Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
File: sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft (raw, json)
Hash identifier: dCXepZAmebA3/6k+/eyYQVRq5ajxwEeOkWKGY8VnCi8=
Subject key identifier: 23:A7:5E:31:33:0F:F6:04:F4:35:2F:6C:06:E9:9C:44:D9:87:92:07
Authority key identifier: B0:09:5E:D0:11:C9:43:58:24:5C:32:75:7D:46:BE:D8:60:DF:4C:19
Certificate issuer: /CN=b0095ed011c94358245c32757d46bed860df4c19
Certificate serial: 01A06D95B253E7267FF483066E962FB72746
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
Manifest number: 09E4
Signing time: Fri 04 Sep 2026 18:02:02 +0000
Manifest this update: Fri 04 Sep 2026 18:02:02 +0000
Manifest next update: Sat 05 Sep 2026 18:02:02 +0000
Files and hashes: 1: 4Rj8oxGUFHYrJxPoQ7CVMuOFbXc.roa (hash: RCK1ceQp3wSH8NYHA7LP9zIIM5o/+C88uArD/S/VsPI=)
2: sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl (hash: +/4WTfsVtTfVCfaYPnq33dRPiAII8hNs02k9SRmTV5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 18:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:95:b2:53:e7:26:7f:f4:83:06:6e:96:2f:b7:27:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0095ed011c94358245c32757d46bed860df4c19
Validity
Not Before: Sep 4 18:02:02 2026 GMT
Not After : Sep 5 18:02:02 2026 GMT
Subject: CN=23a75e31330ff604f4352f6c06e99c44d9879207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:28:22:cb:b1:7c:bb:23:11:7f:ea:97:f8:72:
7d:1b:98:27:ac:8a:e4:22:14:15:fd:a8:0c:d6:1c:
35:82:48:e6:fd:1f:c9:e0:15:2c:8e:ac:cb:6d:22:
5f:ae:a2:c1:a8:1b:18:80:34:fc:ca:b3:f9:f5:56:
b7:e5:82:23:67:9e:d4:9c:90:3d:1f:7a:63:53:8a:
d6:7b:8f:2d:a1:c6:59:3a:df:bc:df:4b:68:01:71:
9c:a1:50:69:b3:57:e7:e0:cd:af:93:a4:7c:2e:a8:
15:d2:67:08:93:e5:b0:ed:3c:b3:1a:e2:62:31:80:
53:20:5d:38:80:b0:46:8d:b3:4a:0f:6a:99:62:87:
e5:91:cf:37:3c:4c:95:c3:c9:7e:c6:45:13:7e:a1:
d5:85:5a:43:44:0e:af:41:4b:ad:03:09:f4:38:ca:
77:5f:66:b3:3e:bb:5b:38:c4:cc:63:bb:ac:32:60:
50:ee:89:ee:40:d8:20:38:fe:aa:b3:b4:d3:6a:6d:
41:76:47:ca:c0:aa:56:1c:08:7c:5a:bc:3f:a8:f3:
49:56:cf:c5:6b:fe:23:ca:83:3e:ad:23:f9:0a:23:
21:21:39:15:6e:92:92:5d:48:0b:f2:66:4d:c5:be:
41:25:16:5f:2c:48:2d:29:9b:1a:b1:95:a9:b4:81:
9b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A7:5E:31:33:0F:F6:04:F4:35:2F:6C:06:E9:9C:44:D9:87:92:07
X509v3 Authority Key Identifier:
keyid:B0:09:5E:D0:11:C9:43:58:24:5C:32:75:7D:46:BE:D8:60:DF:4C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:66:f1:de:6f:96:11:90:50:7d:29:d5:13:c3:43:fd:b1:f5:
bb:db:9a:aa:19:29:14:9d:33:7f:96:38:78:29:14:96:5a:5d:
02:38:00:47:3e:0e:e2:77:d0:c8:f0:fa:2e:4e:ae:2e:62:28:
8d:a3:16:60:d2:c2:9e:4d:1e:26:c3:f6:d1:17:a0:21:67:35:
4f:2c:4e:2d:17:b4:60:0c:9e:b9:66:d8:2e:cd:4b:62:4b:80:
23:8d:2c:cf:54:d5:de:6d:e4:52:67:4d:8f:38:9f:01:a5:b7:
d3:5e:d4:7d:7f:02:12:c6:68:c2:d8:62:3e:55:fe:33:22:d4:
48:90:fe:1d:0b:8b:14:82:98:05:63:27:69:4a:12:c0:5f:72:
7d:4f:6a:76:79:9e:da:98:fd:53:3c:35:6d:7c:71:e1:95:d6:
e5:38:db:9a:08:1d:72:8a:36:82:71:c4:09:ad:1d:1e:a3:ba:
94:d7:9e:38:f3:62:b7:42:65:14:eb:cc:96:11:2d:af:5c:e9:
f2:c5:05:77:a0:13:59:47:6a:a1:e4:67:dd:be:92:74:dd:6c:
2d:f2:5f:78:d8:ee:3f:4a:aa:2f:0a:05:29:78:38:b4:ae:b1:
08:38:00:d3:5c:0e:ba:07:9d:fb:cc:10:58:ec:fd:81:d7:af:
e2:2b:3d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:47:06 2026 by rpki-client