Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/3bafd8-c34e-4890-b4cf-73db0f2841c9/1/AlO5GdddwgTZyjjbeyihdINLOz0.mft
File: AlO5GdddwgTZyjjbeyihdINLOz0.mft (raw, json)
Hash identifier: eGbkljmLB0Af1+gQ5lKX1UStZpP0f6O6OWNijO6ip7g=
Subject key identifier: 9C:BC:65:37:F7:9E:A9:61:CF:CF:A7:65:4D:42:24:B9:E2:7F:D2:22
Authority key identifier: 02:53:B9:19:D7:5D:C2:04:D9:CA:38:DB:7B:28:A1:74:83:4B:3B:3D
Certificate issuer: /CN=0253b919d75dc204d9ca38db7b28a174834b3b3d
Certificate serial: 01A13ECBB4FA04A6342251A63039E88DBA22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AlO5GdddwgTZyjjbeyihdINLOz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/3bafd8-c34e-4890-b4cf-73db0f2841c9/1/AlO5GdddwgTZyjjbeyihdINLOz0.mft
Manifest number: 0AC6
Signing time: Thu 15 Oct 2026 09:01:39 +0000
Manifest this update: Thu 15 Oct 2026 09:01:39 +0000
Manifest next update: Fri 16 Oct 2026 09:01:39 +0000
Files and hashes: 1: AlO5GdddwgTZyjjbeyihdINLOz0.crl (hash: MxbqkJSzz2BlNNEGf+P4w2sHpAFD6r6KOj5csfytwhI=)
2: PMWWklW51anXq7aRQXkdao86Jek.roa (hash: +f085vkz6griqp0/YZpf7yExFFEfbfc0Y85L8JbYisc=)
3: h3tLHRWk_OmFsZTg_jd5-mdYTds.roa (hash: xHXqRtgjeuL+vMeMb7Pl+kHYtqxysXcomaAK0drp85s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/3bafd8-c34e-4890-b4cf-73db0f2841c9/1/AlO5GdddwgTZyjjbeyihdINLOz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/3bafd8-c34e-4890-b4cf-73db0f2841c9/1/AlO5GdddwgTZyjjbeyihdINLOz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AlO5GdddwgTZyjjbeyihdINLOz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:cb:b4:fa:04:a6:34:22:51:a6:30:39:e8:8d:ba:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0253b919d75dc204d9ca38db7b28a174834b3b3d
Validity
Not Before: Oct 15 09:01:39 2026 GMT
Not After : Oct 16 09:01:39 2026 GMT
Subject: CN=9cbc6537f79ea961cfcfa7654d4224b9e27fd222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:96:ba:29:b9:e5:fd:44:33:1a:a6:4a:7d:f3:
00:75:5f:0c:69:d0:2d:a1:b1:d9:08:68:22:ba:28:
a8:8d:13:67:cc:12:7f:9a:a6:4d:76:c5:86:5b:e4:
9e:8f:e6:9d:bb:2f:19:0d:14:5f:47:11:8e:81:52:
1e:6e:d9:39:cf:61:2a:15:b8:99:fb:32:5e:d0:d2:
65:79:e5:10:44:ce:36:c8:07:27:01:06:4f:08:0f:
a6:a7:34:d7:b3:31:ac:8a:67:54:f9:29:cf:c6:1b:
cd:4a:7e:8a:be:c1:89:de:74:dd:58:dc:33:f3:91:
fb:17:77:3b:cf:d6:4d:f6:3d:7b:0d:34:04:80:ff:
15:7a:2a:7e:e9:07:78:db:b6:10:14:9e:c9:c5:a4:
3e:2e:81:ff:95:1c:3a:07:2e:5b:bf:4a:6a:8d:b2:
87:81:f2:49:e2:4d:ba:aa:a8:03:02:ca:27:88:83:
31:b3:d3:bd:d6:fa:62:ce:68:5b:a7:c1:61:8b:ef:
f0:d4:85:9b:9b:da:40:f8:e1:d3:de:6b:fd:e2:61:
ae:54:cd:54:51:15:f4:ad:25:19:5a:32:4b:22:3e:
00:1a:7b:a6:85:95:d4:33:55:fc:b6:18:e5:19:a1:
5c:02:a3:81:5a:5d:d5:13:5d:cb:df:83:07:7f:bc:
bd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:BC:65:37:F7:9E:A9:61:CF:CF:A7:65:4D:42:24:B9:E2:7F:D2:22
X509v3 Authority Key Identifier:
