Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
File: sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft (raw, json)
Hash identifier: Yn2QnQ90JOkE10c8KnK+vbgbJLC0DDxomGVjOwHL+90=
Subject key identifier: 6B:3F:75:C1:F4:69:3C:EE:B9:4E:70:68:72:2D:4E:99:FD:95:54:AB
Authority key identifier: B0:09:5E:D0:11:C9:43:58:24:5C:32:75:7D:46:BE:D8:60:DF:4C:19
Certificate issuer: /CN=b0095ed011c94358245c32757d46bed860df4c19
Certificate serial: 019F85D66D709F62BAFD9BCB8B1C6F7ADCBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
Manifest number: 096C
Signing time: Tue 21 Jul 2026 18:00:50 +0000
Manifest this update: Tue 21 Jul 2026 18:00:50 +0000
Manifest next update: Wed 22 Jul 2026 18:00:50 +0000
Files and hashes: 1: 4Rj8oxGUFHYrJxPoQ7CVMuOFbXc.roa (hash: RCK1ceQp3wSH8NYHA7LP9zIIM5o/+C88uArD/S/VsPI=)
2: sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl (hash: hkDgwY24OZFtBxXToh8cwRycuA9hY9a7sGwh9vhOhYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d6:6d:70:9f:62:ba:fd:9b:cb:8b:1c:6f:7a:dc:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0095ed011c94358245c32757d46bed860df4c19
Validity
Not Before: Jul 21 18:00:50 2026 GMT
Not After : Jul 22 18:00:50 2026 GMT
Subject: CN=6b3f75c1f4693ceeb94e7068722d4e99fd9554ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9a:af:4c:df:db:45:1c:a3:2a:bc:06:10:2a:
0b:b1:ed:43:0b:2e:8b:17:ad:29:56:41:db:22:bf:
97:df:20:14:1f:bd:b8:94:5d:36:d5:c2:f8:27:5e:
ab:e3:b1:38:65:7d:b3:54:99:8f:49:09:f3:4e:23:
42:72:0e:29:b2:fa:e8:e4:d9:11:63:b2:38:0f:1a:
78:9f:33:ed:26:98:52:a9:1b:3e:4f:3a:49:fa:f0:
eb:e5:47:85:01:2f:62:9e:ef:d1:6b:73:21:6d:91:
8a:99:84:a8:33:40:9f:2e:9e:84:78:d4:70:6f:97:
27:e5:ae:32:77:6b:85:b5:d6:35:8f:29:c1:7d:03:
e2:fb:9c:01:3d:8a:0b:01:64:a9:bd:cc:ff:2f:c3:
2b:85:ca:e6:cc:23:d6:2b:15:fb:f9:c1:23:f4:3d:
5a:7f:e5:4f:e5:3b:d6:e2:33:24:94:b0:f4:e4:72:
d6:e2:27:ce:df:c8:84:21:51:60:d9:11:7b:9b:e2:
59:86:ab:27:eb:ce:1d:25:7b:51:41:5e:48:9b:12:
fd:48:3b:ec:36:4b:6a:f8:44:e0:76:42:e0:8b:77:
2f:9c:a7:08:9b:ad:d3:5a:70:6f:cc:42:39:02:76:
d7:bd:e8:8e:42:11:50:0e:4d:3c:0f:7b:fd:44:6a:
33:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:3F:75:C1:F4:69:3C:EE:B9:4E:70:68:72:2D:4E:99:FD:95:54:AB
X509v3 Authority Key Identifier:
keyid:B0:09:5E:D0:11:C9:43:58:24:5C:32:75:7D:46:BE:D8:60:DF:4C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:73:d5:88:03:7b:38:1e:21:b4:63:3f:7b:56:0b:49:cb:af:
14:65:22:5b:1f:0f:db:25:36:7a:32:0d:5c:79:00:c9:55:0c:
6e:51:b1:25:be:b1:fd:0e:3a:56:97:83:43:65:b6:88:93:72:
07:f8:9f:29:9b:37:da:c0:cb:a2:67:3a:7d:c5:3e:1b:57:3b:
fc:9b:9e:09:d1:5b:b6:fc:0c:8e:44:16:63:08:83:ac:6e:a5:
26:59:a9:96:c6:b7:4d:2d:6c:7b:fa:ab:4e:06:85:59:2e:2a:
2c:a9:17:80:40:7d:38:ac:e6:fc:77:59:ba:e0:73:17:69:3c:
a9:3b:44:f0:2d:74:c9:7f:8e:48:d2:32:61:30:0f:03:39:13:
a2:dc:bb:70:49:7e:34:01:d7:b6:76:62:36:99:54:63:b6:95:
a0:4e:f9:4c:6d:f8:f1:70:a6:03:b6:4b:09:07:41:a2:ed:73:
8f:40:42:61:84:9b:7b:f2:6b:19:4d:f5:de:a2:cd:97:7f:fd:
a4:71:82:6e:02:44:a3:6b:6f:d4:e8:13:8d:0c:bf:9e:6a:8b:
04:24:5a:83:ff:28:df:69:fb:36:20:6f:d3:24:d2:38:20:89:
f8:a9:d0:cd:aa:43:6c:f6:a4:0d:81:5d:05:b2:3b:95:e0:5f:
c5:f6:80:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:06:57 2026 by rpki-client