Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.mft
File: AlqBIsJH0--70vaoFKX2h0VBiN8.mft (raw, json)
Hash identifier: arMvtcIhaos9O0ZBwCdx8tRjgA0560kIngv3D8AE75E=
Subject key identifier: 20:0D:E0:AA:34:33:98:E0:DC:AC:C3:63:F0:91:15:2C:D5:D0:6E:2F
Authority key identifier: 02:5A:81:22:C2:47:D3:EF:BB:D2:F6:A8:14:A5:F6:87:45:41:88:DF
Certificate issuer: /CN=025a8122c247d3efbbd2f6a814a5f687454188df
Certificate serial: 019D371BB9F45E58B9235AC629A3A5DD436F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AlqBIsJH0--70vaoFKX2h0VBiN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 01:00:57 +0000
Manifest this update: Sun 29 Mar 2026 01:00:57 +0000
Manifest next update: Mon 30 Mar 2026 01:00:57 +0000
Files and hashes: 1: AlqBIsJH0--70vaoFKX2h0VBiN8.crl (hash: BleXDKGMZAPR7eJvIrkJ64195hztKg5t4r2uk2n4/ew=)
2: DiLBDAdX2Rn6IbzlG165KKHARDw.roa (hash: efTlYN5L+Bk95Nj1I+etEzgtXBHg5cg9mNZu0CNmkQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AlqBIsJH0--70vaoFKX2h0VBiN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:b9:f4:5e:58:b9:23:5a:c6:29:a3:a5:dd:43:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=025a8122c247d3efbbd2f6a814a5f687454188df
Validity
Not Before: Mar 29 01:00:57 2026 GMT
Not After : Mar 30 01:00:57 2026 GMT
Subject: CN=200de0aa343398e0dcacc363f091152cd5d06e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d1:8f:23:71:3a:43:14:e3:8c:d6:0a:0d:e1:
40:5c:77:d3:69:57:f1:0a:d8:cd:ab:f8:f7:a3:ae:
20:90:9c:fe:d6:49:83:5f:c5:4a:44:0e:a3:46:be:
22:7f:7f:a2:71:31:db:ed:12:76:7b:09:48:57:20:
c5:00:3e:9b:05:85:b8:48:a4:bb:c1:f8:73:85:9e:
80:0c:87:31:5f:a9:9e:83:6e:51:e8:6a:8d:52:c9:
27:85:d8:6b:58:c6:b3:e9:bb:f6:1f:ed:33:da:6b:
81:a1:52:b6:71:21:b0:fc:1e:e4:a3:10:78:73:d9:
dd:35:5e:1c:9e:95:31:92:66:24:be:e9:ea:bb:23:
51:9b:5a:45:8e:72:3d:dd:b0:f3:4b:df:ce:99:4e:
f0:34:fd:54:0c:d5:97:c0:11:ca:dd:02:17:62:9d:
98:67:f3:e7:84:06:2f:cf:bb:9c:76:51:3e:ea:6c:
1b:91:f1:4a:7f:e2:e2:29:c8:9c:32:04:72:06:c1:
d5:f0:d2:6d:c7:36:06:7c:6f:7b:af:f7:59:9d:1c:
12:d1:7d:10:f3:ae:a9:e3:38:f7:6b:f2:aa:79:97:
0d:4f:58:37:5c:be:b8:65:76:fd:42:68:2c:12:e6:
f4:ca:0f:88:19:c6:59:47:fa:41:77:da:68:62:2d:
cd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0D:E0:AA:34:33:98:E0:DC:AC:C3:63:F0:91:15:2C:D5:D0:6E:2F
X509v3 Authority Key Identifier:
keyid:02:5A:81:22:C2:47:D3:EF:BB:D2:F6:A8:14:A5:F6:87:45:41:88:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlqBIsJH0--70vaoFKX2h0VBiN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:28:cb:5a:33:ca:6f:bd:3e:12:ca:ae:10:6a:00:4b:ef:1b:
