Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.mft
File: AlqBIsJH0--70vaoFKX2h0VBiN8.mft (raw, json)
Hash identifier: X+8j0a0kcEb+wb9pC+tUkcPyCAVTgntcbAVkW+TNkuw=
Subject key identifier: 4A:73:8D:FB:0E:FE:C3:92:E1:B0:E5:0D:2B:12:E0:2B:D2:AD:F5:2C
Authority key identifier: 02:5A:81:22:C2:47:D3:EF:BB:D2:F6:A8:14:A5:F6:87:45:41:88:DF
Certificate issuer: /CN=025a8122c247d3efbbd2f6a814a5f687454188df
Certificate serial: 01A0D6152E4805A7CCF0857F3A2466039E81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AlqBIsJH0--70vaoFKX2h0VBiN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.mft
Manifest number: 1A6F
Signing time: Fri 25 Sep 2026 01:01:47 +0000
Manifest this update: Fri 25 Sep 2026 01:01:47 +0000
Manifest next update: Sat 26 Sep 2026 01:01:47 +0000
Files and hashes: 1: AlqBIsJH0--70vaoFKX2h0VBiN8.crl (hash: nEKv++OgMxqbAiR/C+jk+7hhJJFfhddJOneAAYuI9Jw=)
2: DiLBDAdX2Rn6IbzlG165KKHARDw.roa (hash: efTlYN5L+Bk95Nj1I+etEzgtXBHg5cg9mNZu0CNmkQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AlqBIsJH0--70vaoFKX2h0VBiN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:15:2e:48:05:a7:cc:f0:85:7f:3a:24:66:03:9e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=025a8122c247d3efbbd2f6a814a5f687454188df
Validity
Not Before: Sep 25 01:01:47 2026 GMT
Not After : Sep 26 01:01:47 2026 GMT
Subject: CN=4a738dfb0efec392e1b0e50d2b12e02bd2adf52c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c7:2b:3b:05:9f:6d:ab:56:9c:e8:c4:b0:0c:
4c:38:fb:9e:92:3c:d8:23:14:4c:97:f1:bb:b8:ba:
31:12:38:d2:2b:59:d9:76:40:44:87:39:97:9f:d6:
98:cb:2f:b8:f6:76:b4:ef:92:0a:d9:c9:6d:32:30:
1b:fa:ef:9e:a6:3d:0f:ab:9f:2c:76:12:a6:71:4d:
8c:e8:e0:ff:29:94:03:67:60:23:71:8d:91:b9:95:
49:aa:74:92:12:dc:0e:43:3b:74:9f:d4:9e:16:27:
d1:3f:f4:07:da:95:80:8a:4e:99:33:01:ff:1a:73:
cb:46:6e:6f:c3:d7:ee:30:4e:33:d0:f7:ea:fd:28:
35:7c:9d:b0:40:d6:86:76:19:40:aa:6b:18:4d:74:
c6:51:52:0c:1a:a5:e9:0c:55:37:de:71:21:b4:ed:
be:7c:84:06:13:01:9a:dc:77:54:a7:db:62:5d:19:
5f:6b:73:f4:4b:96:eb:67:6c:1c:98:ba:c7:f7:59:
69:cf:e8:34:3e:5c:46:51:12:17:cb:7c:05:de:69:
dc:ec:66:76:b7:b7:4b:c4:ce:c3:d8:5f:cb:38:8e:
08:a0:27:91:8d:d0:62:e0:60:30:42:af:c6:8f:e7:
15:bf:0c:bc:33:e2:f2:93:00:c4:19:d5:e3:d7:37:
91:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:73:8D:FB:0E:FE:C3:92:E1:B0:E5:0D:2B:12:E0:2B:D2:AD:F5:2C
X509v3 Authority Key Identifier:
keyid:02:5A:81:22:C2:47:D3:EF:BB:D2:F6:A8:14:A5:F6:87:45:41:88:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlqBIsJH0--70vaoFKX2h0VBiN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:0a:fa:ee:96:4a:bb:0c:30:7c:28:f3:1e:51:21:50:97:6d:
