Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/c8dc11-90ef-487e-a073-df2bbc9d0473/1/bAlGwIGzK-hIywDY2TLowfcXlmg.mft
File: bAlGwIGzK-hIywDY2TLowfcXlmg.mft (raw, json)
Hash identifier: 7xW/Q/YFw9RaT5G5bB5venxM27tH8d16/RicIwTUrIo=
Subject key identifier: 73:37:45:97:88:EE:57:ED:29:D5:36:16:92:80:0D:5B:66:14:8A:6B
Authority key identifier: 6C:09:46:C0:81:B3:2B:E8:48:CB:00:D8:D9:32:E8:C1:F7:17:96:68
Certificate issuer: /CN=6c0946c081b32be848cb00d8d932e8c1f7179668
Certificate serial: 01A18B2E2A0E4432484BA36FB0FECBF32780
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAlGwIGzK-hIywDY2TLowfcXlmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c8dc11-90ef-487e-a073-df2bbc9d0473/1/bAlGwIGzK-hIywDY2TLowfcXlmg.mft
Manifest number: 1ACC
Signing time: Fri 30 Oct 2026 05:00:20 +0000
Manifest this update: Fri 30 Oct 2026 05:00:20 +0000
Manifest next update: Sat 31 Oct 2026 05:00:20 +0000
Files and hashes: 1: WqyJg34u4FI46gK9TN4Mq-Smgwk.roa (hash: 44JWX3VffsyLbQNR5KdwRNSUjOwcRvsLpWZgi4VqbS0=)
2: bAlGwIGzK-hIywDY2TLowfcXlmg.crl (hash: eQwBd9o4PsBjAC1ItBfC6rGvN82lrcwBWqtBJVParLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/c8dc11-90ef-487e-a073-df2bbc9d0473/1/bAlGwIGzK-hIywDY2TLowfcXlmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/c8dc11-90ef-487e-a073-df2bbc9d0473/1/bAlGwIGzK-hIywDY2TLowfcXlmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bAlGwIGzK-hIywDY2TLowfcXlmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8b:2e:2a:0e:44:32:48:4b:a3:6f:b0:fe:cb:f3:27:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c0946c081b32be848cb00d8d932e8c1f7179668
Validity
Not Before: Oct 30 05:00:20 2026 GMT
Not After : Oct 31 05:00:20 2026 GMT
Subject: CN=7337459788ee57ed29d5361692800d5b66148a6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:18:50:d9:dc:62:bd:4f:97:e3:51:9d:19:51:
1f:e4:71:a7:b0:8c:85:fc:49:61:2b:68:61:67:09:
48:34:15:d2:9f:09:62:ea:b1:5e:e1:3d:d4:0c:7e:
7f:9e:b0:1b:54:a0:f2:66:da:fb:d6:1e:8c:30:98:
03:30:55:e7:7e:67:9a:1d:ad:79:7f:e3:0b:3b:ea:
b1:77:ab:58:2c:bb:1a:51:0e:e2:6c:d4:0c:8b:90:
44:71:35:a6:5e:4a:a0:cb:56:0d:06:1f:38:d3:1f:
ba:92:53:68:8e:11:3d:e5:d8:91:2c:f7:5a:73:d7:
30:d0:6f:7c:cd:b3:5a:ba:5b:6e:8d:ca:d9:94:4a:
58:30:aa:af:44:ee:de:47:f0:f7:4b:9c:2f:93:8f:
09:64:75:a4:69:c6:5e:4b:98:8a:c7:59:09:a4:98:
9d:ab:40:87:64:d9:24:68:b1:1f:11:d8:75:78:80:
bd:bf:a9:88:fd:15:f9:d1:e3:2e:44:37:d9:69:3d:
57:79:ce:15:04:eb:6b:3c:57:cc:27:e8:fb:99:a3:
94:e8:c6:68:1b:4e:39:dd:9d:7a:a8:a0:60:71:7b:
46:3a:89:18:78:21:18:dc:7a:3c:21:6e:16:ba:70:
15:81:e9:77:53:ac:e1:dd:4e:df:f6:e5:23:44:f1:
94:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:37:45:97:88:EE:57:ED:29:D5:36:16:92:80:0D:5B:66:14:8A:6B
X509v3 Authority Key Identifier:
keyid:6C:09:46:C0:81:B3:2B:E8:48:CB:00:D8:D9:32:E8:C1:F7:17:96:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAlGwIGzK-hIywDY2TLowfcXlmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c8dc11-90ef-487e-a073-df2bbc9d0473/1/bAlGwIGzK-hIywDY2TLowfcXlmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c8dc11-90ef-487e-a073-df2bbc9d0473/1/bAlGwIGzK-hIywDY2TLowfcXlmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:d3:8e:3b:3e:1c:73:d2:d7:f4:e9:e5:ac:c9:78:ea:a2:f0:
b6:4c:c2:fd:7d:2a:ba:5e:5a:6c:d1:11:bf:9e:91:f5:6b:7a:
6c:f4:73:1e:ba:15:34:f2:9a:55:73:0d:ad:3c:05:85:e3:ae:
7d:54:c8:65:1d:9e:01:99:67:3f:d9:cb:7b:ff:e5:ac:7f:a9:
af:0a:81:89:9b:f7:d1:5b:cb:91:8f:e8:bf:fb:f3:f7:fb:63:
e2:e3:b2:82:11:83:a1:e2:2c:81:2d:2a:be:22:6f:6b:62:67:
78:02:76:98:f5:0d:5b:99:39:62:d2:2c:67:72:9d:fc:84:70:
bc:54:64:69:35:bd:a4:ff:58:40:82:db:76:39:ee:e7:4e:75:
fd:51:4a:61:56:95:02:35:2a:db:87:f4:f9:1e:8d:86:37:85:
1e:b0:1a:e3:b9:64:86:ff:ec:f8:df:70:65:e9:f0:f3:ae:90:
e2:ef:41:68:7b:a9:68:8f:3e:52:a1:14:d1:c8:5f:20:8e:85:
15:c3:b6:2c:18:66:43:f7:a5:28:0f:50:85:dd:11:9b:a6:f1:
8a:04:74:a5:47:47:d9:75:c2:d2:c4:9b:8d:50:38:1a:07:12:
bc:dd:ea:64:6b:6a:5b:81:57:d7:84:a6:46:de:13:e2:83:0c:
e8:a1:64:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 14:23:13 2026 by rpki-client