Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/48f09e-7386-4139-91c8-3c88e40e711c/1/ALlD7lfDXyx_T-wGhel9YDsHytI.mft
File: ALlD7lfDXyx_T-wGhel9YDsHytI.mft (raw, json)
Hash identifier: EkxnwBDKI92XTq3iWFU1IdCIZNSAaNlDxMhipizqgQ8=
Subject key identifier: C7:AB:37:97:00:B3:90:F1:F0:A5:AA:92:4F:B0:08:3E:5D:E3:A6:B4
Authority key identifier: 00:B9:43:EE:57:C3:5F:2C:7F:4F:EC:06:85:E9:7D:60:3B:07:CA:D2
Certificate issuer: /CN=00b943ee57c35f2c7f4fec0685e97d603b07cad2
Certificate serial: 01A1D980FF1CE66B26992196062C10098EEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ALlD7lfDXyx_T-wGhel9YDsHytI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/48f09e-7386-4139-91c8-3c88e40e711c/1/ALlD7lfDXyx_T-wGhel9YDsHytI.mft
Manifest number: 0EB7
Signing time: Sat 14 Nov 2026 10:01:11 +0000
Manifest this update: Sat 14 Nov 2026 10:01:11 +0000
Manifest next update: Sun 15 Nov 2026 10:01:11 +0000
Files and hashes: 1: ALlD7lfDXyx_T-wGhel9YDsHytI.crl (hash: FuQfBTofY2v+DegA8F2vVhxW/kZuJ7aqZ4wyYi0uBH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/48f09e-7386-4139-91c8-3c88e40e711c/1/ALlD7lfDXyx_T-wGhel9YDsHytI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/48f09e-7386-4139-91c8-3c88e40e711c/1/ALlD7lfDXyx_T-wGhel9YDsHytI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ALlD7lfDXyx_T-wGhel9YDsHytI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d9:80:ff:1c:e6:6b:26:99:21:96:06:2c:10:09:8e:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00b943ee57c35f2c7f4fec0685e97d603b07cad2
Validity
Not Before: Nov 14 10:01:11 2026 GMT
Not After : Nov 15 10:01:11 2026 GMT
Subject: CN=c7ab379700b390f1f0a5aa924fb0083e5de3a6b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:96:44:fd:be:42:a2:66:ef:d8:e0:45:f5:96:
d5:ed:e6:7b:4f:7a:c7:80:41:03:36:c0:4f:d1:48:
63:cd:49:9e:93:12:f3:cb:63:b5:8c:2a:4e:ab:f3:
70:31:df:52:4e:0b:bf:9b:30:9f:32:28:9b:ce:cd:
75:0a:4f:1b:fa:c9:f2:37:b6:2f:ba:40:b7:ef:1f:
dc:13:a8:3d:d6:58:a7:73:54:3f:22:48:88:d4:3f:
92:17:24:0c:3b:ef:31:67:f5:7d:d6:77:b5:b7:2f:
5d:2a:2e:6f:98:e7:a4:d8:34:67:9a:76:3c:e3:e7:
7c:5a:c9:72:ea:ba:3b:74:ad:cd:e8:7f:9d:01:d8:
93:09:88:16:07:45:ff:73:a8:c9:78:5d:73:f5:2d:
22:10:a8:9e:9c:4d:ac:f9:53:30:c8:32:b0:05:a4:
44:ed:3b:23:7f:5f:24:7a:46:a0:bb:a0:ed:89:1b:
69:5f:a9:90:90:bc:3e:a1:35:b0:3b:f5:45:bb:d2:
6b:75:64:2d:e5:fa:11:85:be:90:e7:b7:88:86:c1:
9b:a8:0f:e8:fd:c7:f0:dc:32:02:cd:6d:8b:3f:1a:
fe:c6:93:d8:12:e0:57:69:d7:34:26:2b:8a:a2:fd:
11:26:7e:38:6d:04:08:d5:65:68:d3:df:0c:60:9c:
17:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:AB:37:97:00:B3:90:F1:F0:A5:AA:92:4F:B0:08:3E:5D:E3:A6:B4
X509v3 Authority Key Identifier:
keyid:00:B9:43:EE:57:C3:5F:2C:7F:4F:EC:06:85:E9:7D:60:3B:07:CA:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ALlD7lfDXyx_T-wGhel9YDsHytI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/48f09e-7386-4139-91c8-3c88e40e711c/1/ALlD7lfDXyx_T-wGhel9YDsHytI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/48f09e-7386-4139-91c8-3c88e40e711c/1/ALlD7lfDXyx_T-wGhel9YDsHytI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:b1:24:eb:ad:97:d2:a6:2d:58:5b:c4:0d:35:70:e3:e9:25:
94:57:de:32:fe:e6:ee:98:72:d4:a3:0f:92:f3:ee:73:31:9b:
d0:22:db:7f:e3:43:3c:48:2f:fc:b3:38:9b:9f:79:a6:50:0d:
ce:67:57:14:39:72:19:d9:aa:78:e0:c3:78:a2:7f:3f:eb:e7:
fb:c2:65:c5:59:06:22:d3:b5:d4:43:0b:e1:78:b5:78:e0:90:
49:9e:10:8e:e9:1c:68:da:d8:7f:c8:2e:52:2c:b3:6a:1e:37:
be:1d:b0:8a:2f:2d:69:b4:04:b1:ca:e7:07:16:26:39:d2:a0:
39:90:f3:59:99:43:be:04:ed:0d:df:81:7c:7f:fa:24:d2:c1:
68:43:76:34:41:5e:0b:a3:b9:cd:fc:61:c4:0d:8e:87:8e:de:
e7:94:66:e7:78:33:c4:aa:56:2a:92:38:b1:1b:eb:43:08:65:
4c:b0:31:40:fc:b4:76:e4:db:49:f6:e4:98:70:73:1a:ba:dd:
93:00:ad:76:10:8a:27:05:f3:87:0f:f7:ea:15:dc:77:5f:57:
a0:fa:4c:dc:63:a6:d6:40:8f:fc:3a:02:7b:ef:8f:5b:d0:63:
01:ed:8d:2f:31:2a:c5:43:9b:06:7e:99:d3:4a:b1:1c:62:a9:
16:65:16:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:48:17 2026 by rpki-client