Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.mft
File: 0AL76fCkE2A-3vtzOlMfLiwOnAY.mft (raw, json)
Hash identifier: Jb/zRZwNgfUvg/KF4942uSxdZ3SRyLEbV0Q993N2bzw=
Subject key identifier: C8:A6:6B:86:3A:78:84:6C:BE:A3:27:F7:EE:5B:4C:D2:5F:3B:65:F3
Authority key identifier: D0:02:FB:E9:F0:A4:13:60:3E:DE:FB:73:3A:53:1F:2E:2C:0E:9C:06
Certificate issuer: /CN=d002fbe9f0a413603edefb733a531f2e2c0e9c06
Certificate serial: 01A1DF152CDBA73D2D20FE8FFC3F9A6882DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AL76fCkE2A-3vtzOlMfLiwOnAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.mft
Manifest number: 1AF7
Signing time: Sun 15 Nov 2026 12:01:09 +0000
Manifest this update: Sun 15 Nov 2026 12:01:09 +0000
Manifest next update: Mon 16 Nov 2026 12:01:09 +0000
Files and hashes: 1: 0AL76fCkE2A-3vtzOlMfLiwOnAY.crl (hash: zGUNQnt2snC/iWE/2AMg4hyvEYrwXxT1xJ/t7Makp/0=)
2: dsXROTd2qvJarDLFNerpFXp5tvM.roa (hash: g4jlzZr8kyp6l2Rwmj8PdLtnag5RCNjP07Ftz4rMi7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AL76fCkE2A-3vtzOlMfLiwOnAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:15:2c:db:a7:3d:2d:20:fe:8f:fc:3f:9a:68:82:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d002fbe9f0a413603edefb733a531f2e2c0e9c06
Validity
Not Before: Nov 15 12:01:09 2026 GMT
Not After : Nov 16 12:01:09 2026 GMT
Subject: CN=c8a66b863a78846cbea327f7ee5b4cd25f3b65f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b7:32:1e:0a:05:19:3a:9e:26:02:bd:25:e2:
8d:46:6d:5e:ff:f0:04:82:fe:6c:06:b5:6e:74:10:
cf:7f:98:88:72:91:bf:95:80:38:da:38:2a:8f:90:
93:7c:ff:91:ef:35:13:1e:5b:05:7d:fb:36:52:46:
82:15:72:bc:3e:2a:f0:95:ad:66:bb:c1:9a:87:e6:
6f:a7:64:a4:83:00:92:8e:fb:96:ab:45:95:4f:af:
25:0f:43:58:b3:8e:ed:e6:b8:8e:90:f7:a3:91:64:
d7:6f:32:22:2c:14:2b:b6:3a:d8:ba:f5:90:e1:5b:
21:6f:cf:84:32:c3:8d:96:9e:e8:22:89:9c:d0:c3:
30:40:61:8b:74:b4:fc:58:7b:ea:36:0e:b8:95:1e:
91:cd:20:72:2d:b9:a8:da:e2:41:c2:e9:f8:dc:2e:
e8:ae:c9:e0:36:28:a7:1e:ac:14:55:30:9c:93:2e:
81:e3:91:de:61:e4:9a:2c:7a:82:49:38:24:cb:79:
4d:5e:c3:51:fb:ce:94:9e:aa:71:47:ee:ae:fa:9e:
80:a9:c2:9b:c5:29:81:ad:e9:5e:50:1b:4b:24:4f:
97:a8:d9:5a:12:41:37:34:b3:09:b5:de:bb:5d:94:
40:e0:d3:69:bb:b9:7d:89:43:05:bc:f7:6d:3f:68:
91:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A6:6B:86:3A:78:84:6C:BE:A3:27:F7:EE:5B:4C:D2:5F:3B:65:F3
X509v3 Authority Key Identifier:
keyid:D0:02:FB:E9:F0:A4:13:60:3E:DE:FB:73:3A:53:1F:2E:2C:0E:9C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AL76fCkE2A-3vtzOlMfLiwOnAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:1f:36:c6:67:74:29:3a:f0:4d:85:72:8b:15:91:2a:a5:9d:
bf:0b:d5:79:bc:c0:e2:b2:9a:3a:6e:73:35:45:2c:b5:1b:81:
bb:30:33:31:3c:93:f0:18:eb:a1:12:c1:e0:87:c0:7f:0b:bc:
e8:bc:0b:60:85:7c:a6:b0:30:9b:d6:87:26:54:b6:fa:c7:bf:
b7:9d:97:cf:f3:02:ff:7e:af:70:39:13:7a:a3:ad:5e:64:31:
11:41:e3:6e:78:4a:ed:24:a3:a8:e9:ad:20:4d:43:fa:af:4a:
92:24:78:ab:95:39:f4:78:92:d1:eb:40:c0:8e:cc:3e:b8:3b:
c9:01:0d:d7:ca:82:92:56:61:70:c9:a6:2d:25:2c:55:52:68:
97:ac:d3:3f:3c:e2:eb:35:f3:ab:71:3c:b6:3a:61:7d:34:a3:
f6:3f:e9:29:f4:97:38:3b:1f:31:eb:0f:34:8c:7c:75:3c:cd:
35:47:4f:3a:5e:7c:85:ce:8a:5b:07:01:04:e1:18:a6:b7:38:
13:22:8c:d0:72:5d:83:df:77:0e:ec:af:5b:9a:96:c0:d3:57:
ad:3f:ad:6f:61:a7:26:ea:62:28:46:3d:0c:c2:6b:df:ec:2c:
ba:11:89:bd:07:6c:f5:26:ab:ce:25:84:a1:0d:56:77:94:9e:
1d:58:34:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:44:18 2026 by rpki-client