
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
File: sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft (raw, json)
Hash identifier: c06a+qKDEgBAio4q1DhMop4kRir+gOEd0TzJ9ybjZUs=
Subject key identifier: 3A:BD:2E:90:D3:8C:C5:AE:86:FC:A1:E6:E5:B9:D8:0D:AF:6F:1F:9B
Authority key identifier: B0:09:5E:D0:11:C9:43:58:24:5C:32:75:7D:46:BE:D8:60:DF:4C:19
Certificate issuer: /CN=b0095ed011c94358245c32757d46bed860df4c19
Certificate serial: 019F916D9D1D484BCCCF7F5856CDFD96961C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
Manifest number: 0972
Signing time: Fri 24 Jul 2026 00:01:47 +0000
Manifest this update: Fri 24 Jul 2026 00:01:47 +0000
Manifest next update: Sat 25 Jul 2026 00:01:47 +0000
Files and hashes: 1: 4Rj8oxGUFHYrJxPoQ7CVMuOFbXc.roa (hash: RCK1ceQp3wSH8NYHA7LP9zIIM5o/+C88uArD/S/VsPI=)
2: sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl (hash: BxMsz9q2EAoXGIq7Jvgvx/BqxCpJn4ApyzLAteNsSH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:9d:1d:48:4b:cc:cf:7f:58:56:cd:fd:96:96:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0095ed011c94358245c32757d46bed860df4c19
Validity
Not Before: Jul 24 00:01:47 2026 GMT
Not After : Jul 25 00:01:47 2026 GMT
Subject: CN=3abd2e90d38cc5ae86fca1e6e5b9d80daf6f1f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a3:aa:b8:91:aa:82:4f:c7:80:a9:1a:b0:c0:
20:27:c7:4c:65:64:cf:e3:4a:83:39:f2:0d:59:49:
db:22:39:dd:af:ec:e9:76:0d:aa:c6:f5:cc:49:bf:
be:0e:9a:9b:72:5e:f3:50:25:26:9a:49:7e:9f:12:
9b:f8:06:0f:8c:75:be:35:11:95:35:e9:a4:2e:70:
40:62:c5:c7:ea:6a:18:6e:77:6a:83:86:cf:7b:44:
c9:20:43:cd:cd:34:aa:e4:1a:b8:4a:df:23:d8:18:
7f:93:88:c2:d6:27:cc:5b:3f:00:18:ae:3c:1a:13:
8f:18:09:15:00:15:27:56:ed:1a:b4:22:ae:9c:8b:
ae:af:8c:43:94:1d:d6:07:14:ee:a6:88:44:95:a7:
ee:2f:78:99:41:3b:53:c8:34:9e:13:ee:e8:f2:cc:
4d:91:5a:70:a2:52:f3:50:57:75:80:f2:b5:e6:ed:
84:8a:37:03:c2:3e:19:9a:3a:a6:69:95:4b:74:e4:
b9:87:33:c3:3c:23:8c:9f:98:63:b6:23:d5:a0:56:
07:1f:a6:c6:81:23:23:c0:df:e5:ba:66:cc:4a:31:
42:21:15:67:23:7a:71:f9:18:f1:d6:ed:36:2a:40:
10:1a:78:01:fe:d1:c4:c4:0d:21:52:a2:58:4c:ac:
a9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:BD:2E:90:D3:8C:C5:AE:86:FC:A1:E6:E5:B9:D8:0D:AF:6F:1F:9B
X509v3 Authority Key Identifier:
keyid:B0:09:5E:D0:11:C9:43:58:24:5C:32:75:7D:46:BE:D8:60:DF:4C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:7a:e3:45:7b:29:9c:bd:c5:a2:f4:26:3a:bb:df:17:56:ec:
