Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft
File: AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft (raw, json)
Hash identifier: JQbuevXSnxGH1NnycZIst7fxfJGJRPI/mwcurg67O6Q=
Subject key identifier: F3:89:9C:98:B5:4D:61:4F:7C:49:7B:D6:A1:06:0F:34:7B:44:23:C3
Authority key identifier: 02:55:85:09:E1:C0:EC:16:0D:E2:E0:74:17:72:13:DE:30:61:5D:6F
Certificate issuer: /CN=02558509e1c0ec160de2e074177213de30615d6f
Certificate serial: 019FAA1956D9369056D6BCA2FC0E8C52CB49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AlWFCeHA7BYN4uB0F3IT3jBhXW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft
Manifest number: 18D9
Signing time: Tue 28 Jul 2026 19:00:14 +0000
Manifest this update: Tue 28 Jul 2026 19:00:14 +0000
Manifest next update: Wed 29 Jul 2026 19:00:14 +0000
Files and hashes: 1: AlWFCeHA7BYN4uB0F3IT3jBhXW8.crl (hash: 3vl+JdOUyFCQrxx04LqgtwWYV2OwE/tlt8G/Zk00og8=)
2: OkVoScbKIL9TXKvP438rB5FRYb0.roa (hash: 45VM0zyf0tTbWI+Pen84q/pMakzdNZmUXMwDebqNLz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AlWFCeHA7BYN4uB0F3IT3jBhXW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:56:d9:36:90:56:d6:bc:a2:fc:0e:8c:52:cb:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02558509e1c0ec160de2e074177213de30615d6f
Validity
Not Before: Jul 28 19:00:14 2026 GMT
Not After : Jul 29 19:00:14 2026 GMT
Subject: CN=f3899c98b54d614f7c497bd6a1060f347b4423c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:24:ab:33:44:ff:c2:4e:89:a4:77:8b:e5:d0:
ef:de:75:12:d4:de:95:58:ab:71:87:c8:a9:5c:f5:
10:c7:c4:8a:dd:39:05:b7:f8:d7:a4:10:9b:b2:ff:
39:09:d4:da:b5:62:ff:8f:f9:53:85:f7:e1:ff:eb:
62:c6:90:35:f0:04:fd:2d:cb:60:b7:32:8e:3a:db:
e6:a9:6a:39:9b:bd:e8:23:8a:6d:f0:21:52:3a:d4:
c0:20:e5:bf:54:d6:e5:f7:1f:96:2e:3f:6b:71:a8:
f3:23:67:ca:50:b9:a3:98:72:a5:0f:31:63:8d:46:
c2:dd:a7:ea:00:dd:21:63:0c:6e:07:31:90:81:be:
37:6c:16:23:e5:85:1c:3d:df:af:b7:d3:05:4a:99:
c4:b9:ce:4f:ce:42:3c:c3:ae:d5:17:c7:ee:d6:00:
ab:5f:38:01:36:a1:f9:26:12:5c:9c:ac:68:8a:12:
a2:65:c6:6d:57:d0:22:60:a3:b7:9a:ef:5e:e7:76:
81:f2:46:e4:a3:fa:b0:2f:65:ff:a3:b0:a4:b1:25:
6d:91:99:dc:ec:99:42:c4:51:e3:c1:37:22:4b:b0:
f6:d7:42:39:46:b6:94:69:98:d2:46:ee:6f:28:8e:
dd:62:aa:14:99:ac:1e:00:34:4d:c4:71:15:66:ae:
55:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:89:9C:98:B5:4D:61:4F:7C:49:7B:D6:A1:06:0F:34:7B:44:23:C3
X509v3 Authority Key Identifier:
keyid:02:55:85:09:E1:C0:EC:16:0D:E2:E0:74:17:72:13:DE:30:61:5D:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlWFCeHA7BYN4uB0F3IT3jBhXW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d4:1d:d5:5d:9e:0d:a5:3e:dc:fa:d5:45:4a:69:75:e5:b8:
10:6c:b9:af:3e:00:91:85:c7:5f:6d:c4:40:c7:a7:30:e6:b9:
ef:28:e7:e1:e0:f4:ef:15:f9:33:e2:4d:56:5b:9e:e1:ca:e7:
0b:71:b1:b1:f9:b0:e2:2d:ef:78:ee:76:03:39:73:53:9b:2b:
87:c6:b3:1a:31:49:ca:a8:c2:94:bc:7e:ff:b8:59:81:24:ca:
63:e9:9a:70:14:b3:2c:95:4e:6b:0b:b5:c3:0f:8d:60:48:ee:
47:ce:52:67:74:89:f1:52:70:85:b1:fb:6f:4d:08:5f:93:50:
46:46:8f:fd:6c:27:de:43:25:3c:91:f1:3c:46:fa:d7:ce:d6:
5b:7a:b1:79:76:e6:9c:e0:09:01:4d:f3:86:6b:91:0d:ea:a0:
87:5a:67:78:29:7b:93:30:70:c4:26:8e:c0:d1:f8:66:c6:27:
f6:68:43:e5:10:42:85:84:97:23:bb:2f:88:a8:04:0e:b5:1b:
61:70:bb:00:a0:a5:9c:03:dd:bb:ad:33:16:03:13:39:c8:27:
94:8e:97:20:6d:f6:34:0b:09:c5:d2:00:19:8d:05:2d:c9:0c:
11:96:aa:38:69:df:44:f6:b3:fe:63:6b:7b:21:96:f8:cc:fe:
b2:81:7e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:49:26 2026 by rpki-client