82:70:95:9a:bd:88:c8:dc:7f:eb:e7:74:28:c7:f8:c8:5c:bf:
77:0e:3f:25:bb:af:06:80:b6:94:9f:ca:9f:24:9e:34:a2:ce:
b8:05:95:73:54:78:ba:e8:4b:37:15:7b:70:fd:26:6b:aa:5c:
01:69:be:b8:9f:f4:a7:91:4a:c4:ec:c9:12:db:97:26:d0:61:
c6:25:33:9a:21:21:28:ba:7c:b6:e3:e5:7d:5e:9f:6c:f1:fa:
74:dc:a9:7d:eb:2e:8a:41:98:b7:cf:90:6e:eb:f4:5f:11:d7:
7e:2c:d7:1f:9e:74:61:cd:3e:eb:fd:16:c1:01:9e:b0:c1:ff:
0f:de:b0:1d:b9:8d:e7:65:d2:f0:59:aa:85:8c:1c:f9:43:78:
8b:47:55:10:cd:07:98:72:a5:da:23:00:47:67:87:2c:86:b8:
0c:90:77:96:8f:77:d6:a7:8a:04:83:86:48:99:8f:7f:5e:f8:
dd:1a:ba:d7:47:74:eb:93:40:3d:3d:cf:87:d8:c0:76:0a:c2:
9f:93:14:b2:50:07:75:5b:fc:26:52:da:66:de:2a:64:94:ea:
59:5b:8e:38:d0:d7:b4:fe:78:c4:71:af:3a:02:d6:ee:b9:3b:
7e:90:8f:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDWFS5IBafM8IV/OiRmA56BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNWE4MTIyYzI0N2QzZWZiYmQyZjZhODE0YTVmNjg3NDU0
MTg4ZGYwHhcNMjYwOTI1MDEwMTQ3WhcNMjYwOTI2MDEwMTQ3WjAzMTEwLwYDVQQD
Eyg0YTczOGRmYjBlZmVjMzkyZTFiMGU1MGQyYjEyZTAyYmQyYWRmNTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMcrOwWfbatWnOjEsAxMOPuekjzY
IxRMl/G7uLoxEjjSK1nZdkBEhzmXn9aYyy+49na075IK2cltMjAb+u+epj0Pq58s
dhKmcU2M6OD/KZQDZ2AjcY2RuZVJqnSSEtwOQzt0n9SeFifRP/QH2pWAik6ZMwH/
GnPLRm5vw9fuME4z0Pfq/Sg1fJ2wQNaGdhlAqmsYTXTGUVIMGqXpDFU33nEhtO2+
fIQGEwGa3HdUp9tiXRlfa3P0S5brZ2wcmLrH91lpz+g0PlxGURIXy3wF3mnc7GZ2
t7dLxM7D2F/LOI4IoCeRjdBi4GAwQq/Gj+cVvwy8M+LykwDEGdXj1zeR7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEpzjfsO/sOS4bDlDSsS4CvSrfUsMB8GA1UdIwQY
MBaAFAJagSLCR9Pvu9L2qBSl9odFQYjfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWxxQklzSkgwLS03MHZhb0ZLWDJoMFZCaU44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9lMjk5MWEtZGIwZi00YzNmLWJjMDgt
MWIzZTM1OTUxMDFiLzEvQWxxQklzSkgwLS03MHZhb0ZLWDJoMFZCaU44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9lMjk5MWEtZGIwZi00YzNmLWJjMDgtMWIzZTM1OTUxMDFi
LzEvQWxxQklzSkgwLS03MHZhb0ZLWDJoMFZCaU44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYAr67pZK
uwwwfCjzHlEhUJdtgnCVmr2IyNx/6+d0KMf4yFy/dw4/JbuvBoC2lJ/KnySeNKLO
uAWVc1R4uuhLNxV7cP0ma6pcAWm+uJ/0p5FKxOzJEtuXJtBhxiUzmiEhKLp8tuPl
fV6fbPH6dNypfesuikGYt8+Qbuv0XxHXfizXH550Yc0+6/0WwQGesMH/D96wHbmN
52XS8FmqhYwc+UN4i0dVEM0HmHKl2iMAR2eHLIa4DJB3lo931qeKBIOGSJmPf174
3Rq610d065NAPT3Ph9jAdgrCn5MUslAHdVv8JlLaZt4qZJTqWVuOONDXtP54xHGv
OgLW7rk7fpCPjw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 07:13:55 2026 by rpki-client