b5:61:af:58:14:0a:19:d4:cc:90:95:05:76:af:43:9a:4d:18:
9b:50:ec:a1:5b:59:bf:bd:19:7d:ac:c1:04:94:ed:bc:d1:a3:
e5:69:f4:48:fe:3b:1f:e4:05:e1:ec:42:ea:fa:4f:a7:4d:54:
b1:01:b9:95:c1:7d:9b:dd:da:86:64:16:9b:7a:f5:64:39:3c:
a9:ee:a9:51:b9:4e:21:9c:f7:a9:39:0a:4c:da:a9:21:d3:96:
5b:8f:aa:a2:69:3e:e9:04:9f:79:e7:cc:30:f7:d3:01:cb:69:
0f:80:49:af:50:7a:2f:64:e7:23:ad:2c:a8:50:04:d7:37:56:
ee:dd:63:51:b6:e6:86:1d:8e:7d:84:87:f0:01:b2:c8:cf:0c:
1f:47:e1:03:11:bd:e8:01:39:21:6e:c4:9f:53:04:6c:c0:12:
13:24:c4:e8:47:24:9d:6d:ae:16:a7:ff:36:b7:31:ea:a2:0a:
f6:5f:c1:7b:f2:af:d3:7c:08:20:2c:79:74:24:0e:c1:2a:a2:
c0:ba:bd:69:31:8d:45:15:54:be:37:c0:dc:33:a7:2c:b3:7d:
9e:c2:53:31:d6:36:9e:fb:cf:44:1e:f5:f8:da:91:81:f6:65:
76:a4:0c:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbZ0dSEvMz39YVs39lpYcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMDk1ZWQwMTFjOTQzNTgyNDVjMzI3NTdkNDZiZWQ4NjBk
ZjRjMTkwHhcNMjYwNzI0MDAwMTQ3WhcNMjYwNzI1MDAwMTQ3WjAzMTEwLwYDVQQD
EygzYWJkMmU5MGQzOGNjNWFlODZmY2ExZTZlNWI5ZDgwZGFmNmYxZjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6OquJGqgk/HgKkasMAgJ8dMZWTP
40qDOfINWUnbIjndr+zpdg2qxvXMSb++Dpqbcl7zUCUmmkl+nxKb+AYPjHW+NRGV
NemkLnBAYsXH6moYbndqg4bPe0TJIEPNzTSq5Bq4St8j2Bh/k4jC1ifMWz8AGK48
GhOPGAkVABUnVu0atCKunIuur4xDlB3WBxTupohElafuL3iZQTtTyDSeE+7o8sxN
kVpwolLzUFd1gPK15u2EijcDwj4ZmjqmaZVLdOS5hzPDPCOMn5hjtiPVoFYHH6bG
gSMjwN/lumbMSjFCIRVnI3px+Rjx1u02KkAQGngB/tHExA0hUqJYTKypHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDq9LpDTjMWuhvyh5uW52A2vbx+bMB8GA1UdIwQY
MBaAFLAJXtARyUNYJFwydX1Gvthg30wZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0FsZTBCSEpRMWdrWERKMWZVYS0yR0RmVEJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS80OWNkZWMtNjlmMC00NTQwLTg5YmEt
ZWE0NTk2OTk1MGNjLzEvc0FsZTBCSEpRMWdrWERKMWZVYS0yR0RmVEJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS80OWNkZWMtNjlmMC00NTQwLTg5YmEtZWE0NTk2OTk1MGNj
LzEvc0FsZTBCSEpRMWdrWERKMWZVYS0yR0RmVEJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeXrjRXsp
nL3FovQmOrvfF1bstWGvWBQKGdTMkJUFdq9Dmk0Ym1DsoVtZv70ZfazBBJTtvNGj
5Wn0SP47H+QF4exC6vpPp01UsQG5lcF9m93ahmQWm3r1ZDk8qe6pUblOIZz3qTkK
TNqpIdOWW4+qomk+6QSfeefMMPfTActpD4BJr1B6L2TnI60sqFAE1zdW7t1jUbbm
hh2OfYSH8AGyyM8MH0fhAxG96AE5IW7En1MEbMASEyTE6EcknW2uFqf/Nrcx6qIK
9l/Be/Kv03wIICx5dCQOwSqiwLq9aTGNRRVUvjfA3DOnLLN9nsJTMdY2nvvPRB71
+NqRgfZldqQMog==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:18:55 2026 by rpki-client