Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/48f09e-7386-4139-91c8-3c88e40e711c/1/ALlD7lfDXyx_T-wGhel9YDsHytI.mft
File: ALlD7lfDXyx_T-wGhel9YDsHytI.mft (raw, json)
Hash identifier: D5jR0gZUkwnbZEy8c03NMXqyKQfQ4CtzbPSqJLDJzWY=
Subject key identifier: D9:E9:42:AD:BD:5B:98:94:65:8D:44:3D:1B:35:30:1F:17:3A:11:D4
Authority key identifier: 00:B9:43:EE:57:C3:5F:2C:7F:4F:EC:06:85:E9:7D:60:3B:07:CA:D2
Certificate issuer: /CN=00b943ee57c35f2c7f4fec0685e97d603b07cad2
Certificate serial: 01A0CB228190F1E460D90DB71BB29238EEAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ALlD7lfDXyx_T-wGhel9YDsHytI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/48f09e-7386-4139-91c8-3c88e40e711c/1/ALlD7lfDXyx_T-wGhel9YDsHytI.mft
Manifest number: 0E2B
Signing time: Tue 22 Sep 2026 22:00:31 +0000
Manifest this update: Tue 22 Sep 2026 22:00:31 +0000
Manifest next update: Wed 23 Sep 2026 22:00:31 +0000
Files and hashes: 1: ALlD7lfDXyx_T-wGhel9YDsHytI.crl (hash: Lt4cPcPt0SB9BkcFHzVmFYPuq0l91nVQuPo0VGtSlVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/48f09e-7386-4139-91c8-3c88e40e711c/1/ALlD7lfDXyx_T-wGhel9YDsHytI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/48f09e-7386-4139-91c8-3c88e40e711c/1/ALlD7lfDXyx_T-wGhel9YDsHytI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ALlD7lfDXyx_T-wGhel9YDsHytI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:22:81:90:f1:e4:60:d9:0d:b7:1b:b2:92:38:ee:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00b943ee57c35f2c7f4fec0685e97d603b07cad2
Validity
Not Before: Sep 22 22:00:31 2026 GMT
Not After : Sep 23 22:00:31 2026 GMT
Subject: CN=d9e942adbd5b9894658d443d1b35301f173a11d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:56:c8:d9:a1:73:bf:8b:62:9e:3e:09:a8:63:
25:a4:0e:8d:2a:23:f2:f8:3f:6c:d1:51:7d:8b:2b:
c4:6e:e4:02:79:95:71:4c:68:83:a2:3b:1c:13:fd:
99:c9:da:33:8c:43:56:85:7e:2b:6b:f4:33:2a:06:
ef:5a:21:42:f8:b9:3c:6e:1e:82:0e:07:0e:2e:39:
48:23:49:5a:b7:62:23:1d:1b:45:fd:d4:46:5c:a5:
18:b6:d3:bb:56:07:78:b9:c8:08:af:6d:c2:68:b8:
2a:e0:1f:d7:c7:14:e9:e9:18:be:57:b2:38:d4:a1:
8a:4c:6c:fa:5d:01:f1:0e:e5:12:4c:62:8d:c2:d3:
95:e2:1d:0e:8d:38:7d:dd:4e:31:07:04:21:2c:e2:
91:99:99:e3:cc:84:de:c2:39:85:64:21:bd:93:1e:
90:7b:f2:33:dd:e2:a0:a6:b6:60:6d:3e:b1:58:d0:
1c:8a:64:40:cd:48:c9:ce:d9:c6:25:f5:3b:a0:e6:
be:1b:75:7a:61:b5:d9:ff:72:57:3b:46:bd:a6:96:
08:62:12:70:56:34:39:27:15:f3:87:9a:fc:f6:ce:
53:9d:72:b2:46:77:7c:4b:97:3f:5f:e2:6a:08:47:
0a:29:a5:0b:d7:b4:3f:fb:14:6f:e6:ef:9c:44:d9:
bf:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E9:42:AD:BD:5B:98:94:65:8D:44:3D:1B:35:30:1F:17:3A:11:D4
X509v3 Authority Key Identifier:
keyid:00:B9:43:EE:57:C3:5F:2C:7F:4F:EC:06:85:E9:7D:60:3B:07:CA:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ALlD7lfDXyx_T-wGhel9YDsHytI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/48f09e-7386-4139-91c8-3c88e40e711c/1/ALlD7lfDXyx_T-wGhel9YDsHytI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/48f09e-7386-4139-91c8-3c88e40e711c/1/ALlD7lfDXyx_T-wGhel9YDsHytI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:08:7c:54:40:ee:a8:5e:f7:3c:dc:fd:32:f2:d3:29:70:ce:
6a:3f:9c:67:12:b7:77:28:1c:68:bd:bd:a5:75:df:6e:b7:a8:
5e:1c:9d:dd:0e:8b:55:d2:c8:88:00:43:9b:c6:f2:06:1b:c8:
50:bc:ad:7a:70:27:6b:33:68:52:94:58:14:d5:da:5f:32:e9:
fa:f1:85:e7:95:4f:3d:97:47:19:41:be:fa:9a:81:33:15:e2:
e9:01:8b:92:03:d6:ea:fb:93:92:27:cd:3d:82:5e:a8:8f:a0:
5c:89:da:f2:7e:88:21:b8:f7:88:8c:db:60:82:5d:96:63:a2:
97:d3:84:76:ce:21:60:18:8c:2d:aa:8d:c6:e2:4b:db:bf:0f:
0d:3f:89:85:c8:d6:3b:cc:e5:68:b2:ec:a0:77:53:e1:51:d1:
30:75:42:2b:e2:17:69:9a:2b:8d:fd:0a:d4:18:bc:bc:f9:de:
14:71:f7:35:62:ff:4b:e0:7b:03:69:0f:05:4e:12:0c:76:f7:
39:f5:e9:74:9f:82:d6:ef:03:07:de:09:06:58:a0:92:c1:9d:
a0:bb:b1:05:ab:a6:e5:23:f4:98:d1:0b:56:75:d1:fe:33:5c:
cb:64:da:7f:12:c5:ec:eb:7c:70:1c:55:97:f4:32:d0:c0:2c:
33:c3:da:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:54:05 2026 by rpki-client