Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.mft
File: AlY31IiO4AWN6a06cMQtxGmWmpk.mft (raw, json)
Hash identifier: 8SHDf7RUsjvHzwT6CRHuPH+bjIcfWo+Ed/pzzHimJTw=
Subject key identifier: 68:38:F6:43:14:BF:BB:89:46:6D:44:99:36:33:C6:45:5D:FF:60:B1
Authority key identifier: 02:56:37:D4:88:8E:E0:05:8D:E9:AD:3A:70:C4:2D:C4:69:96:9A:99
Certificate issuer: /CN=025637d4888ee0058de9ad3a70c42dc469969a99
Certificate serial: 01A13E26404DF04C0DCEB41AE10D6BF71347
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AlY31IiO4AWN6a06cMQtxGmWmpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.mft
Manifest number: 0F1A
Signing time: Thu 15 Oct 2026 06:00:56 +0000
Manifest this update: Thu 15 Oct 2026 06:00:56 +0000
Manifest next update: Fri 16 Oct 2026 06:00:56 +0000
Files and hashes: 1: AlY31IiO4AWN6a06cMQtxGmWmpk.crl (hash: fAiUKzw7wlhCj8EzS3yxpYOSW8axKp7wod0FB110THs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AlY31IiO4AWN6a06cMQtxGmWmpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:26:40:4d:f0:4c:0d:ce:b4:1a:e1:0d:6b:f7:13:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=025637d4888ee0058de9ad3a70c42dc469969a99
Validity
Not Before: Oct 15 06:00:56 2026 GMT
Not After : Oct 16 06:00:56 2026 GMT
Subject: CN=6838f64314bfbb89466d44993633c6455dff60b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:48:34:bb:4a:e0:be:56:c9:f8:94:52:5b:a5:
d9:93:d2:b0:56:5a:33:c5:ce:5d:28:41:89:d8:09:
6e:f5:97:a5:a7:7f:3c:aa:1d:c6:8b:d0:e1:d3:9f:
25:01:d3:b5:73:b9:3d:4d:26:25:fc:8f:e4:c0:a0:
0c:2b:3d:ba:70:d7:b7:ca:2c:f2:c0:54:e3:1c:94:
3a:50:b4:ed:a0:ad:69:de:17:88:78:d4:a0:9d:22:
73:92:8f:ba:6a:d9:80:67:c6:e5:cd:52:a7:16:3f:
32:a6:ec:8f:c6:85:4e:9a:8d:e6:b5:c8:a2:82:27:
ac:93:42:75:1b:ea:13:db:5d:5e:6f:27:e4:f1:f5:
87:ce:45:a6:c3:18:da:4d:48:e5:d9:9a:be:d8:4c:
55:34:94:c0:43:5e:7f:44:62:1b:cb:c7:45:55:e0:
96:4b:12:27:66:75:23:42:cc:16:bf:97:67:50:b5:
40:d0:7b:66:64:f2:13:12:df:2d:0a:84:8c:25:02:
63:85:1e:bd:b7:51:74:4d:09:a1:92:09:f6:95:ed:
6b:78:61:ca:ab:74:2c:19:ff:4f:88:da:22:de:c1:
5d:7b:9d:21:44:13:eb:d2:a7:b5:6f:78:15:bb:7c:
c7:94:d5:4d:3c:f7:2d:52:30:75:1d:64:f1:62:88:
0c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:38:F6:43:14:BF:BB:89:46:6D:44:99:36:33:C6:45:5D:FF:60:B1
X509v3 Authority Key Identifier:
keyid:02:56:37:D4:88:8E:E0:05:8D:E9:AD:3A:70:C4:2D:C4:69:96:9A:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlY31IiO4AWN6a06cMQtxGmWmpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:dd:0e:ae:4d:84:e3:d5:1e:86:1a:b3:ad:6a:70:0e:3a:a8:
25:bc:20:1e:3a:2a:dd:43:4d:ac:80:94:73:50:25:53:81:31:
b2:f8:68:2a:e5:6f:b8:fa:50:e4:6f:1c:03:d0:89:a5:76:26:
ce:77:ab:23:d4:ea:6a:79:f0:85:5f:62:f9:1d:8a:ce:e4:e0:
6a:40:74:fa:35:d8:f8:33:25:30:b0:1e:f8:b3:0e:71:24:40:
8c:ad:c6:ee:5e:4d:18:38:80:35:3c:f8:84:16:b2:af:3b:6b:
6c:93:01:d9:90:32:a3:3e:1b:16:c7:76:26:cb:e7:a6:20:71:
72:77:36:1f:b3:f3:cb:ef:fe:77:84:f7:fe:e4:ee:9a:55:25:
7c:7d:91:14:aa:ae:c5:82:41:02:5f:36:f3:d3:d2:55:d5:ac:
1e:ac:a7:16:f0:59:0c:d3:4f:bd:55:2d:ec:aa:8f:dd:20:5f:
ff:1c:da:f8:e2:f9:ef:a2:1f:6b:96:67:12:0b:64:67:64:8e:
5f:f3:59:f6:ed:cb:0a:3c:5d:b9:01:41:6a:2e:36:a7:1e:9b:
66:44:14:d1:68:50:fb:aa:1a:f9:77:6e:cb:b4:d3:47:6b:18:
33:45:64:e5:d7:32:5a:d5:0b:0d:7c:f6:f0:bc:e5:0b:5e:9b:
95:03:2b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:25:48 2026 by rpki-client