keyid:02:53:B9:19:D7:5D:C2:04:D9:CA:38:DB:7B:28:A1:74:83:4B:3B:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlO5GdddwgTZyjjbeyihdINLOz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/3bafd8-c34e-4890-b4cf-73db0f2841c9/1/AlO5GdddwgTZyjjbeyihdINLOz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/3bafd8-c34e-4890-b4cf-73db0f2841c9/1/AlO5GdddwgTZyjjbeyihdINLOz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:9c:2f:26:e1:e4:9c:da:b6:ad:27:41:79:88:d8:f5:6c:b6:
8c:8a:c4:ce:f1:51:5c:c3:d3:33:e5:92:27:0a:e4:03:4d:48:
a7:70:18:46:44:d3:33:e3:26:ba:60:45:d8:88:70:a6:ca:8f:
50:48:10:9b:61:26:eb:55:6f:0d:54:d9:9f:09:85:49:e3:e2:
63:70:3e:6c:45:a6:92:c3:2e:6d:8e:7f:56:41:91:25:d0:3d:
d5:e6:7b:a5:ab:db:e0:66:91:53:78:76:55:d1:b0:40:f5:d9:
97:24:ec:29:fa:7b:be:83:c4:da:28:b1:7f:20:a1:25:24:02:
0a:64:30:9a:c0:c8:3f:ec:e9:86:f9:9c:a3:1e:d1:27:fc:d3:
25:61:6e:78:23:c3:31:84:4b:66:ac:6e:7a:14:fb:50:7a:71:
1d:33:e0:f3:ed:84:a2:ab:35:60:f9:3c:ac:37:38:65:05:a0:
cf:36:ff:c5:26:1f:6f:65:e3:d1:41:7f:19:50:82:eb:79:d4:
f0:83:b7:71:8a:eb:03:49:b3:60:54:ad:8c:68:32:c2:78:3a:
3d:75:34:5d:5a:46:55:92:37:5b:73:e2:8b:e8:03:7f:9f:bc:
c7:38:0b:76:a3:4d:67:d4:98:9c:15:e8:4b:d3:33:fa:55:ed:
dd:58:8c:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+y7T6BKY0IlGmMDnojboiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNTNiOTE5ZDc1ZGMyMDRkOWNhMzhkYjdiMjhhMTc0ODM0
YjNiM2QwHhcNMjYxMDE1MDkwMTM5WhcNMjYxMDE2MDkwMTM5WjAzMTEwLwYDVQQD
Eyg5Y2JjNjUzN2Y3OWVhOTYxY2ZjZmE3NjU0ZDQyMjRiOWUyN2ZkMjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45a6Kbnl/UQzGqZKffMAdV8MadAt
obHZCGgiuiiojRNnzBJ/mqZNdsWGW+Sej+aduy8ZDRRfRxGOgVIebtk5z2EqFbiZ
+zJe0NJleeUQRM42yAcnAQZPCA+mpzTXszGsimdU+SnPxhvNSn6KvsGJ3nTdWNwz
85H7F3c7z9ZN9j17DTQEgP8Veip+6Qd427YQFJ7JxaQ+LoH/lRw6By5bv0pqjbKH
gfJJ4k26qqgDAsoniIMxs9O91vpizmhbp8Fhi+/w1IWbm9pA+OHT3mv94mGuVM1U
URX0rSUZWjJLIj4AGnumhZXUM1X8thjlGaFcAqOBWl3VE13L34MHf7y9swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJy8ZTf3nqlhz8+nZU1CJLnif9IiMB8GA1UdIwQY
MBaAFAJTuRnXXcIE2co423sooXSDSzs9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWxPNUdkZGR3Z1RaeWpqYmV5aWhkSU5MT3owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8zYmFmZDgtYzM0ZS00ODkwLWI0Y2Yt
NzNkYjBmMjg0MWM5LzEvQWxPNUdkZGR3Z1RaeWpqYmV5aWhkSU5MT3owLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8zYmFmZDgtYzM0ZS00ODkwLWI0Y2YtNzNkYjBmMjg0MWM5
LzEvQWxPNUdkZGR3Z1RaeWpqYmV5aWhkSU5MT3owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtpwvJuHk
nNq2rSdBeYjY9Wy2jIrEzvFRXMPTM+WSJwrkA01Ip3AYRkTTM+MmumBF2IhwpsqP
UEgQm2Em61VvDVTZnwmFSePiY3A+bEWmksMubY5/VkGRJdA91eZ7pavb4GaRU3h2
VdGwQPXZlyTsKfp7voPE2iixfyChJSQCCmQwmsDIP+zphvmcox7RJ/zTJWFueCPD
MYRLZqxuehT7UHpxHTPg8+2Eoqs1YPk8rDc4ZQWgzzb/xSYfb2Xj0UF/GVCC63nU
8IO3cYrrA0mzYFStjGgywng6PXU0XVpGVZI3W3Pii+gDf5+8xzgLdqNNZ9SYnBXo
S9Mz+lXt3ViMRA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 17:46:39 2026 by rpki-client