Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft
File: Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft (raw, json)
Hash identifier: dVf2/NlRXyZyFhBvpCZufxomkC04PFBS8Y+iYgNvCFw=
Subject key identifier: 19:CE:CA:0D:A4:F6:73:8E:90:21:FE:5F:EE:8C:E7:D2:84:ED:09:BC
Authority key identifier: 02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3
Certificate issuer: /CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3
Certificate serial: 01A0B72E76FC9D3B5687F18C51CFFB80CC13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft
Manifest number: 1A6F
Signing time: Sat 19 Sep 2026 01:01:10 +0000
Manifest this update: Sat 19 Sep 2026 01:01:10 +0000
Manifest next update: Sun 20 Sep 2026 01:01:10 +0000
Files and hashes: 1: 4IwtnOs_iwVpuxuyxf_djhxqxzo.roa (hash: G10HT/r9NNyWdyBn6Pz/raHjo4uYh+brQrONHtIQaYE=)
2: Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl (hash: d0g2e9EEoSYerzHC3u5vZ5xJA3qRwRv4MYcv+/yP36A=)
3: L5XdgvVjz1-CxRRJ-biQ8dcQz5Q.roa (hash: mgC5TyjrOGnzxFMEk3uTfwFbUXB8nLluzlgGLdR5O7s=)
4: PUJfscloQMHgI371vUqE3n8p0O0.roa (hash: HCrGmAGRieyRrO1ZecDc/2ZONQZ1+T4NdqF9jJscfgc=)
5: TJ-NxfDDAC6I8oepMl_uJgBKeY4.roa (hash: LQb2DMXHpcDAYFTx6JeAZ71tuwMz9N0jPtDCjoOf9gM=)
6: Xo9a170WwWAaGk3ACXVytE6-X8Y.roa (hash: hLe8kLG+CBJL9Cc+0qIbKz/P+HvW76o6WO8v8lHcktI=)
7: lX8eqAs6CwoIAtAewjNrfYtrQ4s.roa (hash: z/P+PTXsb20XgLXYqeqn92M2nr8qJ+zQMUYiqOb95J8=)
8: r18VHhbVUEDHRwv2w5uNa5mVIjI.roa (hash: IQUd5RUia5Z/zTnW4UQLqf5CANnVe1tw4Gxv/vTf4Pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b7:2e:76:fc:9d:3b:56:87:f1:8c:51:cf:fb:80:cc:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3
Validity
Not Before: Sep 19 01:01:10 2026 GMT
Not After : Sep 20 01:01:10 2026 GMT
Subject: CN=19ceca0da4f6738e9021fe5fee8ce7d284ed09bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c4:f7:5d:f3:7f:d6:22:bf:f5:17:21:76:e2:
19:e8:37:29:3d:47:89:8a:87:85:59:45:66:c7:15:
16:bb:90:07:92:a9:7f:9e:18:60:35:f6:c6:39:9a:
9b:29:ff:a2:88:66:26:81:d1:f9:6a:d3:c7:d2:4c:
f3:9f:84:f5:c1:40:ea:7c:a8:09:c0:11:7a:da:72:
74:59:47:84:16:91:a2:bd:4a:aa:0e:98:7e:bc:89:
7b:bb:61:ba:1d:ce:67:f0:0a:3e:cb:23:10:8d:14:
e2:b3:7f:af:96:45:63:05:86:9d:f4:09:3b:33:52:
b8:99:c6:f7:b6:98:1f:bc:99:93:d7:92:31:ed:f3:
51:7d:28:3b:a2:a8:86:31:32:c2:ee:20:af:98:0d:
d5:d0:0f:51:0d:da:3a:b4:5d:f0:52:49:89:a3:d3:
11:74:78:cc:0c:31:be:18:5a:93:c5:0f:ab:5d:20:
5a:60:77:f0:47:6b:80:15:a0:d7:54:1a:69:bb:ce:
80:5c:2f:93:9e:c9:56:b1:b5:a2:69:47:58:db:0a:
d8:80:cf:27:17:4b:e8:64:3b:fa:66:c7:53:9e:7c:
08:ff:3f:ad:63:ea:42:2a:83:d5:9d:a9:d0:c3:05:
d6:fa:57:62:17:d4:af:bc:5c:43:a2:e3:d7:b7:ab:
48:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:CE:CA:0D:A4:F6:73:8E:90:21:FE:5F:EE:8C:E7:D2:84:ED:09:BC
X509v3 Authority Key Identifier:
keyid:02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:b1:7c:a1:06:17:ed:e7:1f:3b:a6:d1:dd:99:50:d4:6c:9f:
57:72:fb:78:f7:cc:fc:bb:8f:be:e4:21:fe:ca:bc:63:b9:79:
d0:d6:6a:97:10:5a:24:66:58:e8:26:3e:30:a3:50:70:9d:ca:
a8:76:12:ed:dc:f9:a7:b1:47:6a:5b:68:93:9d:89:ed:21:56:
24:e6:5f:50:81:94:8d:90:6a:be:79:26:dc:b4:83:91:76:45:
17:99:3b:ab:ef:a8:20:15:60:50:46:13:8b:95:c7:7c:1b:3f:
68:5e:33:4b:6c:d5:b9:cb:ee:a7:f6:5d:b8:38:71:90:eb:76:
fa:08:e0:39:b3:71:c0:98:d2:9e:b3:73:d6:0f:7b:c8:49:f6:
bf:d3:01:0d:32:1b:21:70:5d:37:bd:20:a2:27:c0:c9:88:b4:
a9:8c:dd:48:2a:c1:29:54:b8:d0:85:c5:ba:3e:eb:fd:16:61:
7e:dd:9d:f3:05:8b:0e:d6:bc:df:fe:fc:e8:1c:75:6a:56:3b:
df:cd:cf:98:d6:a2:36:1f:3d:01:2f:b9:a5:ce:35:44:cc:cc:
b0:a5:42:3d:2e:36:bf:79:96:3a:a0:c3:01:69:a3:eb:7f:a2:
e1:24:03:5f:b7:0d:fe:22:d5:23:92:3d:f0:3a:d6:4e:67:09:
d3:87:77:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:58:47 2026 by rpki-client