Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.mft
File: 0AL76fCkE2A-3vtzOlMfLiwOnAY.mft (raw, json)
Hash identifier: 7baSVTACr/a82sL7pphVxdnRFsavZfu2xU0wh3j6g5Q=
Subject key identifier: 6B:17:02:95:36:86:28:7D:F1:4F:B0:13:3B:34:B6:D7:3D:4A:FA:98
Authority key identifier: D0:02:FB:E9:F0:A4:13:60:3E:DE:FB:73:3A:53:1F:2E:2C:0E:9C:06
Certificate issuer: /CN=d002fbe9f0a413603edefb733a531f2e2c0e9c06
Certificate serial: 01A0CAEB4454F3BEBFDD06EBC7AACBF4812E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AL76fCkE2A-3vtzOlMfLiwOnAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.mft
Manifest number: 1A68
Signing time: Tue 22 Sep 2026 21:00:10 +0000
Manifest this update: Tue 22 Sep 2026 21:00:10 +0000
Manifest next update: Wed 23 Sep 2026 21:00:10 +0000
Files and hashes: 1: 0AL76fCkE2A-3vtzOlMfLiwOnAY.crl (hash: 8TcsljTsEwgr895Znh6yDAyFsBzWb0s35e+3+pssme8=)
2: dsXROTd2qvJarDLFNerpFXp5tvM.roa (hash: g4jlzZr8kyp6l2Rwmj8PdLtnag5RCNjP07Ftz4rMi7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AL76fCkE2A-3vtzOlMfLiwOnAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:eb:44:54:f3:be:bf:dd:06:eb:c7:aa:cb:f4:81:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d002fbe9f0a413603edefb733a531f2e2c0e9c06
Validity
Not Before: Sep 22 21:00:10 2026 GMT
Not After : Sep 23 21:00:10 2026 GMT
Subject: CN=6b1702953686287df14fb0133b34b6d73d4afa98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:48:23:26:6a:13:b3:b8:bd:f5:c9:08:ea:66:
36:b1:60:08:53:0e:67:c3:87:bd:a0:2c:77:27:5b:
15:fa:0c:ef:4d:4b:6a:ab:37:1f:3b:b3:bb:07:f8:
94:21:cf:37:94:06:c4:fa:13:9d:90:db:71:cb:55:
d4:42:4b:48:72:89:d2:63:0c:97:51:cf:fa:e2:b3:
d2:fa:7d:3f:f9:5a:0f:01:40:2e:18:5d:cf:ec:64:
12:05:89:99:47:ae:5b:b9:d8:09:2d:a4:a8:7d:3c:
c9:af:dd:c6:1d:31:27:00:63:76:07:3f:ca:5e:d0:
84:9d:fc:9c:c9:7e:24:c7:70:e7:9d:92:fd:63:dc:
26:46:3d:e9:e4:bc:b7:1c:ab:03:28:dd:be:9e:0b:
2b:fa:b4:2c:97:2b:ff:6c:d1:36:0b:5f:ea:4c:35:
e3:ad:e9:6b:eb:ca:bf:86:6e:ab:f5:0d:65:88:79:
f0:11:6a:bb:1e:5d:81:a7:48:04:80:e2:34:1d:69:
9b:53:52:16:03:8f:98:6c:39:cc:77:d3:d6:f4:15:
9a:ab:8a:83:1d:b9:6a:21:35:b0:8e:bb:db:dd:a9:
ae:fb:93:b4:e8:c9:26:c6:e9:6b:f0:61:91:e1:d7:
d5:a7:b3:5c:44:53:db:5c:0e:1c:38:39:ac:eb:8a:
76:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:17:02:95:36:86:28:7D:F1:4F:B0:13:3B:34:B6:D7:3D:4A:FA:98
X509v3 Authority Key Identifier:
keyid:D0:02:FB:E9:F0:A4:13:60:3E:DE:FB:73:3A:53:1F:2E:2C:0E:9C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AL76fCkE2A-3vtzOlMfLiwOnAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:c9:45:d6:54:70:28:2b:00:53:45:3a:53:5c:e1:c0:c9:b8:
49:ed:47:31:6a:d0:37:a8:d8:79:80:31:a9:7c:d2:da:7d:2d:
0c:20:88:93:c6:09:0a:50:32:fa:74:fb:c5:ef:47:61:25:84:
19:a7:bb:3d:ce:46:90:7a:ea:fc:e4:ac:a5:30:90:23:07:6e:
f9:12:e5:f0:8b:5d:88:c1:18:a2:41:ed:25:db:fe:02:12:d4:
de:4f:d6:63:6d:23:48:1d:b5:c4:06:f2:c5:d3:33:68:84:6c:
0d:4e:65:e4:1b:be:34:28:50:97:7b:32:6a:97:c9:fa:1d:35:
78:a2:9c:b0:5f:2c:14:fa:14:18:55:9f:7a:0a:4e:50:a8:71:
71:46:37:35:fa:a6:94:0b:7c:33:3c:78:86:06:8d:b3:e8:84:
fd:71:49:cb:c2:14:57:db:3d:4e:d8:de:5e:e3:35:81:f4:10:
35:99:18:53:ad:7d:11:09:12:43:52:be:78:db:6d:40:da:9b:
de:26:67:a7:75:5f:57:40:27:7e:9e:bf:98:10:04:f6:7b:2a:
38:d3:8c:26:af:5c:3b:78:98:bf:8b:ca:66:27:b3:15:61:44:
db:59:4e:2c:20:98:1d:0d:59:09:e2:ea:c4:49:56:ab:15:39:
9b:96:7f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:11:22 2026 by rpki-client