Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.mft
File: AlY31IiO4AWN6a06cMQtxGmWmpk.mft (raw, json)
Hash identifier: wdraj4LHEoqKEaKq6PLPZ51NurmVGZnv8tKw4Jny3Tg=
Subject key identifier: 4D:A6:40:9C:26:43:56:D6:7C:63:D8:19:57:28:DA:E3:CE:A2:30:49
Authority key identifier: 02:56:37:D4:88:8E:E0:05:8D:E9:AD:3A:70:C4:2D:C4:69:96:9A:99
Certificate issuer: /CN=025637d4888ee0058de9ad3a70c42dc469969a99
Certificate serial: 01A1C17838172D1F4775DB119A5DF8B37E7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AlY31IiO4AWN6a06cMQtxGmWmpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.mft
Manifest number: 0F5E
Signing time: Mon 09 Nov 2026 18:00:43 +0000
Manifest this update: Mon 09 Nov 2026 18:00:43 +0000
Manifest next update: Tue 10 Nov 2026 18:00:43 +0000
Files and hashes: 1: AlY31IiO4AWN6a06cMQtxGmWmpk.crl (hash: fZveqkaK9RuRIZOMro7T1xMpiO90u5m+25d1A6+nzzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AlY31IiO4AWN6a06cMQtxGmWmpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 15:25:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c1:78:38:17:2d:1f:47:75:db:11:9a:5d:f8:b3:7e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=025637d4888ee0058de9ad3a70c42dc469969a99
Validity
Not Before: Nov 9 18:00:43 2026 GMT
Not After : Nov 10 18:00:43 2026 GMT
Subject: CN=4da6409c264356d67c63d8195728dae3cea23049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a6:20:39:11:45:16:c6:ad:50:a9:97:19:39:
6b:6a:a4:51:3f:d6:d5:c8:eb:c9:53:6a:7d:d0:b0:
db:0b:73:4c:7c:d0:c9:c8:db:4d:d4:59:fe:7b:f2:
c5:55:b6:8e:b5:6d:b2:df:e8:9d:fb:f6:85:1b:16:
59:c4:55:3f:48:6c:05:e1:ca:39:22:46:66:8a:4a:
a3:5d:03:e9:3d:cd:e3:f1:af:bb:f4:91:41:80:74:
ec:ed:62:e6:aa:04:27:56:76:cc:7a:41:93:a1:8d:
9f:0b:a4:5c:ae:fa:8d:92:93:7b:f3:18:ab:4d:66:
7e:51:ae:67:07:9c:26:17:cb:77:d3:d6:76:f0:0d:
fb:10:45:0a:5b:7c:40:83:19:61:32:75:4a:17:3e:
bb:7c:da:9b:d9:1f:f6:ec:0b:03:a7:f4:72:cd:05:
88:1f:fc:e0:94:27:27:b5:52:41:e7:6a:47:40:57:
e1:68:07:ec:4e:b4:fd:bd:48:84:44:94:f0:30:83:
f3:83:ec:3a:f1:23:24:f5:ee:d0:83:b7:eb:f6:04:
6f:95:38:aa:00:7a:c4:a6:ad:bd:93:1e:fb:42:a6:
23:5a:aa:9f:bc:30:a2:fd:c2:e9:75:af:8e:1c:4d:
37:54:80:f4:9e:24:ef:43:09:5f:59:9b:aa:ff:f4:
30:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A6:40:9C:26:43:56:D6:7C:63:D8:19:57:28:DA:E3:CE:A2:30:49
X509v3 Authority Key Identifier:
keyid:02:56:37:D4:88:8E:E0:05:8D:E9:AD:3A:70:C4:2D:C4:69:96:9A:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlY31IiO4AWN6a06cMQtxGmWmpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:e0:9d:0d:80:a7:27:e6:a0:52:84:f7:c9:c0:3b:0f:a4:8e:
07:7b:15:ba:7a:14:a3:f8:c5:a3:ee:46:fb:9a:52:48:e2:5e:
be:11:42:02:b5:41:41:dd:af:a4:7d:15:e2:21:af:aa:2d:e5:
15:f6:ca:ae:93:17:7f:dd:cf:70:1a:52:53:1e:3c:72:2a:91:
a9:af:d0:91:21:7e:c0:77:ef:68:31:ff:33:6f:33:7c:3a:72:
da:af:20:b9:1b:00:e8:97:5f:91:4d:92:92:c4:0b:b1:ca:8d:
15:98:33:fb:d1:af:ae:3b:fb:70:a2:f0:c6:5e:61:51:22:69:
09:ff:de:c9:07:1c:9b:29:08:02:9b:ac:cf:71:50:9c:c5:61:
98:59:09:d6:86:c8:60:04:32:37:5d:36:66:f2:a8:bc:10:3f:
5d:11:4f:09:cf:b0:29:fc:eb:69:fb:76:30:90:98:eb:bc:f2:
97:8b:1d:75:9b:c3:42:38:ad:0a:19:ba:97:c3:78:cb:46:66:
bb:07:5d:47:54:9f:3d:91:24:59:89:19:85:89:19:22:d9:a9:
03:60:cd:a8:ad:39:13:ed:bc:46:cb:94:f3:9c:c4:d7:4d:04:
19:e6:8c:77:04:07:e9:1d:1b:d6:14:8f:5d:af:74:c6:43:ce:
d8:1b:2f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 02:00:19 2026 by rpki-client