Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.mft
File: al1BD0JdNedNRW9_h7ro7ZKzyCk.mft (raw, json)
Hash identifier: iLXky/yVH2YJMytPL+yppwOU0MdGieBJeovnhBUO+BU=
Subject key identifier: 31:BE:AD:80:36:95:46:89:BB:08:27:91:97:03:14:F4:36:50:C6:2B
Authority key identifier: 6A:5D:41:0F:42:5D:35:E7:4D:45:6F:7F:87:BA:E8:ED:92:B3:C8:29
Certificate issuer: /CN=6a5d410f425d35e74d456f7f87bae8ed92b3c829
Certificate serial: 019D38D321F8F81824F6D04BC19078516269
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/al1BD0JdNedNRW9_h7ro7ZKzyCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.mft
Manifest number: 1822
Signing time: Sun 29 Mar 2026 09:00:53 +0000
Manifest this update: Sun 29 Mar 2026 09:00:53 +0000
Manifest next update: Mon 30 Mar 2026 09:00:53 +0000
Files and hashes: 1: al1BD0JdNedNRW9_h7ro7ZKzyCk.crl (hash: gKR3qAyq2a2SUplkq07yRBuQ2hAPiW4hzxLAooiVPQ8=)
2: vivKL2rvbIrNRZydZ5zkd8WMfmQ.roa (hash: vGuE++T51Grc7iV5G51jVBx+3DOtyMCoT9ihsAdCu8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/al1BD0JdNedNRW9_h7ro7ZKzyCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:21:f8:f8:18:24:f6:d0:4b:c1:90:78:51:62:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5d410f425d35e74d456f7f87bae8ed92b3c829
Validity
Not Before: Mar 29 09:00:53 2026 GMT
Not After : Mar 30 09:00:53 2026 GMT
Subject: CN=31bead8036954689bb082791970314f43650c62b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bb:92:58:c0:d0:d9:7a:78:d9:19:94:d7:7a:
3a:92:4d:f8:9e:82:67:b0:73:35:6a:61:84:45:b1:
3a:71:60:ec:0e:56:74:c7:b9:41:a8:24:20:9d:68:
e4:53:e6:59:b1:cc:46:d9:8c:50:f4:9a:a7:b7:ae:
81:8b:e9:44:67:a5:5b:57:89:46:c4:2f:90:a8:c5:
25:d8:0a:d8:ca:f0:06:28:42:24:15:48:bc:00:b0:
a5:1f:04:bf:06:76:b4:46:1a:10:82:b1:bb:d9:59:
47:e2:f9:e0:02:4e:45:3c:6a:c1:80:8d:95:11:09:
e9:68:98:e8:cc:25:27:8a:5c:a0:5d:34:8e:1c:cc:
d9:77:37:06:03:1c:59:ad:d1:71:f4:ea:d1:af:18:
83:ee:44:a4:f2:50:fc:83:77:5c:a3:90:5c:9e:65:
58:58:85:6e:5d:5c:78:66:1f:f7:7f:01:4d:1b:69:
d1:a9:bb:0c:13:e1:77:f1:c3:b1:88:66:9e:36:1a:
8c:b4:cd:c2:bf:aa:1b:eb:44:51:74:df:3a:d5:4e:
f7:30:51:98:dd:b1:6e:1f:f3:f6:06:18:45:65:08:
8c:35:31:9c:bc:b1:fe:6b:b3:73:64:5f:4c:4e:b5:
c3:9e:b7:99:8b:27:af:80:78:34:e9:92:2c:49:ae:
d2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:BE:AD:80:36:95:46:89:BB:08:27:91:97:03:14:F4:36:50:C6:2B
X509v3 Authority Key Identifier:
keyid:6A:5D:41:0F:42:5D:35:E7:4D:45:6F:7F:87:BA:E8:ED:92:B3:C8:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/al1BD0JdNedNRW9_h7ro7ZKzyCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:de:d5:f8:bf:3e:b4:c3:5c:09:1d:16:f9:0d:81:00:ed:9e:
b6:69:e4:e8:6b:87:9a:3f:9d:78:bc:7a:d8:37:93:13:71:13:
e4:d6:f2:d1:cb:cd:a9:ba:5b:18:cd:99:af:aa:9c:64:20:6f:
6d:7c:82:a5:bd:d2:a4:5f:b7:fe:d9:b1:76:c9:3e:49:c0:f5:
7e:d2:bc:64:29:68:c4:a1:c0:e9:80:c2:fc:1f:f8:56:6e:28:
d2:43:ae:15:dc:d5:f1:e5:2d:b6:9a:ec:c3:5b:b5:48:f2:4c:
7c:42:f3:8d:6e:06:90:56:e2:68:c4:09:32:14:21:d3:db:4c:
5b:96:7a:61:ea:87:0b:5a:83:88:d2:5f:24:d8:94:67:08:5c:
19:6d:68:51:56:78:52:95:fd:fd:16:0d:17:5b:e9:4a:9d:6f:
ee:25:44:ca:1b:2e:2e:fe:19:7c:a3:1a:a3:6e:87:b0:45:fc:
86:2d:8a:dd:a8:cc:ff:16:44:78:e5:f9:42:1f:21:6c:ac:bd:
5f:9b:00:da:53:7a:58:94:3c:a7:d2:b5:6b:0c:b6:ed:c9:d6:
0d:8b:9d:88:14:25:2d:14:2d:da:93:65:e4:e9:e3:18:d9:b5:
0a:f1:84:3c:cf:f8:95:50:d3:66:a1:b0:9e:41:7c:df:35:47:
35:1d:1e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:18 2026 by rpki-client