Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.mft
File: AlqBIsJH0--70vaoFKX2h0VBiN8.mft (raw, json)
Hash identifier: xXO0qCDbiWZcGAaZ8SsVNj9KT0lVTqKE8TYmtfQuWWk=
Subject key identifier: 9A:F1:62:6F:25:9B:A9:15:61:14:43:4E:04:91:28:3B:FF:0E:BE:8A
Authority key identifier: 02:5A:81:22:C2:47:D3:EF:BB:D2:F6:A8:14:A5:F6:87:45:41:88:DF
Certificate issuer: /CN=025a8122c247d3efbbd2f6a814a5f687454188df
Certificate serial: 01A001A5E9B7FFD638C928254B5142D4825E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AlqBIsJH0--70vaoFKX2h0VBiN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.mft
Manifest number: 1A01
Signing time: Fri 14 Aug 2026 19:00:45 +0000
Manifest this update: Fri 14 Aug 2026 19:00:45 +0000
Manifest next update: Sat 15 Aug 2026 19:00:45 +0000
Files and hashes: 1: AlqBIsJH0--70vaoFKX2h0VBiN8.crl (hash: jGn0cUwhWPwbhc+H9TakalJBCtSVl9NoFCW5YTX8Z6Y=)
2: DiLBDAdX2Rn6IbzlG165KKHARDw.roa (hash: efTlYN5L+Bk95Nj1I+etEzgtXBHg5cg9mNZu0CNmkQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AlqBIsJH0--70vaoFKX2h0VBiN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a5:e9:b7:ff:d6:38:c9:28:25:4b:51:42:d4:82:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=025a8122c247d3efbbd2f6a814a5f687454188df
Validity
Not Before: Aug 14 19:00:45 2026 GMT
Not After : Aug 15 19:00:45 2026 GMT
Subject: CN=9af1626f259ba9156114434e0491283bff0ebe8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5d:05:73:f0:1b:5b:d0:0a:3a:9d:e0:83:2a:
63:71:a3:04:d7:2d:80:4c:4f:bf:21:92:64:49:65:
e1:54:c9:05:92:96:35:95:98:9f:6a:35:7e:00:ca:
cd:92:98:8f:a4:6b:ed:a2:4f:bb:78:46:4e:de:d0:
dd:b2:7f:3d:f3:3a:08:91:47:30:d2:ea:1b:ea:c6:
0d:1b:cc:b0:44:48:bf:de:8b:ee:bb:ff:e9:3c:db:
ee:30:1c:9c:74:41:c7:0a:67:0f:c1:91:51:32:b6:
6c:ee:b8:1d:48:36:e4:26:50:f4:10:01:38:77:64:
84:d6:33:fa:85:8a:32:ef:2e:4b:07:5d:b9:8c:7d:
cf:cf:2f:7d:19:df:92:f0:3c:85:15:9e:04:24:1c:
3a:ec:10:61:eb:51:16:f5:c1:ef:c3:c2:c7:20:5c:
7f:48:0d:65:ac:8c:ae:b1:d7:34:c5:87:3e:93:06:
91:16:84:f8:75:e5:1c:6a:43:70:eb:ff:05:05:37:
3b:c1:a2:c5:5f:13:4a:df:ba:dc:3f:22:1a:71:60:
6c:d3:72:fa:d0:7f:f6:31:80:85:c2:e4:f6:04:27:
e5:86:53:b2:cd:f1:09:46:ba:ca:f7:94:5f:16:d5:
f6:de:9f:11:5d:17:17:cd:87:b1:0c:67:d8:33:23:
d6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F1:62:6F:25:9B:A9:15:61:14:43:4E:04:91:28:3B:FF:0E:BE:8A
X509v3 Authority Key Identifier:
keyid:02:5A:81:22:C2:47:D3:EF:BB:D2:F6:A8:14:A5:F6:87:45:41:88:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlqBIsJH0--70vaoFKX2h0VBiN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:d3:62:7b:a8:1b:43:86:50:4c:77:be:76:5a:0a:30:a6:00:
64:41:e4:7a:d6:6d:c2:06:c8:74:a4:8b:ab:51:eb:33:6d:bf:
2e:e6:fe:93:e5:1f:df:ec:50:34:34:93:74:be:64:79:e8:46:
3f:10:a1:f6:79:f8:47:c0:47:a1:6f:7e:be:f9:16:6b:54:c1:
8b:99:ed:5d:48:b2:98:82:05:3e:56:d9:ad:23:9a:9f:7b:e3:
db:94:12:17:85:6a:87:50:32:73:f0:93:ae:2e:38:c9:c1:96:
a2:4f:71:00:dd:93:ef:23:64:e1:98:2e:75:ba:18:f3:ac:f8:
8d:49:1c:83:dc:29:9b:a4:9a:2f:16:ff:8c:62:a7:a7:99:21:
58:c0:35:b6:63:c5:1f:8f:24:12:f6:8e:cb:53:3f:cd:e3:05:
4c:99:fd:cd:01:c0:78:5f:a0:e4:bf:15:f7:82:f9:c1:33:ee:
f3:07:28:3b:e8:35:d3:58:92:9a:04:96:ba:fd:9a:fc:72:33:
5d:d8:4e:27:ed:01:75:aa:4c:88:05:7b:be:4c:35:82:87:05:
c7:72:35:5b:e7:66:cd:71:11:d2:bd:14:52:10:90:8e:c7:d3:
1c:8b:c7:9d:91:a5:3d:94:f4:e9:b4:c6:d5:bf:2f:4c:10:e3:
9e:4a:40:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:30:49 2026 by rpki-client