Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.mft
File: 0AL76fCkE2A-3vtzOlMfLiwOnAY.mft (raw, json)
Hash identifier: SiGKKmC+AqdsKMyGlWt171z6biGWyvoCvor2DNyVam0=
Subject key identifier: 55:B6:F4:3B:42:91:F0:33:5B:F2:19:9C:CA:86:C9:6E:ED:68:2F:3E
Authority key identifier: D0:02:FB:E9:F0:A4:13:60:3E:DE:FB:73:3A:53:1F:2E:2C:0E:9C:06
Certificate issuer: /CN=d002fbe9f0a413603edefb733a531f2e2c0e9c06
Certificate serial: 01A13CDC371FAE6177D09214FB9DFA0E926F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AL76fCkE2A-3vtzOlMfLiwOnAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.mft
Manifest number: 1AA3
Signing time: Thu 15 Oct 2026 00:00:27 +0000
Manifest this update: Thu 15 Oct 2026 00:00:27 +0000
Manifest next update: Fri 16 Oct 2026 00:00:27 +0000
Files and hashes: 1: 0AL76fCkE2A-3vtzOlMfLiwOnAY.crl (hash: 17OzGtNIwNePqL3gbIu5I0JrCMjC2b9QHC09o12yynQ=)
2: dsXROTd2qvJarDLFNerpFXp5tvM.roa (hash: g4jlzZr8kyp6l2Rwmj8PdLtnag5RCNjP07Ftz4rMi7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AL76fCkE2A-3vtzOlMfLiwOnAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:dc:37:1f:ae:61:77:d0:92:14:fb:9d:fa:0e:92:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d002fbe9f0a413603edefb733a531f2e2c0e9c06
Validity
Not Before: Oct 15 00:00:27 2026 GMT
Not After : Oct 16 00:00:27 2026 GMT
Subject: CN=55b6f43b4291f0335bf2199cca86c96eed682f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:2d:7a:eb:ec:46:15:93:31:10:77:39:30:00:
cb:26:99:a7:d7:d0:37:15:04:b9:bb:41:fb:21:bd:
15:24:a9:e7:58:28:8d:3c:75:36:98:e2:1f:d1:cd:
00:51:97:90:c9:c1:e4:c0:a6:17:f2:57:fb:fd:8b:
bd:78:84:96:e5:02:87:77:77:ce:cd:c6:3f:9f:cd:
b3:66:8c:8a:1b:11:c8:db:85:e5:65:6a:f1:2c:37:
b5:d7:04:f1:3f:cc:a0:28:44:24:ad:a6:37:35:a0:
ef:c6:41:89:01:e6:34:44:19:22:43:9e:cf:14:30:
1d:22:84:60:0c:bd:6c:62:74:10:55:c2:ac:08:e0:
73:c2:2d:e5:4e:50:04:60:60:06:cf:3e:19:7b:8f:
88:25:5f:72:f5:79:2b:9e:f4:9a:6a:8b:e9:aa:22:
70:db:9c:56:24:f3:e9:5a:29:28:82:50:d2:0e:f7:
7e:6b:7e:6e:ab:9f:b9:03:9c:32:0f:67:a0:35:bd:
45:da:1c:08:78:fd:6b:62:ae:32:d8:8b:df:2e:0d:
54:40:cc:7a:6a:b8:98:81:86:0a:1c:10:54:3d:3d:
4e:37:0f:cc:eb:75:4e:7d:eb:75:13:bd:d7:19:8d:
82:c5:aa:18:9c:60:44:a7:ee:14:54:66:4e:74:8f:
ac:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B6:F4:3B:42:91:F0:33:5B:F2:19:9C:CA:86:C9:6E:ED:68:2F:3E
X509v3 Authority Key Identifier:
keyid:D0:02:FB:E9:F0:A4:13:60:3E:DE:FB:73:3A:53:1F:2E:2C:0E:9C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AL76fCkE2A-3vtzOlMfLiwOnAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:31:84:79:5c:b4:0e:87:17:c1:17:54:97:55:91:4b:32:b3:
