Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft
File: Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft (raw, json)
Hash identifier: cz1RPcy+6JOw5kMXahsli1tLb1xfSPmqeTR8PkbPjJY=
Subject key identifier: 67:F6:60:A1:C5:8D:E2:74:CF:31:6E:08:09:18:71:E6:D9:00:52:B0
Authority key identifier: 02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3
Certificate issuer: /CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3
Certificate serial: 01A0C6A11E0469AEBF7EA9459F2028142C27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft
Manifest number: 1A77
Signing time: Tue 22 Sep 2026 01:00:42 +0000
Manifest this update: Tue 22 Sep 2026 01:00:42 +0000
Manifest next update: Wed 23 Sep 2026 01:00:42 +0000
Files and hashes: 1: 4IwtnOs_iwVpuxuyxf_djhxqxzo.roa (hash: G10HT/r9NNyWdyBn6Pz/raHjo4uYh+brQrONHtIQaYE=)
2: Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl (hash: sVr5tJe+Yt03b8WlhnB7TOZRF3eBr/fddKOyV31dFNs=)
3: L5XdgvVjz1-CxRRJ-biQ8dcQz5Q.roa (hash: mgC5TyjrOGnzxFMEk3uTfwFbUXB8nLluzlgGLdR5O7s=)
4: PUJfscloQMHgI371vUqE3n8p0O0.roa (hash: HCrGmAGRieyRrO1ZecDc/2ZONQZ1+T4NdqF9jJscfgc=)
5: TJ-NxfDDAC6I8oepMl_uJgBKeY4.roa (hash: LQb2DMXHpcDAYFTx6JeAZ71tuwMz9N0jPtDCjoOf9gM=)
6: Xo9a170WwWAaGk3ACXVytE6-X8Y.roa (hash: hLe8kLG+CBJL9Cc+0qIbKz/P+HvW76o6WO8v8lHcktI=)
7: lX8eqAs6CwoIAtAewjNrfYtrQ4s.roa (hash: z/P+PTXsb20XgLXYqeqn92M2nr8qJ+zQMUYiqOb95J8=)
8: r18VHhbVUEDHRwv2w5uNa5mVIjI.roa (hash: IQUd5RUia5Z/zTnW4UQLqf5CANnVe1tw4Gxv/vTf4Pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:a1:1e:04:69:ae:bf:7e:a9:45:9f:20:28:14:2c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3
Validity
Not Before: Sep 22 01:00:42 2026 GMT
Not After : Sep 23 01:00:42 2026 GMT
Subject: CN=67f660a1c58de274cf316e08091871e6d90052b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7c:ab:4c:ec:44:4e:da:71:95:e6:11:b1:79:
c1:21:fa:c9:e2:3c:f4:ea:6d:ca:ce:97:89:19:68:
9f:d2:14:11:5c:77:55:60:29:d5:3c:97:6c:a1:16:
7b:6e:a9:95:bc:2c:11:18:9a:54:8a:08:d6:ee:e6:
8a:cd:32:ac:26:e9:84:56:59:3f:58:2a:61:26:9b:
2b:0d:01:1f:54:5f:cd:38:72:58:db:b2:90:31:7a:
ac:12:5a:b5:e4:34:93:9c:25:dc:be:14:de:37:97:
c6:e9:99:61:77:9c:09:db:cd:96:c5:2f:0a:d1:3a:
ef:88:11:4b:4d:e9:b0:17:bf:06:9f:e9:f3:ae:39:
59:7e:46:02:59:11:45:c0:94:08:1a:e4:b5:89:8b:
f3:71:fb:5b:48:b9:01:47:a3:1c:bb:ed:9d:50:25:
71:50:68:7a:c2:61:33:55:fb:72:6b:5c:c5:5b:8e:
dc:45:28:6a:3a:a1:ae:2a:f4:b6:bb:e8:d6:64:3b:
dc:e5:b3:79:0f:7e:a3:6c:c6:d8:8d:f9:3d:4f:32:
7a:ae:28:7b:99:b5:07:64:a1:17:a8:db:1b:9d:c3:
24:b5:b4:93:c6:7a:3b:cb:cf:27:f3:4a:93:c4:75:
cd:ce:f2:be:ea:13:3f:b7:7f:95:a9:bc:3d:9d:ad:
25:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F6:60:A1:C5:8D:E2:74:CF:31:6E:08:09:18:71:E6:D9:00:52:B0
X509v3 Authority Key Identifier:
keyid:02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:5e:2b:7a:51:71:15:d2:d9:25:37:b4:7d:e3:73:cf:97:fd:
79:9c:42:f7:41:4e:dd:58:b3:6e:ae:01:85:3b:5a:6c:7a:70:
a7:d9:b9:89:ff:5a:ee:33:e6:94:15:d3:81:af:31:56:da:23:
e4:55:1a:d5:c9:6c:11:0e:06:10:17:3b:1a:fc:8c:5c:76:4d:
3c:fc:e9:f4:0e:37:21:78:cb:e2:82:85:10:57:ec:b4:78:c4:
29:19:8c:f4:28:0b:87:14:24:40:bc:5f:94:be:65:1e:2f:eb:
54:da:9d:a8:af:e9:05:61:a6:b3:b1:21:fc:35:b0:44:26:00:
f6:5c:f7:88:6a:68:ba:87:b7:13:7a:2d:65:27:66:b0:fc:3e:
38:e4:b7:28:d1:a0:8b:3f:52:00:28:10:5b:ab:46:c8:2c:4e:
72:40:ff:8e:fd:44:93:1a:a5:e2:56:dc:53:24:d1:3d:77:b1:
02:54:82:96:08:f0:0e:d1:b1:cb:00:10:a7:6f:79:3b:1a:3a:
97:f1:31:ca:11:91:e1:08:c5:49:75:90:4c:e7:90:2d:3c:33:
1c:bc:45:a0:15:df:6c:e4:f8:a4:17:6b:8a:33:dc:b1:1d:17:
6d:27:a4:0c:6e:c9:5e:4d:a7:24:8b:cf:50:ed:e2:9b:df:ff:
d7:40:c4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:24:47 2026 by rpki-client