Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.mft
File: al1BD0JdNedNRW9_h7ro7ZKzyCk.mft (raw, json)
Hash identifier: rBi1V8UJLi2U0+OUqI6poZvq1b7meP0ruz9zYZ/R/f8=
Subject key identifier: BE:D3:D3:DB:F1:AC:99:5F:A0:23:BB:2E:D5:84:78:58:97:E7:DF:D7
Authority key identifier: 6A:5D:41:0F:42:5D:35:E7:4D:45:6F:7F:87:BA:E8:ED:92:B3:C8:29
Certificate issuer: /CN=6a5d410f425d35e74d456f7f87bae8ed92b3c829
Certificate serial: 019EF8DC2101F1E2C6ED1D5A6D5AD54D728B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/al1BD0JdNedNRW9_h7ro7ZKzyCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.mft
Manifest number: 190A
Signing time: Wed 24 Jun 2026 09:00:36 +0000
Manifest this update: Wed 24 Jun 2026 09:00:36 +0000
Manifest next update: Thu 25 Jun 2026 09:00:36 +0000
Files and hashes: 1: al1BD0JdNedNRW9_h7ro7ZKzyCk.crl (hash: hVbOKzIyaMYyvtuKtKRuiBkLkXfm13A6OQXmwc9oSzI=)
2: vivKL2rvbIrNRZydZ5zkd8WMfmQ.roa (hash: vGuE++T51Grc7iV5G51jVBx+3DOtyMCoT9ihsAdCu8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/al1BD0JdNedNRW9_h7ro7ZKzyCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 07:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f8:dc:21:01:f1:e2:c6:ed:1d:5a:6d:5a:d5:4d:72:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5d410f425d35e74d456f7f87bae8ed92b3c829
Validity
Not Before: Jun 24 09:00:36 2026 GMT
Not After : Jun 25 09:00:36 2026 GMT
Subject: CN=bed3d3dbf1ac995fa023bb2ed584785897e7dfd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:d7:cd:5f:35:21:f7:2c:ac:b3:1b:54:14:08:
49:06:6e:d7:7e:d9:71:ea:2b:b6:08:3e:fe:a6:42:
70:9b:07:f7:8f:2a:3f:21:c7:da:21:99:ee:b4:f0:
eb:e1:d3:fe:11:16:ed:3b:5c:38:fe:dd:c2:71:ae:
b4:95:40:60:1b:1c:e8:b7:4f:c4:1c:42:f9:68:5c:
af:75:74:57:78:e1:fc:b9:fa:7a:a5:36:2f:00:f1:
30:45:e5:08:f0:5b:33:0b:6a:1e:11:79:c3:ba:7a:
47:b7:71:0d:00:cf:e2:93:b4:4c:c4:f7:7c:48:f9:
58:87:90:a7:ce:51:eb:75:00:5c:7c:05:8f:01:9f:
50:1c:a9:d0:33:bf:c9:af:d9:40:9c:f8:9f:15:30:
0a:dd:2c:80:17:93:43:4c:ee:75:d8:f2:af:ad:c0:
91:13:96:a5:b6:4f:3c:dc:f8:fb:ba:49:31:70:c6:
e3:9d:a3:ff:17:38:82:c2:4f:7b:b3:66:48:a2:92:
c4:f2:93:3a:c8:dc:e1:1a:2e:26:41:83:30:f6:93:
de:04:77:ce:7e:c4:dd:6f:9f:13:e3:6a:fd:d8:d0:
77:60:27:47:e0:6d:ed:34:88:f2:b6:e5:65:fe:db:
0f:5c:93:84:20:2a:36:72:e0:fb:9c:a8:53:56:9f:
30:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D3:D3:DB:F1:AC:99:5F:A0:23:BB:2E:D5:84:78:58:97:E7:DF:D7
X509v3 Authority Key Identifier:
keyid:6A:5D:41:0F:42:5D:35:E7:4D:45:6F:7F:87:BA:E8:ED:92:B3:C8:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/al1BD0JdNedNRW9_h7ro7ZKzyCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:a4:cc:32:43:7b:49:d0:36:53:32:4e:69:c0:57:a2:50:1e:
20:ea:ae:ae:b7:a6:d0:7e:3d:b1:57:81:15:81:08:c0:7c:23:
0a:96:e5:29:71:b6:62:4a:ae:25:80:ca:0a:17:3c:ca:8a:83:
3e:80:aa:a0:ab:1c:b9:60:36:94:ee:01:a4:b3:b2:f0:dd:a4:
66:74:40:03:ca:ae:29:6b:8d:bc:21:9e:d2:37:f2:7b:e9:93:
37:ce:ef:b1:af:78:34:a2:44:22:9c:4a:2b:ce:85:28:7c:e4:
d4:75:52:d6:8a:48:3c:e7:23:cb:c2:90:cb:c6:1c:1d:5a:f8:
d2:e5:3c:df:2d:a1:e6:90:9b:2a:48:cd:ac:5e:66:47:40:7d:
d7:e5:53:24:29:1d:ac:e8:76:9e:93:91:a0:e0:49:7d:dc:bf:
56:fc:8b:22:d7:d0:5b:e3:40:20:e3:3c:f6:3d:4f:7d:b4:a2:
79:50:05:54:10:23:bf:65:66:c0:96:ba:01:c7:cf:86:b9:2f:
f8:aa:1a:23:09:fa:ea:68:ed:68:8f:52:16:0d:a0:5d:64:57:
28:41:4e:ee:29:d6:19:14:32:18:6b:95:45:a8:14:80:e3:a3:
91:15:a3:c6:47:54:43:00:2b:c3:6d:89:67:e4:98:30:a0:eb:
9e:7b:cc:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 12:05:47 2026 by rpki-client