Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft
File: ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft (raw, json)
Hash identifier: X6WKVYLy8wyIXURag/3S3q7h8yTq16rQ7mMZ0a1Fg+8=
Subject key identifier: 09:DD:E2:93:78:67:34:E7:8D:C7:7B:70:4F:7F:25:E2:13:CF:A1:D7
Authority key identifier: 00:B4:FE:43:94:E3:3F:C2:2A:C5:CB:B5:45:F9:CD:10:94:08:75:67
Certificate issuer: /CN=00b4fe4394e33fc22ac5cbb545f9cd1094087567
Certificate serial: 019EC1B6BFB4C35A1368C81AD3103F732CE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft
Manifest number: 0AA1
Signing time: Sat 13 Jun 2026 16:00:39 +0000
Manifest this update: Sat 13 Jun 2026 16:00:39 +0000
Manifest next update: Sun 14 Jun 2026 16:00:39 +0000
Files and hashes: 1: ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.crl (hash: iGw6h3qzDsLyAj1mYvjLzLtZuyGIuAJvajB+psxwXoU=)
2: tG0LVlaf72tjaFcLZI694UkMyBM.roa (hash: TqiU8MWJoU3H6JgdgSsoTmNJ+nJJZVq6ZzlSY2+KtJ8=)
3: xDM12CcGD2Bni6l8L8cHWegda-o.asa (hash: KFGZ+nd44n5SlA7OxGk3cEFVuk7r49rEOqIITKnjxxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 16:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b6:bf:b4:c3:5a:13:68:c8:1a:d3:10:3f:73:2c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00b4fe4394e33fc22ac5cbb545f9cd1094087567
Validity
Not Before: Jun 13 16:00:39 2026 GMT
Not After : Jun 14 16:00:39 2026 GMT
Subject: CN=09dde293786734e78dc77b704f7f25e213cfa1d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bb:6a:ef:df:2d:2a:eb:b3:3d:83:cd:17:5c:
66:ea:53:57:db:2f:d8:81:c9:a8:94:bd:8a:f3:21:
57:78:9f:cf:48:ba:6b:a4:14:92:64:d2:d2:9d:57:
17:c9:71:cd:28:1d:98:3a:a7:02:41:39:53:e8:09:
11:9b:e9:6a:de:5e:f7:29:4f:01:a3:18:b1:dc:b0:
55:a7:af:11:28:04:82:dc:0d:ed:f0:f3:09:dd:45:
eb:84:68:a8:67:49:cd:dd:a8:80:38:2e:28:29:28:
19:e6:f5:ae:4b:ea:44:15:53:a1:a9:fa:87:99:30:
90:11:9e:77:15:ab:66:7c:4f:ba:ac:cd:f6:43:83:
f9:a4:82:15:55:89:b6:84:09:5e:1e:dc:ee:37:1f:
ab:61:77:63:06:51:e3:4a:b9:6e:ca:a3:b1:dd:e4:
9e:22:69:e4:d9:10:f0:8b:a6:80:67:b7:33:a0:fc:
08:ff:18:36:69:dd:be:45:44:3d:8f:7e:ee:bf:2b:
33:3f:ab:7d:c1:b5:46:60:f8:04:10:7e:16:1e:22:
59:0f:d7:72:d1:c0:6f:69:d4:65:12:3d:40:2a:99:
d7:ea:d6:de:cf:cc:80:92:49:a9:60:93:05:b0:5f:
88:95:51:a2:fd:be:f3:1a:0f:6d:07:23:e4:73:16:
bc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:DD:E2:93:78:67:34:E7:8D:C7:7B:70:4F:7F:25:E2:13:CF:A1:D7
X509v3 Authority Key Identifier:
keyid:00:B4:FE:43:94:E3:3F:C2:2A:C5:CB:B5:45:F9:CD:10:94:08:75:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:4b:65:0b:8f:07:e5:f6:d2:b4:21:c2:29:04:6b:73:6c:23:
