c8-3c88e40e711c/1/ALlD7lfDXyx_T-wGhel9YDsHytI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ALlD7lfDXyx_T-wGhel9YDsHytI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 01:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:7a:97:32:01:8b:d7:6a:46:71:f8:f8:d4:f2:d2:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00b943ee57c35f2c7f4fec0685e97d603b07cad2
Validity
Not Before: Sep 21 01:00:31 2026 GMT
Not After : Sep 22 01:00:31 2026 GMT
Subject: CN=f0aa268b5be20bdc25a25180f0494f3e2532dca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f4:7b:ff:d6:b9:a9:0f:d8:e0:63:ea:ad:01:
a8:39:83:4b:3f:97:0d:14:82:55:8d:ab:96:98:5d:
a2:fd:0f:07:04:75:c2:bf:2e:c4:88:94:f2:53:b2:
05:04:a1:fe:df:83:ab:3f:82:fa:05:49:45:08:e8:
4a:45:a0:f7:55:06:62:46:87:32:bc:68:7f:6a:06:
18:6c:90:2d:ce:6c:f3:ed:ae:49:74:bf:8c:ff:69:
10:6a:22:73:f3:91:08:91:d0:d4:3c:3e:85:79:38:
11:b0:22:1e:e4:4e:a4:2e:a2:38:79:0c:b6:36:12:
a5:42:c1:5d:1f:cc:c8:e4:a4:9b:ee:45:fd:a7:5d:
a6:ed:d0:d5:c4:47:bd:c4:4e:20:bf:d4:cc:19:02:
14:06:68:00:0b:83:85:eb:90:04:75:06:36:c1:5f:
96:f1:9c:b1:ad:52:91:bd:01:3f:24:5f:ee:da:a8:
ae:a3:a6:48:9f:af:79:ca:2a:77:77:2f:ca:50:6c:
c6:db:45:91:95:a0:28:be:c1:fc:d8:b3:d7:7d:9f:
c5:5a:ba:63:d0:47:36:b2:80:e1:b0:ef:8e:a8:36:
51:1c:f6:1c:17:39:70:1a:72:d3:e8:d3:8e:9b:d2:
e4:f2:e3:d2:19:2a:80:81:1e:d3:25:72:e9:a2:89:
9e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:AA:26:8B:5B:E2:0B:DC:25:A2:51:80:F0:49:4F:3E:25:32:DC:A0
X509v3 Authority Key Identifier:
keyid:00:B9:43:EE:57:C3:5F:2C:7F:4F:EC:06:85:E9:7D:60:3B:07:CA:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ALlD7lfDXyx_T-wGhel9YDsHytI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/48f09e-7386-4139-91c8-3c88e40e711c/1/ALlD7lfDXyx_T-wGhel9YDsHytI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/48f09e-7386-4139-91c8-3c88e40e711c/1/ALlD7lfDXyx_T-wGhel9YDsHytI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:f6:e0:6c:c2:f6:7f:ec:bf:c1:eb:08:6d:0c:b8:6a:00:5f:
0a:fa:64:83:54:1c:74:b0:cc:11:cb:9f:2c:6b:87:b0:2e:83:
5f:18:a8:17:a3:14:f4:d6:23:5b:3e:eb:60:e1:c3:73:49:56:
81:25:01:3c:dd:e2:93:16:bc:83:a4:e1:81:98:7e:d6:46:d9:
d7:2d:2b:a8:28:73:58:7c:e6:e3:7b:7e:8d:21:e8:65:57:d2:
91:37:8b:0d:6c:6f:04:7f:29:2f:2c:89:cd:f4:ef:68:30:54:
8f:6e:ab:f4:d3:ba:1c:01:4d:02:9a:02:69:de:d2:7c:26:1a:
aa:66:1e:36:61:09:e0:f5:e4:c1:67:eb:f0:c8:bf:26:13:09:
f4:01:5e:21:2d:fa:ab:a4:d1:11:15:bd:b9:16:6b:3e:25:32:
2f:84:f2:fc:3b:29:4a:a4:9d:88:a2:74:f4:27:e8:e7:fa:aa:
1d:c9:65:00:13:ad:7a:14:c3:e6:6d:6b:9d:85:e6:5b:24:1a:
a7:08:55:9e:f3:18:d6:eb:72:2b:0a:4a:b0:39:b0:2e:c4:e8:
5a:a2:10:13:0c:a5:3b:e9:01:10:cb:a6:27:b5:b7:62:e2:0d:
eb:1f:d8:bf:fe:ef:6b:84:67:8e:ff:ec:66:5f:29:61:5b:26:
f9:36:47:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:50:04 2026 by rpki-client