dc:32:21:3b:38:dc:7f:28:52:06:c8:ae:44:4a:ab:18:75:be:
cb:9c:6b:e1:03:4e:3a:0f:6a:a2:9a:b3:9a:84:d7:b4:58:69:
38:d9:73:d1:67:fc:54:b9:de:22:02:3c:e2:c6:40:6f:b2:a2:
43:dd:76:21:0c:0f:e4:05:f8:4c:d0:0e:c9:fe:0a:ec:ab:34:
35:c7:d3:89:54:30:7a:e1:41:0a:29:f9:ad:d3:4c:9e:02:22:
77:4c:24:f5:6f:89:d6:92:4d:9a:5e:ea:8f:53:e5:07:c2:8c:
70:b4:c5:ac:b2:bf:9d:c9:84:2a:0c:7c:ed:3e:d5:f0:38:eb:
d7:0b:06:c1:b3:7a:7e:f3:1c:54:f7:ca:72:b8:20:dc:17:dc:
95:67:d9:6d:58:3e:36:3e:c9:6d:b2:fc:d5:20:21:c8:34:07:
51:f1:48:03:a3:87:20:21:be:1e:d3:8b:88:02:10:0a:51:1c:
d7:19:57:3f:6e:f1:18:20:b6:c0:c0:f5:8f:80:e1:bf:a3:84:
4f:36:a4:3c:1b:ff:dc:9f:45:87:9a:80:a9:ae:e5:80:8e:ee:
e7:74:72:d6:13:56:14:9d:58:6c:0d:51:36:81:7c:de:95:2f:
87:39:24:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03G7n0Xli5I1rGKaOl3UNvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNWE4MTIyYzI0N2QzZWZiYmQyZjZhODE0YTVmNjg3NDU0
MTg4ZGYwHhcNMjYwMzI5MDEwMDU3WhcNMjYwMzMwMDEwMDU3WjAzMTEwLwYDVQQD
EygyMDBkZTBhYTM0MzM5OGUwZGNhY2MzNjNmMDkxMTUyY2Q1ZDA2ZTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9GPI3E6QxTjjNYKDeFAXHfTaVfx
CtjNq/j3o64gkJz+1kmDX8VKRA6jRr4if3+icTHb7RJ2ewlIVyDFAD6bBYW4SKS7
wfhzhZ6ADIcxX6meg25R6GqNUsknhdhrWMaz6bv2H+0z2muBoVK2cSGw/B7koxB4
c9ndNV4cnpUxkmYkvunquyNRm1pFjnI93bDzS9/OmU7wNP1UDNWXwBHK3QIXYp2Y
Z/PnhAYvz7ucdlE+6mwbkfFKf+LiKcicMgRyBsHV8NJtxzYGfG97r/dZnRwS0X0Q
866p4zj3a/KqeZcNT1g3XL64ZXb9QmgsEub0yg+IGcZZR/pBd9poYi3NSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCAN4Ko0M5jg3KzDY/CRFSzV0G4vMB8GA1UdIwQY
MBaAFAJagSLCR9Pvu9L2qBSl9odFQYjfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWxxQklzSkgwLS03MHZhb0ZLWDJoMFZCaU44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9lMjk5MWEtZGIwZi00YzNmLWJjMDgt
MWIzZTM1OTUxMDFiLzEvQWxxQklzSkgwLS03MHZhb0ZLWDJoMFZCaU44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9lMjk5MWEtZGIwZi00YzNmLWJjMDgtMWIzZTM1OTUxMDFi
LzEvQWxxQklzSkgwLS03MHZhb0ZLWDJoMFZCaU44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALijLWjPK
b70+EsquEGoAS+8b3DIhOzjcfyhSBsiuREqrGHW+y5xr4QNOOg9qopqzmoTXtFhp
ONlz0Wf8VLneIgI84sZAb7KiQ912IQwP5AX4TNAOyf4K7Ks0NcfTiVQweuFBCin5
rdNMngIid0wk9W+J1pJNml7qj1PlB8KMcLTFrLK/ncmEKgx87T7V8Djr1wsGwbN6
fvMcVPfKcrgg3BfclWfZbVg+Nj7JbbL81SAhyDQHUfFIA6OHICG+HtOLiAIQClEc
1xlXP27xGCC2wMD1j4Dhv6OETzakPBv/3J9Fh5qAqa7lgI7u53Ry1hNWFJ1YbA1R
NoF83pUvhzkkZQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:59 2026 by rpki-client