
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.mft
File: AlqBIsJH0--70vaoFKX2h0VBiN8.mft (raw, json)
Hash identifier: +X7DfjWyTICxVVNuSofddyzQSAQbwyvioOWBtFo3W3E=
Subject key identifier: F9:18:CF:C0:0D:27:B2:C3:AC:AA:30:04:C7:1D:E1:CF:F1:A2:A5:10
Authority key identifier: 02:5A:81:22:C2:47:D3:EF:BB:D2:F6:A8:14:A5:F6:87:45:41:88:DF
Certificate issuer: /CN=025a8122c247d3efbbd2f6a814a5f687454188df
Certificate serial: 01A1DACAE8D6EE1B876B939F119E9FD3C88D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AlqBIsJH0--70vaoFKX2h0VBiN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.mft
Manifest number: 1AF6
Signing time: Sat 14 Nov 2026 16:01:33 +0000
Manifest this update: Sat 14 Nov 2026 16:01:33 +0000
Manifest next update: Sun 15 Nov 2026 16:01:33 +0000
Files and hashes: 1: AlqBIsJH0--70vaoFKX2h0VBiN8.crl (hash: Xcj4PhF7EqHDELK6H6VrTS2IQthxtW4hq+ATF/zK2DI=)
2: DiLBDAdX2Rn6IbzlG165KKHARDw.roa (hash: efTlYN5L+Bk95Nj1I+etEzgtXBHg5cg9mNZu0CNmkQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AlqBIsJH0--70vaoFKX2h0VBiN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:ca:e8:d6:ee:1b:87:6b:93:9f:11:9e:9f:d3:c8:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=025a8122c247d3efbbd2f6a814a5f687454188df
Validity
Not Before: Nov 14 16:01:33 2026 GMT
Not After : Nov 15 16:01:33 2026 GMT
Subject: CN=f918cfc00d27b2c3acaa3004c71de1cff1a2a510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4e:1f:8d:3b:01:5a:46:59:7f:c0:52:7c:6d:
51:2d:3b:46:a5:5e:5b:ab:d1:6c:8a:a8:5b:d3:6a:
f4:9c:62:47:cc:41:9a:38:8b:9c:37:fa:89:5f:1f:
4f:91:9a:58:32:73:af:13:16:ca:96:6a:dd:16:c8:
c0:f4:78:1b:6c:84:3b:5c:01:a8:77:49:21:e7:cd:
04:24:7b:6b:8d:42:36:6d:52:6d:82:e6:2e:4c:17:
fe:e4:e9:ff:97:fe:3b:a6:db:8b:60:14:22:1b:57:
9b:0c:3c:be:5c:b8:1b:53:be:35:38:71:5b:ca:a7:
61:9d:3e:29:a9:d5:7a:9b:04:c4:df:49:3e:70:e5:
47:96:b7:97:7d:8b:07:a5:14:26:87:d6:68:0c:72:
03:ff:d4:52:6b:38:3e:0d:c8:03:02:12:2c:6f:0a:
85:36:f2:07:29:e8:4b:7a:30:6c:b7:13:6d:21:9d:
bf:ee:f9:ae:84:14:b2:ea:74:63:d5:54:c5:fc:cf:
5a:2e:5b:f7:2e:e8:13:3c:b0:75:cd:a7:15:a1:b8:
e3:6e:15:cd:7e:ea:f4:fa:b5:83:ed:96:f4:ba:4d:
8d:56:50:63:94:d5:a0:fa:e0:07:e6:e5:51:0c:ec:
6b:ca:16:80:62:da:a5:55:cf:f6:0a:ca:02:d6:2b:
e6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:18:CF:C0:0D:27:B2:C3:AC:AA:30:04:C7:1D:E1:CF:F1:A2:A5:10
X509v3 Authority Key Identifier:
keyid:02:5A:81:22:C2:47:D3:EF:BB:D2:F6:A8:14:A5:F6:87:45:41:88:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlqBIsJH0--70vaoFKX2h0VBiN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:47:0d:58:48:c6:d5:64:c7:58:d5:76:4f:d9:48:b7:87:c6:
12:23:c8:b3:50:d9:2f:94:25:23:e3:2f:49:9b:ed:7e:79:5e:
4c:89:ff:14:a1:b3:4f:f7:31:53:b3:4b:44:8d:05:fd:c6:b5:
2b:10:71:87:77:d5:78:29:5f:db:19:79:67:8e:e5:51:09:85:
b3:cb:e1:cd:48:b2:94:25:98:a3:8f:08:b9:e5:be:e2:ef:b1:
30:00:8c:12:c9:8a:26:4f:28:50:9a:76:77:bb:52:73:23:7e:
86:01:a4:c0:ed:ec:ee:74:51:46:01:5f:20:8c:4d:51:8f:2a:
90:77:a3:ca:74:79:b5:09:92:20:a7:29:59:68:22:f5:19:f8:
92:e5:07:29:ed:e9:e1:7f:b8:da:1c:cb:e2:81:24:ef:b6:8d:
bf:4b:39:e0:a1:0f:c7:05:a8:38:0b:1c:b5:c8:b4:04:42:ef:
9d:b0:2d:6e:b2:67:bd:f7:f3:12:fd:2c:1a:a2:f6:6f:d2:91:
8a:28:77:1c:6a:83:96:12:28:7e:14:e3:1b:a2:d8:c2:8e:45:
39:59:a7:3a:64:0a:ca:bc:fc:cc:9e:84:ca:9a:be:fb:a7:f0:
fe:4f:4c:78:37:36:91:94:6f:2d:39:eb:dd:6c:66:56:9c:e6:
d1:90:27:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:40:47 2026 by rpki-client