Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft
File: ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft (raw, json)
Hash identifier: +MMb4F0wp1bE6jlDFKk6kc4MSk6+yaAXUPCPSkAxwQQ=
Subject key identifier: BE:F8:0C:8B:95:F4:47:B0:25:73:EE:16:71:21:E9:55:8D:8E:A0:DD
Authority key identifier: 00:B4:FE:43:94:E3:3F:C2:2A:C5:CB:B5:45:F9:CD:10:94:08:75:67
Certificate issuer: /CN=00b4fe4394e33fc22ac5cbb545f9cd1094087567
Certificate serial: 019CAAC69AE41E6EF57584BF791689814512
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft
Manifest number: 098C
Signing time: Sun 01 Mar 2026 19:01:08 +0000
Manifest this update: Sun 01 Mar 2026 19:01:08 +0000
Manifest next update: Mon 02 Mar 2026 19:01:08 +0000
Files and hashes: 1: ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.crl (hash: P5Dw4KukeXfY2GONocd7fHXWciCHzarLOJrSNJM4Kyk=)
2: tG0LVlaf72tjaFcLZI694UkMyBM.roa (hash: TqiU8MWJoU3H6JgdgSsoTmNJ+nJJZVq6ZzlSY2+KtJ8=)
3: xDM12CcGD2Bni6l8L8cHWegda-o.asa (hash: KFGZ+nd44n5SlA7OxGk3cEFVuk7r49rEOqIITKnjxxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:9a:e4:1e:6e:f5:75:84:bf:79:16:89:81:45:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00b4fe4394e33fc22ac5cbb545f9cd1094087567
Validity
Not Before: Mar 1 19:01:08 2026 GMT
Not After : Mar 2 19:01:08 2026 GMT
Subject: CN=bef80c8b95f447b02573ee167121e9558d8ea0dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c9:b4:1b:93:09:a5:7a:cc:b9:47:59:1f:54:
5d:aa:bd:ee:39:c5:81:7e:74:d5:ba:16:09:61:b9:
ca:8e:bf:50:d1:71:74:45:07:ee:2f:55:34:7d:c3:
57:57:a1:57:db:82:88:42:de:59:16:36:e1:91:8e:
95:d1:19:9f:d2:b5:e9:ec:4e:60:49:5d:34:ef:8b:
c1:1b:1d:d4:65:21:51:cc:c1:29:d6:97:97:e1:9a:
63:dd:d3:8e:5e:26:da:b1:61:0f:e3:d1:b1:35:59:
aa:69:70:8c:d9:60:55:cc:7b:5c:d8:e5:4b:8f:b4:
c3:e7:b8:70:24:9c:71:8c:61:75:cc:e1:16:5a:50:
4a:2d:50:d6:2a:e4:b7:15:d9:72:ef:3c:c4:62:70:
df:1c:05:d9:4a:80:d5:f9:bd:0a:f8:47:4f:4b:eb:
ad:8d:dd:dd:ad:f3:a0:df:ce:9c:a3:e3:0e:9d:21:
b3:e7:e4:69:71:c3:49:0a:bb:f9:69:28:94:86:63:
d3:df:a4:22:ed:99:ba:a6:4f:2f:a8:79:47:58:2e:
68:7f:c8:31:9a:ae:c7:b3:2a:18:ce:29:4d:7a:f4:
e1:ff:af:96:21:31:a5:6b:a8:05:66:48:58:10:a8:
37:db:c4:e8:0f:bc:05:74:5d:fa:b5:37:f1:c2:f2:
e1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F8:0C:8B:95:F4:47:B0:25:73:EE:16:71:21:E9:55:8D:8E:A0:DD
X509v3 Authority Key Identifier:
keyid:00:B4:FE:43:94:E3:3F:C2:2A:C5:CB:B5:45:F9:CD:10:94:08:75:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:1e:66:2a:51:69:38:17:b0:ef:1c:1e:83:7d:49:3c:a6:4f:
2e:6f:9d:b0:87:86:92:48:e3:83:87:f0:07:22:21:3e:9c:ba:
59:c9:df:9e:d7:55:24:48:47:bd:4b:b1:b2:2e:44:38:62:03:
14:3b:9b:d3:f2:bc:21:56:c6:9e:ef:c0:2d:9a:b4:5b:62:d7:
e6:a4:48:42:5c:ea:8c:1b:fe:19:66:56:4d:26:79:d7:c7:e1:
88:e7:86:1d:a2:24:89:ef:f8:f3:6f:13:d9:ce:51:a9:3c:2c:
80:2b:a6:5a:63:7f:d8:e3:8e:86:63:d1:89:5a:be:a2:61:36:
4f:c1:e8:a8:6c:82:f8:42:6e:18:fd:c5:52:31:2e:34:27:a0:
60:f7:9d:db:a6:52:da:9e:80:d3:52:be:75:41:1a:35:18:8f:
c3:7a:ce:1a:03:b8:82:7b:c4:a0:e6:f8:1a:8f:00:d1:e8:5d:
42:88:c2:a3:2a:90:8b:f7:03:9a:da:e4:ce:48:e2:74:ac:d4:
e3:72:a2:61:51:25:fe:31:6f:7b:71:87:10:97:a9:7d:34:07:
6a:e3:72:dd:50:91:c4:8d:91:3c:b1:ef:c4:68:4a:12:79:c6:
74:bf:06:93:df:71:3a:30:b9:03:5b:d8:4a:a7:03:0f:b5:fd:
c7:33:56:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:30:31 2026 by rpki-client