Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft
File: ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft (raw, json)
Hash identifier: 7U/DNSm5NVe3aKBJoaftrZ77JOMYJFlIqa+qc+S/how=
Subject key identifier: 7F:22:9E:54:07:51:DE:12:66:27:53:C4:9F:A9:D7:BB:78:62:25:93
Authority key identifier: 00:B4:FE:43:94:E3:3F:C2:2A:C5:CB:B5:45:F9:CD:10:94:08:75:67
Certificate issuer: /CN=00b4fe4394e33fc22ac5cbb545f9cd1094087567
Certificate serial: 019D9A3EA0761DBC5AA8D27F7CEBDFB01B86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft
Manifest number: 0A08
Signing time: Fri 17 Apr 2026 07:01:28 +0000
Manifest this update: Fri 17 Apr 2026 07:01:28 +0000
Manifest next update: Sat 18 Apr 2026 07:01:28 +0000
Files and hashes: 1: ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.crl (hash: zD0OjBWgYcpiNBoe7DD1HQveNqfqF1lNDJgtGZDGNXo=)
2: tG0LVlaf72tjaFcLZI694UkMyBM.roa (hash: TqiU8MWJoU3H6JgdgSsoTmNJ+nJJZVq6ZzlSY2+KtJ8=)
3: xDM12CcGD2Bni6l8L8cHWegda-o.asa (hash: KFGZ+nd44n5SlA7OxGk3cEFVuk7r49rEOqIITKnjxxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:a0:76:1d:bc:5a:a8:d2:7f:7c:eb:df:b0:1b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00b4fe4394e33fc22ac5cbb545f9cd1094087567
Validity
Not Before: Apr 17 07:01:28 2026 GMT
Not After : Apr 18 07:01:28 2026 GMT
Subject: CN=7f229e540751de12662753c49fa9d7bb78622593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fc:ac:ec:01:f8:cf:59:54:d5:cf:43:c1:79:
fd:3c:4f:04:ef:1f:0b:96:4a:91:2e:26:72:e5:d7:
e1:09:73:0a:9d:fc:2f:9e:31:40:a9:36:97:3e:8d:
18:90:7a:82:d2:8e:3a:39:f6:c8:73:c6:92:42:83:
e4:32:22:ac:58:e0:27:2b:ce:1f:37:f7:fa:39:62:
65:c4:6e:1d:22:85:73:be:8a:82:2f:61:37:6e:c2:
df:04:01:4c:79:bc:86:25:5b:2c:58:47:58:ec:e7:
c5:22:e7:f1:35:26:88:31:21:49:57:46:e3:36:db:
a8:12:66:ab:98:c1:1e:05:c5:64:72:07:29:a8:fa:
4d:0e:a4:1e:93:33:45:00:b1:3f:16:29:9a:f8:2d:
6b:ae:21:85:36:69:0c:02:76:78:6c:47:8a:53:be:
da:1a:85:52:6c:49:f8:65:7f:c6:60:58:0b:e8:7c:
c0:7d:6d:3e:6b:c5:db:42:79:b3:fe:76:6c:c9:4c:
d3:e7:2e:c3:62:ce:e1:8f:c9:e5:e8:14:51:0d:79:
d1:10:1a:b7:e0:13:77:fb:2a:59:5b:f5:fc:e8:ae:
53:3e:46:db:aa:60:ae:f8:41:15:89:5f:ff:e7:c4:
ca:28:75:de:f7:0b:ad:1a:7b:84:90:d3:e4:9b:2c:
e2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:22:9E:54:07:51:DE:12:66:27:53:C4:9F:A9:D7:BB:78:62:25:93
X509v3 Authority Key Identifier:
keyid:00:B4:FE:43:94:E3:3F:C2:2A:C5:CB:B5:45:F9:CD:10:94:08:75:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:d2:48:14:4a:8c:74:90:7c:a1:a2:6b:a1:08:f4:2e:29:f8:
56:4b:04:cc:39:39:be:ea:72:3c:22:38:6f:e3:25:90:c8:b4:
4c:1c:02:f8:ea:72:fb:eb:19:10:b4:71:0d:9f:93:91:49:25:
e1:42:85:8f:d2:9d:c8:24:6d:8f:98:e6:24:d7:76:73:fb:c5:
21:ac:c1:18:9c:01:5e:9a:1e:96:97:15:1f:0f:bb:8b:36:89:
57:46:68:4f:25:69:71:a7:84:26:ff:74:68:8b:82:0b:56:63:
1a:db:f6:d9:f1:f9:8a:2f:9a:f6:3d:f3:c7:55:6d:f3:05:6f:
a6:ff:e3:1a:5e:86:ca:85:a8:cb:d4:ab:fc:23:72:fc:2e:70:
a5:d6:98:9a:31:f3:61:bd:09:b0:db:ed:ae:79:79:9a:61:d6:
4d:04:31:8a:3a:00:39:0e:8e:fc:f4:0c:11:27:20:59:15:f5:
85:39:b3:1e:7a:d2:b6:82:28:cb:e3:b8:6f:f3:e9:bd:87:d6:
c4:34:97:08:34:85:34:27:9d:5b:ff:a9:bf:d9:90:30:2a:5e:
7d:2b:1d:7d:f6:99:b5:4a:c4:36:e7:fc:74:2c:b2:f6:33:1c:
86:c2:db:c9:a6:76:41:fa:69:0b:0f:42:e5:3f:be:8c:7d:ba:
68:9b:60:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:22:11 2026 by rpki-client