Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.mft
File: AlqBIsJH0--70vaoFKX2h0VBiN8.mft (raw, json)
Hash identifier: AxvLk5cGYroxQ0l4Ce6y3oKFFKCRZZaBYUiFp2L36uY=
Subject key identifier: 4D:5F:1B:16:15:DD:AC:3C:E1:70:5D:54:E2:0E:29:CE:5D:31:D4:49
Authority key identifier: 02:5A:81:22:C2:47:D3:EF:BB:D2:F6:A8:14:A5:F6:87:45:41:88:DF
Certificate issuer: /CN=025a8122c247d3efbbd2f6a814a5f687454188df
Certificate serial: 019E303B6E62C722660E2986F3C3D1D855E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AlqBIsJH0--70vaoFKX2h0VBiN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.mft
Manifest number: 1910
Signing time: Sat 16 May 2026 10:01:01 +0000
Manifest this update: Sat 16 May 2026 10:01:01 +0000
Manifest next update: Sun 17 May 2026 10:01:01 +0000
Files and hashes: 1: AlqBIsJH0--70vaoFKX2h0VBiN8.crl (hash: BI7dP5eipEon2zvr/LwgO6xRBzxeJ4hnR4pWGdncX4k=)
2: DiLBDAdX2Rn6IbzlG165KKHARDw.roa (hash: efTlYN5L+Bk95Nj1I+etEzgtXBHg5cg9mNZu0CNmkQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AlqBIsJH0--70vaoFKX2h0VBiN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:6e:62:c7:22:66:0e:29:86:f3:c3:d1:d8:55:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=025a8122c247d3efbbd2f6a814a5f687454188df
Validity
Not Before: May 16 10:01:01 2026 GMT
Not After : May 17 10:01:01 2026 GMT
Subject: CN=4d5f1b1615ddac3ce1705d54e20e29ce5d31d449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:59:0a:e5:a3:90:8e:cc:55:80:4d:96:1d:fa:
b1:2d:6e:44:d0:63:97:59:69:e4:46:e2:97:97:12:
50:a0:ab:0a:84:76:7f:a9:e3:ba:65:66:09:70:91:
54:34:03:11:c2:60:01:6e:7f:94:3d:39:7d:ee:32:
cd:71:8c:99:53:ae:31:18:8b:7a:da:70:5e:76:23:
12:f3:44:e9:f3:e1:57:d6:af:05:62:74:e3:b6:d1:
2b:5e:13:46:75:b8:91:41:4f:dc:1a:bc:8e:f7:66:
c0:70:10:6e:55:9a:c2:9b:d4:14:a1:b4:0f:66:bb:
fb:ac:27:9d:ec:53:d8:36:7b:b5:04:27:08:5f:b7:
8b:39:ae:27:8b:a2:ba:0b:c6:f2:5a:f5:e1:c4:cb:
67:24:be:12:ca:01:28:87:5c:5a:a8:c3:a1:aa:7e:
a2:5a:04:99:88:56:f8:8f:37:f3:cf:be:a2:59:2a:
70:f1:94:a9:ff:fa:46:11:a9:7e:a7:4b:f7:16:94:
2e:d2:58:90:68:a7:03:fc:a2:f2:ba:f4:4b:61:02:
c7:aa:38:bf:66:87:7e:05:ad:1f:94:02:75:6a:19:
26:43:75:03:71:69:08:d8:0c:28:82:fa:60:71:12:
2a:04:c0:9d:60:06:9d:2a:fa:89:62:a3:3d:bf:d9:
f5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:5F:1B:16:15:DD:AC:3C:E1:70:5D:54:E2:0E:29:CE:5D:31:D4:49
X509v3 Authority Key Identifier:
keyid:02:5A:81:22:C2:47:D3:EF:BB:D2:F6:A8:14:A5:F6:87:45:41:88:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlqBIsJH0--70vaoFKX2h0VBiN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:c0:d4:b5:d9:6c:2c:3a:1f:5c:00:a0:ce:c9:31:b8:c7:bd:
4f:12:59:df:02:b2:fb:13:d8:c9:7e:8b:5e:78:15:fc:2a:5d:
bd:be:27:ec:6d:19:7e:87:98:1e:69:53:4d:ed:2c:2e:bb:3f:
6b:55:67:5f:38:cd:e9:7c:ae:94:f0:ae:9e:fa:30:80:10:36:
ba:e6:54:e0:c5:7b:d9:89:de:98:88:3f:51:88:85:50:4b:66:
e0:5f:69:45:d5:34:81:db:94:18:83:39:ec:e2:7f:f1:58:06:
22:f9:d7:be:dc:fa:84:71:4e:2d:13:b9:0c:0d:b4:b4:5a:c5:
4b:d4:ff:b4:69:f6:b1:67:87:9a:1e:cf:95:25:b8:ad:4f:c5:
64:18:43:bc:1c:9b:03:84:11:85:d6:0f:45:f5:36:fc:a6:5c:
b0:10:a5:2c:1d:4e:e4:d2:c2:67:03:5a:8d:61:64:f0:a3:9a:
1f:5f:b6:98:4a:64:89:3e:d4:3c:28:8c:77:94:b6:14:42:2d:
2d:d6:a7:24:d7:52:a4:50:f8:5e:51:9c:83:cb:ab:ec:66:79:
e5:52:ba:7b:d3:ef:f3:ec:9c:28:78:2d:0c:41:8f:9e:ae:75:
01:40:3f:4d:5a:18:05:0d:1d:6b:c3:a2:df:07:e9:d6:10:3a:
b1:4d:e0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:33 2026 by rpki-client