54:59:d7:ad:c7:c7:88:af:68:a9:38:54:62:1e:7a:c0:8e:eb:
0f:25:6e:85:a4:14:7f:ca:d0:5a:17:6a:1a:6d:88:bf:93:c5:
4d:ca:73:8f:30:7c:c5:93:c0:03:f5:75:79:6f:ed:50:b4:d2:
9b:a1:a8:26:55:8b:62:5e:8e:e8:1c:4b:1c:0c:ff:2c:34:7a:
29:a3:4a:64:18:c3:ea:ae:bf:5b:3c:64:5c:9c:4b:23:a5:8f:
f8:66:42:5f:a9:3c:4d:a5:c7:bf:46:92:5c:7b:92:4c:9b:f8:
ba:39:9b:77:4c:6e:ea:8b:0f:3a:0a:26:11:28:32:25:d9:61:
3d:1b:58:d0:8f:b1:f3:d0:be:bf:af:89:4b:f8:23:d6:28:cd:
5e:5d:18:58:e7:ad:80:d2:9c:c0:db:3e:96:f5:67:2d:0f:1f:
18:71:87:37:a5:27:40:25:f2:d4:91:a5:90:09:65:72:15:4c:
0c:39:6c:f8:50:cd:76:1a:a5:d2:85:6c:e9:59:1c:8a:d4:38:
0f:63:09:c1:b1:f2:91:61:63:dd:05:9f:f7:fc:a0:73:f9:2a:
75:86:4c:23:c6:50:b8:dc:72:9d:01:c7:02:77:82:11:d8:82:
08:b1:4c:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Btr+0w1oTaMga0xA/cyziMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwYjRmZTQzOTRlMzNmYzIyYWM1Y2JiNTQ1ZjljZDEwOTQw
ODc1NjcwHhcNMjYwNjEzMTYwMDM5WhcNMjYwNjE0MTYwMDM5WjAzMTEwLwYDVQQD
EygwOWRkZTI5Mzc4NjczNGU3OGRjNzdiNzA0ZjdmMjVlMjEzY2ZhMWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7tq798tKuuzPYPNF1xm6lNX2y/Y
gcmolL2K8yFXeJ/PSLprpBSSZNLSnVcXyXHNKB2YOqcCQTlT6AkRm+lq3l73KU8B
oxix3LBVp68RKASC3A3t8PMJ3UXrhGioZ0nN3aiAOC4oKSgZ5vWuS+pEFVOhqfqH
mTCQEZ53FatmfE+6rM32Q4P5pIIVVYm2hAleHtzuNx+rYXdjBlHjSrluyqOx3eSe
Imnk2RDwi6aAZ7czoPwI/xg2ad2+RUQ9j37uvyszP6t9wbVGYPgEEH4WHiJZD9dy
0cBvadRlEj1AKpnX6tbez8yAkkmpYJMFsF+IlVGi/b7zGg9tByPkcxa8mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAnd4pN4ZzTnjcd7cE9/JeITz6HXMB8GA1UdIwQY
MBaAFAC0/kOU4z/CKsXLtUX5zRCUCHVnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUxULVE1VGpQOElxeGN1MVJmbk5FSlFJZFdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9kYmU5MjMtYWFlZi00OTEyLTg0M2Yt
YTRlZmM0M2EwNDc4LzEvQUxULVE1VGpQOElxeGN1MVJmbk5FSlFJZFdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9kYmU5MjMtYWFlZi00OTEyLTg0M2YtYTRlZmM0M2EwNDc4
LzEvQUxULVE1VGpQOElxeGN1MVJmbk5FSlFJZFdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX0tlC48H
5fbStCHCKQRrc2wjVFnXrcfHiK9oqThUYh56wI7rDyVuhaQUf8rQWhdqGm2Iv5PF
TcpzjzB8xZPAA/V1eW/tULTSm6GoJlWLYl6O6BxLHAz/LDR6KaNKZBjD6q6/Wzxk
XJxLI6WP+GZCX6k8TaXHv0aSXHuSTJv4ujmbd0xu6osPOgomESgyJdlhPRtY0I+x
89C+v6+JS/gj1ijNXl0YWOetgNKcwNs+lvVnLQ8fGHGHN6UnQCXy1JGlkAllchVM
DDls+FDNdhql0oVs6VkcitQ4D2MJwbHykWFj3QWf9/ygc/kqdYZMI8ZQuNxynQHH
AneCEdiCCLFM5g==
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:43:08 2026 by rpki-client