Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/48f09e-7386-4139-91c8-3c88e40e711c/1/ALlD7lfDXyx_T-wGhel9YDsHytI.mft
File: ALlD7lfDXyx_T-wGhel9YDsHytI.mft (raw, json)
Hash identifier: E2wnt+P0rSsjgjybIJAFgmvoNMNKuVbd4m7IvwoicJY=
Subject key identifier: 9D:D6:DF:E1:FF:17:F3:56:41:8F:47:64:23:A0:EC:7D:22:4C:07:46
Authority key identifier: 00:B9:43:EE:57:C3:5F:2C:7F:4F:EC:06:85:E9:7D:60:3B:07:CA:D2
Certificate issuer: /CN=00b943ee57c35f2c7f4fec0685e97d603b07cad2
Certificate serial: 01A0005C888D5494209F9CB07FB545D4D977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ALlD7lfDXyx_T-wGhel9YDsHytI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/48f09e-7386-4139-91c8-3c88e40e711c/1/ALlD7lfDXyx_T-wGhel9YDsHytI.mft
Manifest number: 0DC2
Signing time: Fri 14 Aug 2026 13:00:59 +0000
Manifest this update: Fri 14 Aug 2026 13:00:59 +0000
Manifest next update: Sat 15 Aug 2026 13:00:59 +0000
Files and hashes: 1: ALlD7lfDXyx_T-wGhel9YDsHytI.crl (hash: VzPKP19zfod11kSYIMqnqRgXUxD6estkaJrnU6qOXrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/48f09e-7386-4139-91c8-3c88e40e711c/1/ALlD7lfDXyx_T-wGhel9YDsHytI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/48f09e-7386-4139-91c8-3c88e40e711c/1/ALlD7lfDXyx_T-wGhel9YDsHytI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ALlD7lfDXyx_T-wGhel9YDsHytI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5c:88:8d:54:94:20:9f:9c:b0:7f:b5:45:d4:d9:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00b943ee57c35f2c7f4fec0685e97d603b07cad2
Validity
Not Before: Aug 14 13:00:59 2026 GMT
Not After : Aug 15 13:00:59 2026 GMT
Subject: CN=9dd6dfe1ff17f356418f476423a0ec7d224c0746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bd:b7:8e:59:70:b7:d0:11:6b:05:3d:2b:dc:
3c:d5:84:0c:7e:ac:9f:9a:4f:c2:fc:df:77:ea:c8:
ad:55:ca:64:49:a0:8e:5b:c0:0d:57:4c:c1:8e:39:
7a:da:7a:bf:d0:05:46:fb:b0:a3:dd:0d:cd:a8:c0:
9e:cc:c4:6d:f0:a5:2c:fe:83:d6:2d:8e:e6:be:0a:
58:b7:59:d8:48:83:8f:bd:b6:31:3c:c2:9b:79:ee:
fc:c3:ce:92:bb:59:d9:e2:a0:b9:25:4b:6e:66:ef:
b9:28:5c:54:87:26:30:36:23:50:e3:79:b8:19:fb:
49:57:77:85:1b:97:d9:64:2f:67:7e:dd:e8:7f:25:
ba:80:59:6f:1e:8e:51:fd:71:e2:05:5f:39:2d:f4:
11:b3:84:70:c0:50:34:46:7e:0b:7f:e2:8a:2d:f0:
dd:98:7a:eb:f3:b7:0a:c2:8f:7d:15:bf:04:e7:4a:
a7:a2:0c:67:64:43:c4:44:df:42:08:22:a4:1e:99:
d6:7d:c3:ee:ab:fd:0a:90:ce:df:52:79:a3:45:cb:
2e:bd:fc:0a:03:77:5e:f9:d4:fe:f0:69:1d:51:9f:
5e:ac:37:00:dc:aa:cb:f3:d7:22:c8:c7:a3:e3:09:
f9:85:dc:43:ae:4a:f5:57:0c:98:e9:7b:f3:cb:ac:
db:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D6:DF:E1:FF:17:F3:56:41:8F:47:64:23:A0:EC:7D:22:4C:07:46
X509v3 Authority Key Identifier:
keyid:00:B9:43:EE:57:C3:5F:2C:7F:4F:EC:06:85:E9:7D:60:3B:07:CA:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ALlD7lfDXyx_T-wGhel9YDsHytI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/48f09e-7386-4139-91c8-3c88e40e711c/1/ALlD7lfDXyx_T-wGhel9YDsHytI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/48f09e-7386-4139-91c8-3c88e40e711c/1/ALlD7lfDXyx_T-wGhel9YDsHytI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:e9:89:71:10:62:28:78:e1:e2:c7:dc:85:b2:22:df:f3:10:
29:e6:1e:10:ee:98:3b:ce:ec:d1:cb:b5:13:ac:13:ef:53:b9:
8a:b5:2e:71:a8:13:22:33:33:80:b1:2b:d8:b3:6b:28:e8:53:
56:eb:70:b2:94:8a:28:19:b2:f1:f7:1c:13:08:01:d3:a9:00:
e9:c8:e9:e0:bb:33:c3:5d:53:67:33:a8:a1:3f:2a:ec:2a:87:
f6:89:d4:5f:d4:7a:b6:a0:3b:69:f1:29:94:5e:74:eb:31:e7:
be:8f:b0:38:41:58:ac:b2:f7:9f:7f:63:06:d5:e3:8a:bd:a8:
95:6a:d4:d2:ea:26:93:43:ca:d4:14:38:f1:cb:99:12:c2:ae:
66:9b:9d:55:f8:be:3e:3a:0c:70:f3:59:1f:42:70:fa:92:ae:
58:65:4c:f6:66:cd:3c:51:00:7f:6e:97:d3:1d:93:9f:7a:65:
d7:92:12:de:00:41:e6:8a:6d:67:90:87:57:f8:76:99:5b:1e:
4f:70:1b:01:f3:ed:e8:a8:9e:e6:b6:3f:8b:c6:1a:8e:06:b9:
dc:b4:f0:b4:d8:81:1e:cd:68:0e:e3:96:60:94:9f:66:29:98:
a0:11:83:19:89:38:53:d3:49:2e:bd:10:0e:8c:18:85:38:1b:
75:72:fb:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:59 2026 by rpki-client