Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft
File: Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft (raw, json)
Hash identifier: spUPyVJtyRicw3dJrsPHwhDySYuouGd0sxOIgOMtkAM=
Subject key identifier: 52:C1:24:DF:7A:45:B6:ED:70:98:1A:87:F8:D1:93:39:77:56:C1:2D
Authority key identifier: 02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3
Certificate issuer: /CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3
Certificate serial: 019FA93DE492A2D9E48E64035725593146E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft
Manifest number: 19E2
Signing time: Tue 28 Jul 2026 15:00:33 +0000
Manifest this update: Tue 28 Jul 2026 15:00:33 +0000
Manifest next update: Wed 29 Jul 2026 15:00:33 +0000
Files and hashes: 1: 4IwtnOs_iwVpuxuyxf_djhxqxzo.roa (hash: G10HT/r9NNyWdyBn6Pz/raHjo4uYh+brQrONHtIQaYE=)
2: Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl (hash: ZBRq971xiLB94tOrjFCdzz1C8O6ixPynWhxTZ+4OaGM=)
3: Cpsl_lQBgEEbAkoRvRPOG0W_Zc8.roa (hash: 8vUi/f1O2zm8nVjMwrWjmaGjGaEoQH6CKoqkrynjuWo=)
4: ETuJmIkUjvADd3UUWdC650htGXA.roa (hash: cAH43gJZX/Jo2JqBoDIwhveRaUPmMSrjgllQlOy9U+4=)
5: PUJfscloQMHgI371vUqE3n8p0O0.roa (hash: HCrGmAGRieyRrO1ZecDc/2ZONQZ1+T4NdqF9jJscfgc=)
6: TJ-NxfDDAC6I8oepMl_uJgBKeY4.roa (hash: LQb2DMXHpcDAYFTx6JeAZ71tuwMz9N0jPtDCjoOf9gM=)
7: lX8eqAs6CwoIAtAewjNrfYtrQ4s.roa (hash: z/P+PTXsb20XgLXYqeqn92M2nr8qJ+zQMUYiqOb95J8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:e4:92:a2:d9:e4:8e:64:03:57:25:59:31:46:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3
Validity
Not Before: Jul 28 15:00:33 2026 GMT
Not After : Jul 29 15:00:33 2026 GMT
Subject: CN=52c124df7a45b6ed70981a87f8d193397756c12d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:b5:be:cb:1a:1f:7c:e3:0f:e9:e0:82:a8:17:
ed:c7:1d:bd:4f:4f:52:d9:fd:e5:82:58:19:73:f3:
93:36:3e:7d:80:84:2a:d0:d1:da:83:90:25:27:3b:
fb:9e:a8:49:a1:e5:98:49:14:7d:e7:f8:f9:83:f1:
e5:38:7d:4d:a3:e3:2d:ff:34:bf:1e:7d:d5:7b:d4:
e1:fc:10:9a:b9:bb:d5:1c:44:c2:fc:a4:b2:8c:a4:
a3:59:ba:b4:9a:51:34:0d:e0:87:f5:4b:6b:b9:07:
ec:76:bf:f2:53:59:ac:cf:89:df:4c:23:ec:41:17:
17:52:82:96:84:4a:cc:72:58:a2:50:20:62:ec:2a:
ca:eb:1c:49:81:ab:b5:09:f3:2a:47:52:22:31:37:
b0:fe:53:7f:9a:68:6b:a8:5a:49:4c:6d:67:19:e8:
a0:03:09:39:bc:fa:95:9f:d9:7e:e5:fb:52:42:eb:
93:85:68:c0:ee:36:13:56:12:0c:50:ed:cb:52:0e:
6e:f7:5d:b4:50:06:31:1d:77:75:b4:0c:0c:3f:1c:
d1:da:bf:bf:a6:f2:f9:59:1e:56:8b:c1:c1:3d:20:
62:96:0c:63:37:32:4b:1f:73:0d:95:88:e7:ec:f2:
f3:da:84:3a:04:73:c0:57:7b:37:ce:06:dc:15:2d:
73:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C1:24:DF:7A:45:B6:ED:70:98:1A:87:F8:D1:93:39:77:56:C1:2D
X509v3 Authority Key Identifier:
keyid:02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:de:86:12:e2:3d:10:c0:0e:e1:de:43:48:c6:3a:60:f9:1c:
49:4a:4f:b0:52:64:f2:5f:ab:ea:d4:63:1f:a2:c6:ef:bf:c5:
8b:8f:be:89:10:a8:d7:32:dd:3d:a5:a1:c4:c8:e0:8f:84:bb:
cc:bb:3c:8f:ca:f9:00:40:ae:a7:b7:54:5d:99:5b:42:4c:13:
22:b2:4c:6c:c6:0e:c0:07:cc:a2:5f:fa:43:a4:32:63:4d:5c:
39:bd:c6:e6:10:d3:60:e5:6b:08:3c:94:db:18:86:0e:70:cc:
23:3d:40:b6:e0:3e:2e:2d:a0:9e:46:1d:ca:97:47:59:24:84:
5c:79:ec:c4:69:a6:c3:f6:61:fa:86:c2:0e:b3:8a:af:13:a5:
80:a3:ea:b2:69:69:71:93:31:a2:bc:db:bb:7f:04:5b:ef:c9:
38:90:d6:b3:ca:57:99:e7:07:90:b5:2e:02:55:65:50:1c:d7:
ea:6a:ce:2a:75:cc:c2:dd:18:35:05:51:30:24:ee:d1:84:b4:
8f:9e:f7:74:d4:b3:44:0a:a4:9b:51:67:a3:f0:53:1f:f6:2d:
24:54:1e:d2:5e:0a:de:fe:f0:98:4f:c5:3b:70:1d:04:fe:9e:
48:7e:34:59:57:fd:12:c7:6c:04:db:df:1d:87:3b:ac:88:95:
3e:2e:68:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:32:01 2026 by rpki-client