Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
File: sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft (raw, json)
Hash identifier: 3UA6F03ryVObJdv6mUmq5u5xD+D+rNiswCFYOCycIuo=
Subject key identifier: 0F:9B:0A:4E:55:92:97:C8:64:8C:A2:95:DD:38:91:74:57:42:03:21
Authority key identifier: B0:09:5E:D0:11:C9:43:58:24:5C:32:75:7D:46:BE:D8:60:DF:4C:19
Certificate issuer: /CN=b0095ed011c94358245c32757d46bed860df4c19
Certificate serial: 01A16A919620A72D2700298E945EA5E1EAB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
Manifest number: 0A67
Signing time: Fri 23 Oct 2026 21:01:28 +0000
Manifest this update: Fri 23 Oct 2026 21:01:28 +0000
Manifest next update: Sat 24 Oct 2026 21:01:28 +0000
Files and hashes: 1: 4Rj8oxGUFHYrJxPoQ7CVMuOFbXc.roa (hash: RCK1ceQp3wSH8NYHA7LP9zIIM5o/+C88uArD/S/VsPI=)
2: sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl (hash: +7NCnueIVEzigXMqwIqAM0suRtP0lqIKW4qYCtJj5IA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6a:91:96:20:a7:2d:27:00:29:8e:94:5e:a5:e1:ea:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0095ed011c94358245c32757d46bed860df4c19
Validity
Not Before: Oct 23 21:01:28 2026 GMT
Not After : Oct 24 21:01:28 2026 GMT
Subject: CN=0f9b0a4e559297c8648ca295dd38917457420321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8f:af:8c:12:fa:8b:c5:d6:82:7e:85:12:ab:
ee:89:01:52:a2:35:c5:00:cf:de:1e:37:a4:da:c3:
d9:0b:87:80:bc:c2:bb:b8:32:d1:74:dc:07:d5:0a:
ac:b2:a0:d0:69:c4:d5:d8:d7:b7:e4:68:10:10:0d:
05:08:9b:06:82:72:93:09:57:83:0c:5f:d6:15:8f:
42:cb:07:e2:d5:04:92:f0:4a:7d:af:fd:f5:3b:23:
e6:d3:70:76:43:1c:ab:23:a0:75:aa:a1:48:c1:01:
cc:1d:b1:c6:4a:cf:b5:13:71:c8:7a:6b:1f:a8:20:
2c:ff:ed:d9:e5:34:aa:83:c1:74:2b:a5:82:7b:8b:
5c:f4:f0:3d:d2:0b:52:d0:20:8e:9b:f0:cb:5c:4b:
64:56:35:9e:1d:37:d4:8e:0a:5b:3d:7f:0a:89:c8:
9d:9f:aa:3a:d6:e2:fb:3c:4a:f2:37:19:61:cf:f2:
8f:41:56:3d:97:96:01:f9:43:6b:68:2e:3f:fd:c9:
a2:83:b1:17:a9:75:55:33:92:d2:ee:7e:c0:9c:25:
5b:b5:c7:68:0b:c9:cc:5e:2a:8f:56:81:cf:ad:f6:
82:36:83:f6:42:13:0d:12:73:e4:0e:a5:d0:3d:1f:
a4:a0:f5:b2:2b:9d:ed:1c:72:89:0c:0e:47:b4:67:
a8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:9B:0A:4E:55:92:97:C8:64:8C:A2:95:DD:38:91:74:57:42:03:21
X509v3 Authority Key Identifier:
keyid:B0:09:5E:D0:11:C9:43:58:24:5C:32:75:7D:46:BE:D8:60:DF:4C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:7d:48:1b:f6:22:7a:f6:f2:bc:97:29:01:c6:e9:30:f0:b2:
ec:ee:13:f3:7b:e7:42:f2:b8:60:b0:4c:35:84:90:30:d6:94:
a4:91:c6:4a:a6:5e:f1:ea:7c:84:01:94:49:82:b3:df:08:94:
a5:00:35:9c:bd:70:83:63:60:42:44:58:a5:11:9f:71:c1:d0:
83:3f:fe:a6:30:09:8c:10:0c:b3:85:ee:1e:7e:83:a0:ac:7a:
1a:2f:86:29:59:77:d0:0b:74:2a:99:ee:29:86:f0:d9:37:ae:
ef:6c:26:f6:c7:da:24:38:79:03:1b:d1:15:72:f9:21:07:ab:
34:97:92:5f:df:b1:8a:33:e5:cc:e9:60:b9:e2:05:1f:f6:e0:
38:38:a9:15:0e:13:11:60:ef:18:32:a4:fb:ca:51:3f:58:a8:
ba:55:3b:97:4b:73:36:8f:ce:10:de:51:d6:69:1e:14:77:2b:
46:fb:6b:62:9e:80:00:69:5d:1c:a4:7f:5b:15:82:28:f9:da:
82:e7:29:1d:0c:6b:4a:67:e1:ac:19:d7:6b:4e:1b:35:01:cc:
13:9c:88:f7:37:66:a1:66:f8:cf:83:9e:82:64:7b:b6:b9:6f:
12:bc:18:e7:2a:5d:bc:9e:e8:03:64:c7:b2:71:19:51:9c:03:
97:76:cb:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 06:59:09 2026 by rpki-client