Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/48f09e-7386-4139-91c8-3c88e40e711c/1/ALlD7lfDXyx_T-wGhel9YDsHytI.mft
File: ALlD7lfDXyx_T-wGhel9YDsHytI.mft (raw, json)
Hash identifier: Vbf6OqFSe5i6R40aFImcSHDK5Bn9BvBNYkQH3TJ4JBE=
Subject key identifier: A0:F5:11:37:FC:2B:49:CF:E1:23:E7:2B:C6:EB:BF:D6:34:8A:5E:91
Authority key identifier: 00:B9:43:EE:57:C3:5F:2C:7F:4F:EC:06:85:E9:7D:60:3B:07:CA:D2
Certificate issuer: /CN=00b943ee57c35f2c7f4fec0685e97d603b07cad2
Certificate serial: 019FA974B480640F0D44EC01A0B98DE5189E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ALlD7lfDXyx_T-wGhel9YDsHytI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/48f09e-7386-4139-91c8-3c88e40e711c/1/ALlD7lfDXyx_T-wGhel9YDsHytI.mft
Manifest number: 0D95
Signing time: Tue 28 Jul 2026 16:00:25 +0000
Manifest this update: Tue 28 Jul 2026 16:00:25 +0000
Manifest next update: Wed 29 Jul 2026 16:00:25 +0000
Files and hashes: 1: ALlD7lfDXyx_T-wGhel9YDsHytI.crl (hash: yhcRO+mEWeutlsWR5PRn7m/QOc4DmceNsZLMIN8adm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/48f09e-7386-4139-91c8-3c88e40e711c/1/ALlD7lfDXyx_T-wGhel9YDsHytI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/48f09e-7386-4139-91c8-3c88e40e711c/1/ALlD7lfDXyx_T-wGhel9YDsHytI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ALlD7lfDXyx_T-wGhel9YDsHytI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 16:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:b4:80:64:0f:0d:44:ec:01:a0:b9:8d:e5:18:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00b943ee57c35f2c7f4fec0685e97d603b07cad2
Validity
Not Before: Jul 28 16:00:25 2026 GMT
Not After : Jul 29 16:00:25 2026 GMT
Subject: CN=a0f51137fc2b49cfe123e72bc6ebbfd6348a5e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5f:3f:3c:b3:ae:a6:a0:b1:3b:14:50:08:d9:
16:1c:08:d2:58:2a:80:5e:27:a0:c7:2b:a6:1c:81:
dc:75:3b:3f:47:01:74:6d:cd:63:75:9c:8b:dc:96:
8a:ec:7a:ec:23:a0:93:80:f7:3c:49:1c:25:50:af:
a7:30:21:80:f7:38:1b:58:78:57:30:b7:c3:51:98:
3c:b6:71:50:4f:bc:e7:24:0a:9e:29:6e:6a:af:ee:
2e:0e:2d:55:73:55:b8:c2:d8:a2:12:f4:93:87:d5:
fa:6e:a9:3f:f6:b0:e1:9e:2f:51:54:b8:50:2a:c3:
ce:75:03:5b:42:d7:24:4f:a3:74:6f:d1:b6:b0:ff:
22:49:75:3d:b8:ce:dc:ad:75:14:75:93:1e:63:89:
dc:41:94:3f:ea:83:4e:2e:5e:a9:e1:d0:31:d0:34:
7b:b2:56:25:df:6f:a0:0b:da:50:48:80:0a:8b:e5:
40:2d:31:fd:d4:57:b8:1e:c7:e4:2a:0e:86:7a:05:
89:e1:3a:6b:1e:92:1d:ae:dc:77:72:3a:38:2d:cb:
13:40:7d:86:68:2b:cd:fb:fa:33:84:99:64:9c:fb:
c1:77:d5:dd:22:b5:29:88:ad:21:83:0f:ee:0f:d7:
e9:9e:90:07:30:6c:f9:35:a0:19:77:ab:85:04:9a:
2b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F5:11:37:FC:2B:49:CF:E1:23:E7:2B:C6:EB:BF:D6:34:8A:5E:91
X509v3 Authority Key Identifier:
keyid:00:B9:43:EE:57:C3:5F:2C:7F:4F:EC:06:85:E9:7D:60:3B:07:CA:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ALlD7lfDXyx_T-wGhel9YDsHytI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/48f09e-7386-4139-91c8-3c88e40e711c/1/ALlD7lfDXyx_T-wGhel9YDsHytI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/48f09e-7386-4139-91c8-3c88e40e711c/1/ALlD7lfDXyx_T-wGhel9YDsHytI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:1e:5c:bf:10:96:71:30:f0:03:61:ff:02:24:54:79:27:dd:
95:a1:7f:d2:4e:b8:a2:16:28:f2:9d:88:d7:57:94:9e:fe:20:
45:a5:c6:77:9c:57:f8:bb:13:1b:89:88:24:78:fe:d7:5e:8c:
60:50:c1:fa:c4:e9:66:73:72:6f:46:30:77:f6:8f:a2:6c:4e:
88:0c:e4:93:2e:52:b0:0b:20:0b:8b:5f:b3:b7:10:ab:44:bc:
83:b5:da:b1:b4:96:7f:b8:3b:15:bf:57:4a:54:de:c9:d9:93:
16:40:5b:6b:b5:ba:29:40:57:1b:f2:5f:dd:a8:87:84:74:22:
d8:b9:97:e6:bc:51:41:15:82:2b:83:fa:e1:d2:5c:b5:d9:ea:
76:b1:10:cb:d4:c7:74:c0:d5:d6:9f:e8:02:46:2e:1b:5f:3e:
7b:6c:68:d7:a9:b2:62:fc:55:51:23:fd:0b:ce:fc:1c:55:13:
c9:27:49:a3:d7:97:ed:42:43:e4:b4:69:8f:f2:8c:d4:a7:cf:
47:0c:bf:5e:f8:1f:e0:a6:4c:e6:dd:97:e9:6f:e6:65:02:ee:
a5:0a:e5:8c:cf:26:72:15:d8:64:0f:6c:9f:6f:50:46:9d:3e:
44:33:2a:93:77:b3:39:3d:a2:94:b4:6e:01:88:95:d9:d7:f9:
de:3f:32:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:11:12 2026 by rpki-client