Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.mft
File: AlqBIsJH0--70vaoFKX2h0VBiN8.mft (raw, json)
Hash identifier: MIee5ebWbg5Nu/byxqt3Lf7qjC6ffGBtyKH6aOglbnY=
Subject key identifier: D8:19:97:41:DF:5C:AE:4D:30:9D:AD:4D:5E:EF:23:73:C5:C1:49:8C
Authority key identifier: 02:5A:81:22:C2:47:D3:EF:BB:D2:F6:A8:14:A5:F6:87:45:41:88:DF
Certificate issuer: /CN=025a8122c247d3efbbd2f6a814a5f687454188df
Certificate serial: 01A1423AAC5F0CBB28C7FA6423F570F8428F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AlqBIsJH0--70vaoFKX2h0VBiN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.mft
Manifest number: 1AA7
Signing time: Fri 16 Oct 2026 01:01:43 +0000
Manifest this update: Fri 16 Oct 2026 01:01:43 +0000
Manifest next update: Sat 17 Oct 2026 01:01:43 +0000
Files and hashes: 1: AlqBIsJH0--70vaoFKX2h0VBiN8.crl (hash: FEnXGUGytm1R+eIgWugOdgwIXJLNlcTjsgLM6gx8Ew4=)
2: DiLBDAdX2Rn6IbzlG165KKHARDw.roa (hash: efTlYN5L+Bk95Nj1I+etEzgtXBHg5cg9mNZu0CNmkQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AlqBIsJH0--70vaoFKX2h0VBiN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:42:3a:ac:5f:0c:bb:28:c7:fa:64:23:f5:70:f8:42:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=025a8122c247d3efbbd2f6a814a5f687454188df
Validity
Not Before: Oct 16 01:01:43 2026 GMT
Not After : Oct 17 01:01:43 2026 GMT
Subject: CN=d8199741df5cae4d309dad4d5eef2373c5c1498c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:0f:e7:43:91:b9:73:1f:ff:56:17:e1:25:27:
f6:a3:52:e5:57:64:92:d7:bd:ae:0d:c6:20:fa:f2:
64:75:2c:81:ab:17:05:55:be:39:49:5f:52:fb:60:
3c:d4:f6:be:f7:54:bf:0c:03:81:20:64:38:c7:6f:
a6:59:c0:b6:9e:54:c1:1f:bf:cf:9e:1d:bb:63:06:
94:6f:b7:30:eb:da:ab:21:7d:62:dd:c4:c7:49:70:
3a:f0:30:f0:9c:ce:f1:e3:ca:c3:fd:23:3f:bb:69:
ce:5c:94:d0:10:9b:a3:91:ec:95:d4:db:82:3f:1f:
5f:39:c2:af:e9:3f:c0:4a:f1:66:35:2d:b2:3e:87:
ff:d6:65:43:4e:77:9e:c6:8e:d7:a7:10:9d:44:a5:
10:a9:96:fe:a6:cb:07:f4:ef:4a:e8:8c:c9:16:fa:
0f:80:ad:43:9a:2a:00:69:e9:6b:f4:52:1d:94:b2:
af:e1:d6:13:df:ba:82:df:c9:16:ba:4c:b8:ec:cd:
0e:34:7d:ef:8c:b7:cf:f1:a8:b5:dd:96:66:8d:c2:
1f:e5:c8:12:23:94:fc:f7:05:91:4e:7a:7b:0f:d1:
b1:95:b9:65:b2:84:ce:7e:54:38:a5:58:b9:9e:0b:
16:66:41:85:2c:a4:a7:80:f8:b9:0c:8a:b1:5e:df:
b7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:19:97:41:DF:5C:AE:4D:30:9D:AD:4D:5E:EF:23:73:C5:C1:49:8C
X509v3 Authority Key Identifier:
keyid:02:5A:81:22:C2:47:D3:EF:BB:D2:F6:A8:14:A5:F6:87:45:41:88:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlqBIsJH0--70vaoFKX2h0VBiN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:3c:b1:03:f1:8c:24:40:33:8c:f4:5e:f6:f0:d3:b7:01:81:
a2:b2:e9:62:93:7f:01:52:60:a8:60:da:74:70:70:ea:23:53:
37:8d:b6:fb:cf:bf:a3:5e:a7:70:df:de:a8:c9:82:6a:5e:65:
6e:fe:b2:b8:1d:00:b2:f2:05:93:bd:64:76:8b:37:e9:56:aa:
18:70:ff:12:28:e1:84:a8:b8:57:48:5a:f5:04:5c:f8:08:6d:
ef:7d:7a:84:78:65:9c:d6:e9:f5:38:eb:74:29:49:bf:1d:e1:
ed:0f:33:05:68:68:86:ff:e3:04:74:dd:8f:78:46:5f:76:f2:
6e:70:da:cd:64:bf:c3:6e:f6:f5:ac:3a:5e:51:77:bf:51:11:
af:4d:89:0a:11:fa:5b:9d:2f:ca:7e:1e:4c:5b:f0:3f:98:00:
24:2a:06:45:d9:06:1d:5c:88:b9:0c:ec:e4:99:0e:6b:ad:e8:
c2:30:88:ab:af:70:5c:fc:a9:3c:79:62:c1:f8:98:d4:b3:17:
7e:99:e2:f2:b3:1d:eb:a3:17:de:50:af:f8:21:00:e0:e4:27:
fa:7b:8f:04:7b:6a:94:7c:e0:3f:b0:58:1f:e9:f3:18:76:36:
bb:df:da:cc:9a:f8:2a:1d:f7:58:f5:c3:54:e5:71:a2:7e:6d:
1d:b2:a8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 04:04:39 2026 by rpki-client