Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.mft
File: AlY31IiO4AWN6a06cMQtxGmWmpk.mft (raw, json)
Hash identifier: lIBzDKD82QX5173Sfjyt3e3fhCgecT2g3anFOfPIpaQ=
Subject key identifier: A5:24:19:E7:01:07:E7:A3:D8:4C:4F:1E:FD:56:48:71:62:B4:EE:96
Authority key identifier: 02:56:37:D4:88:8E:E0:05:8D:E9:AD:3A:70:C4:2D:C4:69:96:9A:99
Certificate issuer: /CN=025637d4888ee0058de9ad3a70c42dc469969a99
Certificate serial: 01A0C28D4D0ED0DC063219C4DD8D623BA5B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AlY31IiO4AWN6a06cMQtxGmWmpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.mft
Manifest number: 0EDA
Signing time: Mon 21 Sep 2026 06:00:35 +0000
Manifest this update: Mon 21 Sep 2026 06:00:35 +0000
Manifest next update: Tue 22 Sep 2026 06:00:35 +0000
Files and hashes: 1: AlY31IiO4AWN6a06cMQtxGmWmpk.crl (hash: VYUMS+bVcyfXvmFQHfHEMQvkqOyJ3FVOmdZHeW8LgEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AlY31IiO4AWN6a06cMQtxGmWmpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8d:4d:0e:d0:dc:06:32:19:c4:dd:8d:62:3b:a5:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=025637d4888ee0058de9ad3a70c42dc469969a99
Validity
Not Before: Sep 21 06:00:35 2026 GMT
Not After : Sep 22 06:00:35 2026 GMT
Subject: CN=a52419e70107e7a3d84c4f1efd56487162b4ee96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b5:08:13:3e:82:63:04:7c:8a:25:5b:41:f9:
05:bc:9e:a2:14:79:09:fa:09:ac:cd:97:b8:8a:88:
21:bb:2d:08:47:91:cc:de:f8:eb:07:e3:1b:af:bc:
18:cf:95:df:a8:aa:49:16:4a:d2:6e:70:b4:84:37:
8a:c0:2c:69:71:a8:76:5f:ef:54:be:c8:0a:58:14:
6d:fc:18:d8:e7:ed:a2:dc:2c:51:ea:46:d1:6a:56:
f6:1f:0c:5e:ac:45:c3:5a:70:94:f3:86:50:95:05:
9a:b3:e6:5a:d3:a4:10:9f:0e:aa:9e:a3:68:5f:c1:
6b:38:b7:80:2a:1d:df:ab:d6:f3:a8:64:a3:4f:5b:
04:35:61:a2:c3:ff:65:15:74:3e:b6:dc:e4:45:93:
28:f5:0c:7a:42:dd:74:4d:c1:bd:31:49:52:c8:63:
0f:3b:a2:c5:32:35:99:ae:9c:21:5f:4e:d4:fd:13:
b2:c4:47:8d:72:40:79:34:6b:6e:62:4f:2f:fe:5e:
e8:2d:a0:0b:f6:59:6b:b3:46:44:b5:e5:5e:7b:24:
85:95:7b:d8:2d:01:2c:da:93:96:eb:42:57:ff:9d:
16:69:db:a7:fb:a5:54:09:0b:c6:9c:2b:ad:a8:45:
5f:a2:00:e5:c5:96:4a:a8:89:47:f2:7a:37:b2:52:
9a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:24:19:E7:01:07:E7:A3:D8:4C:4F:1E:FD:56:48:71:62:B4:EE:96
X509v3 Authority Key Identifier:
keyid:02:56:37:D4:88:8E:E0:05:8D:E9:AD:3A:70:C4:2D:C4:69:96:9A:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlY31IiO4AWN6a06cMQtxGmWmpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:77:91:72:10:fa:3b:55:82:5e:3c:13:64:29:1f:df:1b:b0:
38:80:5a:94:3a:e9:4a:a8:9c:6c:74:71:1e:30:95:55:49:65:
ba:6a:55:0c:fa:69:45:97:65:2a:78:f9:d3:5d:68:f3:3a:d7:
4e:0a:7c:bc:0f:91:b3:33:92:79:6c:a3:26:1b:9e:fa:06:84:
72:f0:9b:d6:fa:f0:f7:e5:a6:1a:ae:f4:0e:a4:14:63:43:97:
2e:e0:1c:f9:36:35:9c:67:41:e2:7e:ae:c3:78:7a:6e:42:5a:
b1:75:e0:88:b5:de:7f:96:e1:b3:e7:dc:ec:98:3c:15:11:46:
66:f5:c8:c3:5d:24:2f:24:b0:00:fe:6e:fb:14:bd:47:7c:4b:
5b:1c:ea:51:ec:94:1d:35:e2:5b:38:f6:7e:f1:6f:55:b5:59:
f0:0e:36:57:d3:9c:a8:cc:78:74:9e:66:37:2b:3e:f7:25:fc:
ab:a4:63:b6:50:7b:c1:c2:e4:7e:b1:47:95:10:71:d0:00:c7:
ce:18:c0:6a:5f:a7:5e:b6:85:05:5d:68:f2:8c:81:83:e0:e8:
1d:65:a2:23:b8:c1:3e:62:58:9d:63:84:a5:e4:eb:92:c0:d3:
da:a8:fe:4d:cf:21:c5:53:2c:3d:52:e7:e5:7b:3c:0b:fb:f3:
76:0f:bb:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:26:13 2026 by rpki-client