Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.mft
File: AlY31IiO4AWN6a06cMQtxGmWmpk.mft (raw, json)
Hash identifier: ZVJhBMVq2iUdONMAq+rzNndeVX/K18wxYTAMV5rvPZ4=
Subject key identifier: 0E:12:62:64:47:DF:50:C0:D8:A3:6F:CD:EA:AC:42:F2:1B:DD:BC:78
Authority key identifier: 02:56:37:D4:88:8E:E0:05:8D:E9:AD:3A:70:C4:2D:C4:69:96:9A:99
Certificate issuer: /CN=025637d4888ee0058de9ad3a70c42dc469969a99
Certificate serial: 019FAA87AEC4B8E24E0C1286139CFF890E86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AlY31IiO4AWN6a06cMQtxGmWmpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.mft
Manifest number: 0E49
Signing time: Tue 28 Jul 2026 21:00:46 +0000
Manifest this update: Tue 28 Jul 2026 21:00:46 +0000
Manifest next update: Wed 29 Jul 2026 21:00:46 +0000
Files and hashes: 1: AlY31IiO4AWN6a06cMQtxGmWmpk.crl (hash: G6cKryQ+vu06oMZ4btlY/1ZV+ehGPZQY7zi1piEE2W0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AlY31IiO4AWN6a06cMQtxGmWmpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:ae:c4:b8:e2:4e:0c:12:86:13:9c:ff:89:0e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=025637d4888ee0058de9ad3a70c42dc469969a99
Validity
Not Before: Jul 28 21:00:46 2026 GMT
Not After : Jul 29 21:00:46 2026 GMT
Subject: CN=0e12626447df50c0d8a36fcdeaac42f21bddbc78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1b:70:e0:48:c4:3e:07:6e:c6:b3:19:e4:ae:
a7:f5:5c:f4:09:db:bc:ba:1c:3d:3a:ff:29:7f:83:
94:d8:1d:5a:ae:25:09:3a:6b:05:4f:22:24:61:a5:
68:df:19:9d:c6:50:31:56:07:49:ed:2e:72:85:09:
53:7f:3b:be:38:cc:c0:b8:70:09:dd:94:0d:50:ae:
5b:f8:b9:fa:0d:51:bc:a2:16:eb:f4:39:33:b5:ed:
c8:eb:26:1f:a7:09:2d:63:bb:de:38:ba:03:96:5a:
91:ea:c0:20:85:2f:09:57:f1:06:10:23:51:b6:be:
77:ea:84:81:59:97:4c:aa:7b:f7:2e:14:9c:33:ba:
60:bf:a0:68:62:83:1a:7f:e5:3f:87:e0:bb:6f:e0:
09:01:9a:12:2a:54:2c:29:4b:15:06:91:45:8d:8a:
43:f2:12:8a:7e:44:75:9a:0d:d4:1c:07:14:b4:10:
21:f3:f4:15:b1:85:bd:33:a8:13:89:e6:c3:86:74:
4f:fe:02:20:92:68:18:f2:15:60:a6:61:f0:64:fa:
2c:52:0e:b5:be:e7:4b:9c:f5:2e:9e:5f:c5:1f:31:
5c:c6:9b:2f:03:f9:2f:4c:1e:65:2e:26:64:18:c9:
67:93:d8:e7:9f:36:86:23:2d:d6:1c:3f:c0:b1:33:
2e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:12:62:64:47:DF:50:C0:D8:A3:6F:CD:EA:AC:42:F2:1B:DD:BC:78
X509v3 Authority Key Identifier:
keyid:02:56:37:D4:88:8E:E0:05:8D:E9:AD:3A:70:C4:2D:C4:69:96:9A:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlY31IiO4AWN6a06cMQtxGmWmpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:18:30:59:b5:a8:7c:6b:1c:a7:ce:6a:d5:a7:93:87:b2:2a:
d3:98:7c:4a:4a:9c:ee:23:79:79:fd:26:d2:44:f9:1b:f6:51:
03:b8:e6:70:1f:40:ca:1f:8a:49:81:b7:a2:e8:1b:71:74:9b:
5c:92:c6:8a:1d:44:4b:8f:fe:20:aa:56:32:95:27:fa:3a:20:
83:46:89:0d:e5:76:42:f7:1c:8b:9a:a7:15:38:52:ff:4a:ed:
02:ed:ad:64:8f:da:88:86:fa:c8:cb:69:bf:e1:c4:99:2d:b2:
87:85:f3:6a:1f:79:05:3c:4f:e2:47:57:ed:cd:38:1e:5c:d7:
e7:a0:d6:e6:c5:09:4e:73:48:ca:e1:26:26:e2:25:ee:79:0f:
95:43:bd:af:6a:f3:0a:53:94:92:a8:02:17:f2:24:c2:eb:27:
5f:ee:7c:5b:70:1b:ba:a4:69:79:c2:f3:d3:26:56:46:b5:59:
38:53:36:b4:68:df:34:8e:1a:04:96:52:04:be:83:87:80:18:
09:bb:bf:87:40:a8:6c:e5:3a:05:ef:38:53:2d:1a:8a:ba:9e:
91:c3:34:74:ac:6f:ad:c1:ba:8c:a6:c3:8b:f3:dd:2c:b9:65:
e4:ec:b2:aa:61:d1:99:76:cc:93:ab:2b:53:24:a6:35:b2:7c:
19:8f:f1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:04:23 2026 by rpki-client