Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/854c21-5e1a-451d-aea1-fca0741a586e/1/aluKc4anCgzU9gC-dYHe-JRHOkE.mft
File: aluKc4anCgzU9gC-dYHe-JRHOkE.mft (raw, json)
Hash identifier: W4gWc44CWRi+GsJhWIRoKXUCQ77PdAbcxeyp0mcZoSU=
Subject key identifier: 69:B5:2D:F7:B0:1C:98:D0:74:CD:B6:27:63:C8:98:D1:22:BC:0F:01
Authority key identifier: 6A:5B:8A:73:86:A7:0A:0C:D4:F6:00:BE:75:81:DE:F8:94:47:3A:41
Certificate issuer: /CN=6a5b8a7386a70a0cd4f600be7581def894473a41
Certificate serial: 019D371B75EA5AF9E5EAF2012374FFBAEBD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aluKc4anCgzU9gC-dYHe-JRHOkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/854c21-5e1a-451d-aea1-fca0741a586e/1/aluKc4anCgzU9gC-dYHe-JRHOkE.mft
Manifest number: 09AD
Signing time: Sun 29 Mar 2026 01:00:39 +0000
Manifest this update: Sun 29 Mar 2026 01:00:39 +0000
Manifest next update: Mon 30 Mar 2026 01:00:39 +0000
Files and hashes: 1: aluKc4anCgzU9gC-dYHe-JRHOkE.crl (hash: SiqpmrTeIPI0HAbppheRsYipmKlT8CR7XqzXcz/IIK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/854c21-5e1a-451d-aea1-fca0741a586e/1/aluKc4anCgzU9gC-dYHe-JRHOkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/854c21-5e1a-451d-aea1-fca0741a586e/1/aluKc4anCgzU9gC-dYHe-JRHOkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aluKc4anCgzU9gC-dYHe-JRHOkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:75:ea:5a:f9:e5:ea:f2:01:23:74:ff:ba:eb:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5b8a7386a70a0cd4f600be7581def894473a41
Validity
Not Before: Mar 29 01:00:39 2026 GMT
Not After : Mar 30 01:00:39 2026 GMT
Subject: CN=69b52df7b01c98d074cdb62763c898d122bc0f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:18:bf:8c:c1:2a:5b:fa:ac:62:45:34:4f:6f:
72:1b:dd:c2:03:85:06:3d:9b:28:5c:39:5a:37:78:
0b:19:78:6c:48:54:b0:02:5f:82:15:3c:5f:c2:06:
72:bd:30:63:9f:e3:c7:97:a1:09:a6:72:ef:60:02:
2b:f6:0e:e7:41:9b:66:7e:09:ee:2b:96:b7:f9:31:
f9:27:34:70:8f:86:61:2c:cc:da:4a:04:54:b1:60:
09:4f:5e:90:bc:5e:7d:5d:2f:a1:f2:08:ca:04:10:
4b:db:ec:f0:c4:7d:4a:1f:03:34:5a:5c:f5:2d:a9:
91:24:fe:c5:0e:52:20:76:c1:1d:92:0c:43:87:88:
c0:d9:82:4a:7d:ea:97:bb:d8:86:7d:62:e5:78:60:
c7:8e:bd:01:83:86:fb:60:f8:fe:50:35:e9:6c:3a:
66:47:9d:31:1f:b6:72:bd:e0:89:53:2f:1b:4b:c3:
fb:cb:25:9a:cc:cd:78:c3:1e:52:15:3b:2a:31:15:
8d:3f:0c:42:e4:c1:cb:03:02:bd:17:da:fa:b6:6a:
ed:ea:b3:36:01:64:d0:3d:3e:a5:a0:98:37:c2:9b:
6e:8f:24:60:75:df:95:8c:67:c8:ce:54:c5:48:46:
85:4e:cc:58:d0:9e:71:3a:c0:42:d7:32:4b:5c:cf:
bd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B5:2D:F7:B0:1C:98:D0:74:CD:B6:27:63:C8:98:D1:22:BC:0F:01
X509v3 Authority Key Identifier:
keyid:6A:5B:8A:73:86:A7:0A:0C:D4:F6:00:BE:75:81:DE:F8:94:47:3A:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aluKc4anCgzU9gC-dYHe-JRHOkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/854c21-5e1a-451d-aea1-fca0741a586e/1/aluKc4anCgzU9gC-dYHe-JRHOkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/854c21-5e1a-451d-aea1-fca0741a586e/1/aluKc4anCgzU9gC-dYHe-JRHOkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:84:fe:c2:c6:3a:c0:72:e6:d3:28:a7:66:61:7e:9c:61:01:
55:ab:9a:83:5b:6a:0e:91:da:a0:f9:9e:f7:93:14:80:bf:25:
0d:e5:1d:37:e5:36:eb:49:0e:06:52:3c:a5:55:66:f2:ca:28:
20:52:2c:b0:aa:b1:74:27:b3:99:c6:b5:2b:1b:68:c7:57:f3:
54:a0:45:fd:7a:25:7b:ea:40:6b:d6:1a:69:13:1a:e5:78:91:
4d:f2:c8:4e:04:2f:fa:91:cd:88:43:c6:3d:fe:8a:df:bd:20:
08:55:51:80:1d:57:1b:95:39:d5:06:33:b2:ba:56:bf:d8:9a:
81:02:a4:b0:6b:35:cb:8b:52:21:0d:a2:6c:21:97:94:e4:59:
d9:9c:6c:42:e1:5d:6b:65:ba:a7:f8:26:43:d2:d5:7a:01:da:
18:0b:55:6e:b9:f4:95:20:a3:ca:c7:83:b4:26:79:14:89:74:
3b:fd:71:2d:8b:de:13:ff:2f:82:3a:be:73:94:a5:44:0c:1a:
10:b5:e2:48:15:4b:e8:4f:66:06:0f:52:8e:92:09:c9:f3:13:
1f:cd:71:26:a4:95:96:4d:ac:5d:74:bb:5f:96:7a:88:05:61:
4b:01:48:12:e3:1d:0b:d1:3c:7d:dd:58:62:98:f3:c4:28:b0:
73:e1:31:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:01 2026 by rpki-client