Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/48f09e-7386-4139-91c8-3c88e40e711c/1/ALlD7lfDXyx_T-wGhel9YDsHytI.mft
File: ALlD7lfDXyx_T-wGhel9YDsHytI.mft (raw, json)
Hash identifier: qPjhMMhFDfixgw6d/7vSLuLM1NwNhkXjmw5Q5uGNt54=
Subject key identifier: BC:34:FF:D4:0A:1D:9B:75:8B:0E:53:35:3D:E8:AF:65:70:55:8D:B0
Authority key identifier: 00:B9:43:EE:57:C3:5F:2C:7F:4F:EC:06:85:E9:7D:60:3B:07:CA:D2
Certificate issuer: /CN=00b943ee57c35f2c7f4fec0685e97d603b07cad2
Certificate serial: 01A13D13E1FAD5447206E5D0BDBCDB86363E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ALlD7lfDXyx_T-wGhel9YDsHytI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/48f09e-7386-4139-91c8-3c88e40e711c/1/ALlD7lfDXyx_T-wGhel9YDsHytI.mft
Manifest number: 0E66
Signing time: Thu 15 Oct 2026 01:01:15 +0000
Manifest this update: Thu 15 Oct 2026 01:01:15 +0000
Manifest next update: Fri 16 Oct 2026 01:01:15 +0000
Files and hashes: 1: ALlD7lfDXyx_T-wGhel9YDsHytI.crl (hash: zf4gmfup+NK+OeB+wj267S05YvgWnfOC7Pil6Tf3jUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/48f09e-7386-4139-91c8-3c88e40e711c/1/ALlD7lfDXyx_T-wGhel9YDsHytI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/48f09e-7386-4139-91c8-3c88e40e711c/1/ALlD7lfDXyx_T-wGhel9YDsHytI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ALlD7lfDXyx_T-wGhel9YDsHytI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 01:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:13:e1:fa:d5:44:72:06:e5:d0:bd:bc:db:86:36:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00b943ee57c35f2c7f4fec0685e97d603b07cad2
Validity
Not Before: Oct 15 01:01:15 2026 GMT
Not After : Oct 16 01:01:15 2026 GMT
Subject: CN=bc34ffd40a1d9b758b0e53353de8af6570558db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:be:e9:72:88:b6:a3:ad:8a:3c:14:c5:11:aa:
41:b5:80:c4:5e:81:75:bd:d6:9c:6e:02:40:9e:a0:
a7:0a:19:71:e3:64:f7:39:cc:af:e0:a3:4e:2d:d2:
0d:02:0f:78:30:b2:ad:fe:6c:7f:dc:a0:b7:f8:f2:
ff:c9:ee:bc:11:6d:9e:70:ac:da:13:64:78:de:e6:
41:60:08:b2:61:08:39:fc:e2:aa:b3:e9:13:a8:78:
f4:82:95:14:b6:be:cd:aa:f0:61:66:fd:d7:1b:99:
ad:74:2b:c3:13:a2:9c:1e:5b:ae:3c:4c:2d:86:52:
7d:ad:b1:0e:28:d9:52:fc:4b:06:89:48:22:33:d3:
58:c6:1f:cb:d1:ab:67:13:d5:c8:3f:61:3f:59:81:
e7:c5:96:89:52:3e:66:ee:6d:f5:0e:e9:e9:2b:bc:
f2:e9:b2:37:8a:b9:99:c4:5b:ba:e6:1c:0c:9b:8e:
41:03:af:12:c2:4c:ad:71:3b:9f:c5:38:77:ff:aa:
e2:79:90:8c:72:56:03:d4:9f:3f:95:2d:2d:3e:d5:
58:f2:7c:4e:52:f9:08:1e:f7:7c:4f:99:f5:a3:ad:
4c:17:80:a2:93:d3:fa:a8:02:26:db:7d:f5:70:39:
3f:6b:20:b9:31:1c:42:42:f6:ee:af:07:45:1f:8e:
80:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:34:FF:D4:0A:1D:9B:75:8B:0E:53:35:3D:E8:AF:65:70:55:8D:B0
X509v3 Authority Key Identifier:
keyid:00:B9:43:EE:57:C3:5F:2C:7F:4F:EC:06:85:E9:7D:60:3B:07:CA:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ALlD7lfDXyx_T-wGhel9YDsHytI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/48f09e-7386-4139-91c8-3c88e40e711c/1/ALlD7lfDXyx_T-wGhel9YDsHytI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/48f09e-7386-4139-91c8-3c88e40e711c/1/ALlD7lfDXyx_T-wGhel9YDsHytI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:1b:a8:b0:57:8e:a6:ae:9e:54:45:e9:ad:53:30:3e:79:9d:
a4:87:63:fb:c9:78:9e:7a:a4:62:9e:29:ba:e4:be:54:23:77:
56:12:f5:39:0d:31:fd:54:44:e1:39:47:ea:48:3c:9e:33:8a:
e8:a6:5b:35:a9:cd:ae:fd:82:91:4d:47:1d:41:a9:37:ae:48:
04:12:0b:d0:af:60:ac:1e:ea:13:fe:e2:6b:39:c8:44:99:41:
6f:2e:8a:71:75:35:0c:ff:95:40:dc:17:ba:0b:79:56:97:3a:
4f:0b:fc:16:89:4e:99:87:0f:75:62:50:74:b2:25:33:a4:aa:
0f:46:35:81:0c:e5:3a:3d:f8:5d:28:b6:55:0f:9c:33:f1:85:
ee:47:55:6c:e3:5a:68:14:14:4a:83:7a:a1:28:d4:f1:6c:84:
03:4b:1a:89:c1:30:7c:db:b1:1e:fd:e3:6f:85:89:53:1a:ce:
b1:e7:4e:23:a9:63:34:e9:54:bf:91:15:b6:4e:ca:80:c2:60:
eb:e9:b8:71:e1:27:41:5d:d7:a0:46:a9:88:2a:1b:93:34:3e:
bf:0c:f6:2c:94:4a:06:da:29:28:30:e3:87:69:f2:20:8e:32:
a9:65:5d:ee:77:ef:e7:6e:3d:75:62:6e:85:99:ba:9b:9a:63:
29:f2:cb:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:30:31 2026 by rpki-client