24:5d:0a:85:bc:f9:39:2b:e4:24:44:34:71:3b:f0:8f:b2:96:
c8:fd:a2:85:80:42:15:07:35:4f:61:2b:ca:96:1b:97:1e:ea:
66:18:32:4b:c9:ac:90:4e:9c:ab:c0:4f:29:b6:e6:ff:83:44:
de:23:70:f4:a9:f9:61:27:ad:3a:05:36:64:d3:66:63:06:09:
7d:52:4d:1e:38:96:72:8e:4c:47:22:b9:ea:3f:a3:ea:2c:85:
26:6f:24:3e:3f:ed:3e:d9:31:af:d0:81:f1:5d:b1:1c:7a:a2:
df:dd:06:57:b3:f1:27:d1:7d:8a:7c:32:a4:60:eb:49:78:aa:
19:58:80:f7:09:4f:7a:83:b7:28:57:fc:b1:6b:ca:b4:7b:70:
ff:13:81:09:26:c5:13:22:90:1b:cb:22:5e:88:ef:3d:e4:71:
20:10:65:52:13:fb:36:04:59:e0:18:42:10:8a:94:a5:45:95:
46:37:f6:db:fc:48:ee:0c:b7:d8:b3:78:b8:e0:19:2f:5e:a5:
c0:08:31:58:0b:29:ca:a9:96:a9:e7:dd:44:13:07:e0:cb:d2:
4b:ec:38:89:64:95:26:0e:26:cf:df:a7:b4:e9:77:b4:0d:fe:
94:73:b5:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE83DcfrmF30JIU+536DpJvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMDJmYmU5ZjBhNDEzNjAzZWRlZmI3MzNhNTMxZjJlMmMw
ZTljMDYwHhcNMjYxMDE1MDAwMDI3WhcNMjYxMDE2MDAwMDI3WjAzMTEwLwYDVQQD
Eyg1NWI2ZjQzYjQyOTFmMDMzNWJmMjE5OWNjYTg2Yzk2ZWVkNjgyZjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9i166+xGFZMxEHc5MADLJpmn19A3
FQS5u0H7Ib0VJKnnWCiNPHU2mOIf0c0AUZeQycHkwKYX8lf7/Yu9eISW5QKHd3fO
zcY/n82zZoyKGxHI24XlZWrxLDe11wTxP8ygKEQkraY3NaDvxkGJAeY0RBkiQ57P
FDAdIoRgDL1sYnQQVcKsCOBzwi3lTlAEYGAGzz4Ze4+IJV9y9XkrnvSaaovpqiJw
25xWJPPpWikoglDSDvd+a35uq5+5A5wyD2egNb1F2hwIeP1rYq4y2IvfLg1UQMx6
ariYgYYKHBBUPT1ONw/M63VOfet1E73XGY2CxaoYnGBEp+4UVGZOdI+s8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFW29DtCkfAzW/IZnMqGyW7taC8+MB8GA1UdIwQY
MBaAFNAC++nwpBNgPt77czpTHy4sDpwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEFMNzZmQ2tFMkEtM3Z0ek9sTWZMaXdPbkFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS85YmFmYjEtMGM0Mi00MjViLWFhMjkt
MTljMDQ1YzZhMTRmLzEvMEFMNzZmQ2tFMkEtM3Z0ek9sTWZMaXdPbkFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS85YmFmYjEtMGM0Mi00MjViLWFhMjktMTljMDQ1YzZhMTRm
LzEvMEFMNzZmQ2tFMkEtM3Z0ek9sTWZMaXdPbkFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhDGEeVy0
DocXwRdUl1WRSzKzJF0Khbz5OSvkJEQ0cTvwj7KWyP2ihYBCFQc1T2ErypYblx7q
ZhgyS8mskE6cq8BPKbbm/4NE3iNw9Kn5YSetOgU2ZNNmYwYJfVJNHjiWco5MRyK5
6j+j6iyFJm8kPj/tPtkxr9CB8V2xHHqi390GV7PxJ9F9inwypGDrSXiqGViA9wlP
eoO3KFf8sWvKtHtw/xOBCSbFEyKQG8siXojvPeRxIBBlUhP7NgRZ4BhCEIqUpUWV
Rjf22/xI7gy32LN4uOAZL16lwAgxWAspyqmWqefdRBMH4MvSS+w4iWSVJg4mz9+n
tOl3tA3+lHO18g==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:28:15 2026 by rpki-client