Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.mft
File: al1BD0JdNedNRW9_h7ro7ZKzyCk.mft (raw, json)
Hash identifier: sxBpO/e73pmUIriQ9gvZj0rUs054KDVq+PZrSbxgra4=
Subject key identifier: 2A:4A:D4:04:47:95:90:54:83:A9:C9:A5:01:15:F3:94:B6:79:C8:F5
Authority key identifier: 6A:5D:41:0F:42:5D:35:E7:4D:45:6F:7F:87:BA:E8:ED:92:B3:C8:29
Certificate issuer: /CN=6a5d410f425d35e74d456f7f87bae8ed92b3c829
Certificate serial: 019CABD997FEEA890F876EC29B24E87782CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/al1BD0JdNedNRW9_h7ro7ZKzyCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.mft
Manifest number: 17D9
Signing time: Mon 02 Mar 2026 00:01:30 +0000
Manifest this update: Mon 02 Mar 2026 00:01:30 +0000
Manifest next update: Tue 03 Mar 2026 00:01:30 +0000
Files and hashes: 1: al1BD0JdNedNRW9_h7ro7ZKzyCk.crl (hash: /7myxjd0I4sntYEJh05L4aiFBulXHdDgewrelqSt9EY=)
2: vivKL2rvbIrNRZydZ5zkd8WMfmQ.roa (hash: vGuE++T51Grc7iV5G51jVBx+3DOtyMCoT9ihsAdCu8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/al1BD0JdNedNRW9_h7ro7ZKzyCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:97:fe:ea:89:0f:87:6e:c2:9b:24:e8:77:82:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5d410f425d35e74d456f7f87bae8ed92b3c829
Validity
Not Before: Mar 2 00:01:30 2026 GMT
Not After : Mar 3 00:01:30 2026 GMT
Subject: CN=2a4ad4044795905483a9c9a50115f394b679c8f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:44:df:e2:9d:6a:6d:6d:73:b4:7a:b0:1c:6b:
3a:e5:54:a6:ce:cb:e9:cc:e6:88:93:98:e8:90:79:
7e:12:d5:34:b2:8a:b8:87:d6:f1:a6:09:3e:a0:06:
e7:19:82:e3:96:76:3a:e3:57:9a:c1:af:dc:f0:c4:
1f:8a:86:bc:bd:42:46:15:ed:74:58:78:48:44:0f:
3f:8b:e0:bb:61:66:75:3c:9f:af:c8:4a:6c:fb:61:
03:d6:27:bb:2b:c4:f0:3b:01:19:97:58:de:e7:78:
74:28:be:70:26:5e:23:2f:65:9e:01:2b:a5:5a:7b:
86:13:49:11:0d:a3:76:d5:71:72:55:df:e1:b2:02:
e0:a7:5a:4c:2f:08:01:b8:41:e7:35:01:66:83:45:
17:57:c1:e6:c2:1a:15:16:16:18:1e:16:fc:f9:e7:
05:7c:20:ed:1b:b7:f9:55:10:3e:e4:fb:c6:5e:04:
a0:27:90:c1:05:fa:57:f7:8c:b5:0f:60:eb:13:21:
0d:89:c1:85:ef:9a:d0:ce:c3:77:bf:e1:4b:a7:21:
8e:b5:0e:0b:47:1f:a1:17:10:8f:9f:f2:08:ff:a8:
8d:4b:74:cb:6b:78:3e:d1:0a:65:8a:c5:3d:01:7c:
a0:be:e1:1b:b3:fc:f4:dc:07:3e:57:b1:81:bf:d0:
ca:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:4A:D4:04:47:95:90:54:83:A9:C9:A5:01:15:F3:94:B6:79:C8:F5
X509v3 Authority Key Identifier:
keyid:6A:5D:41:0F:42:5D:35:E7:4D:45:6F:7F:87:BA:E8:ED:92:B3:C8:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/al1BD0JdNedNRW9_h7ro7ZKzyCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:07:90:ff:3e:d0:4d:20:50:26:11:90:b8:28:87:41:68:a0:
0c:92:15:0c:a2:37:8d:1e:1a:8a:e6:c1:2b:15:a1:2c:f8:b9:
42:a0:9b:4a:27:80:4e:bc:1b:92:aa:46:13:bc:82:37:d4:06:
f6:c6:3e:11:8d:12:c8:e0:ac:76:3a:10:a9:b1:2e:44:a7:4d:
27:b4:c7:58:60:9b:ce:c9:35:8c:56:8f:f9:8f:98:d1:7f:46:
a9:10:cc:27:a7:9b:61:56:c8:73:2d:b5:be:0a:b0:f6:11:79:
af:c8:43:08:bf:e4:59:65:7c:70:6c:b7:85:0d:5d:b5:9b:27:
fa:aa:03:a0:e7:72:cf:7b:b1:31:75:44:f0:d5:13:e8:08:f9:
57:53:47:27:f4:9d:b6:93:52:9a:7d:76:6b:21:e3:a6:4a:48:
64:44:55:0e:dd:ce:5d:3a:1f:c8:63:82:32:1a:86:5b:04:5c:
c8:5a:c0:2c:dc:92:5f:c7:a8:fc:bd:85:34:75:0a:ba:ee:bc:
6a:02:39:9d:dc:d2:09:f5:2c:72:e2:53:14:f6:12:4d:c9:29:
c2:9a:57:3a:e9:62:7a:97:e7:0b:ce:7e:68:f4:cd:6c:49:9d:
1c:78:c2:8e:3f:ad:33:18:2c:e5:52:5a:57:a4:b2:2c:ff:8d:
d8:b0:10:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:18:15 2026 by rpki-client