Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.mft
File: 0AL76fCkE2A-3vtzOlMfLiwOnAY.mft (raw, json)
Hash identifier: WRRM/brbqzI95ZnsW+4+M0pMW5ZtucpsRK6lcuTkpcw=
Subject key identifier: C5:66:B9:30:6B:A2:44:71:2D:A4:96:35:9C:38:93:BF:4D:FB:5B:DF
Authority key identifier: D0:02:FB:E9:F0:A4:13:60:3E:DE:FB:73:3A:53:1F:2E:2C:0E:9C:06
Certificate issuer: /CN=d002fbe9f0a413603edefb733a531f2e2c0e9c06
Certificate serial: 01A0C520226A4E5885AA3B1F32F939FDD29A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AL76fCkE2A-3vtzOlMfLiwOnAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.mft
Manifest number: 1A65
Signing time: Mon 21 Sep 2026 18:00:12 +0000
Manifest this update: Mon 21 Sep 2026 18:00:12 +0000
Manifest next update: Tue 22 Sep 2026 18:00:12 +0000
Files and hashes: 1: 0AL76fCkE2A-3vtzOlMfLiwOnAY.crl (hash: PCpwTS3xnhfroxpgPcHuaNvDC6ZHbIulhtySkcZ0f4Y=)
2: dsXROTd2qvJarDLFNerpFXp5tvM.roa (hash: g4jlzZr8kyp6l2Rwmj8PdLtnag5RCNjP07Ftz4rMi7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AL76fCkE2A-3vtzOlMfLiwOnAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:20:22:6a:4e:58:85:aa:3b:1f:32:f9:39:fd:d2:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d002fbe9f0a413603edefb733a531f2e2c0e9c06
Validity
Not Before: Sep 21 18:00:12 2026 GMT
Not After : Sep 22 18:00:12 2026 GMT
Subject: CN=c566b9306ba244712da496359c3893bf4dfb5bdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d5:d2:0a:27:09:2b:cc:69:73:c0:fe:39:8a:
40:d7:8e:6a:cc:b8:71:6e:a2:14:14:1a:31:3d:fc:
b7:5f:7c:e0:36:f7:76:59:1a:6d:7e:eb:7b:82:3c:
b4:3d:f0:61:a2:65:75:78:18:bc:b5:82:bf:3b:33:
98:26:c3:3a:9a:08:0c:c2:0b:fb:02:3d:8e:95:6e:
d9:42:e1:b8:3a:83:f2:ce:89:62:53:5d:81:b6:0d:
af:0d:7c:70:74:a3:ce:c1:f6:c3:fb:38:a8:5d:83:
ae:e9:db:55:a8:bb:45:77:e0:0b:55:a6:85:f2:e2:
2f:e6:10:6a:8d:fb:d4:0f:62:53:6c:9d:c7:b8:d5:
3d:86:88:ca:6a:35:6f:b5:e3:45:58:99:99:4f:be:
34:e9:21:42:33:cc:69:f9:26:61:03:87:1c:a1:4d:
cb:74:f2:fd:e6:e4:f7:27:a7:45:ba:f4:f2:c8:0f:
30:97:c6:73:b5:8a:b1:d6:4b:26:82:a0:c6:2f:82:
c8:eb:03:91:b0:5e:b2:11:9e:b9:21:5f:b7:98:9d:
a6:33:e9:b0:03:1a:85:2f:53:99:d0:1c:17:c3:5b:
f3:4a:a8:d5:68:bf:f5:cc:f7:53:d7:ed:7a:22:08:
ac:7e:06:f6:cc:dc:db:8d:42:ce:ce:df:9c:5f:ee:
6e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:66:B9:30:6B:A2:44:71:2D:A4:96:35:9C:38:93:BF:4D:FB:5B:DF
X509v3 Authority Key Identifier:
keyid:D0:02:FB:E9:F0:A4:13:60:3E:DE:FB:73:3A:53:1F:2E:2C:0E:9C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AL76fCkE2A-3vtzOlMfLiwOnAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:52:ec:1d:fe:68:0f:46:ec:9a:3b:89:c4:ec:fc:0e:55:d8:
56:da:2f:e7:c3:34:0b:07:3b:8a:cc:0e:67:2b:c2:81:85:d7:
48:a6:6c:46:0a:aa:56:92:ab:9f:12:c4:28:bb:f9:8d:49:a4:
8e:6b:70:aa:99:67:82:47:03:76:3b:9d:9c:bb:4d:fa:ce:df:
82:ce:96:53:b0:64:c1:bd:a0:6a:69:4d:c4:3e:2e:2f:00:bd:
36:b2:36:fe:13:d2:ff:e0:1a:ef:7b:fe:54:51:ca:5f:73:22:
39:f0:48:ab:c7:0f:65:40:f2:7b:3c:57:ed:f9:a8:dc:81:57:
f5:89:b9:aa:56:43:e2:9b:1a:65:58:e7:66:07:d8:5d:8e:c3:
7f:1e:24:3f:4b:5e:ed:1a:33:d3:1a:71:aa:15:46:11:03:ac:
45:d0:d7:b2:12:a4:4f:76:32:f0:1e:57:9c:e1:03:d8:c9:dc:
18:35:09:3e:01:34:64:b8:15:25:5f:0e:25:23:d6:44:ce:81:
9c:22:68:81:08:0d:c9:aa:2f:e4:03:ae:d3:b2:e3:7e:7e:a9:
3f:6f:ad:6a:f7:dd:fb:2d:5f:d4:c9:6c:9e:b1:e3:44:3b:45:
7f:4f:5f:f0:07:69:19:73:27:64:d8:c2:d0:8f:a7:de:a1:88:
b8:f7:28:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:18:27 2026 by rpki-client