Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.mft
File: 0AL76fCkE2A-3vtzOlMfLiwOnAY.mft (raw, json)
Hash identifier: afbZbKj093zCu4kBrND6WaaflV0XM9WjjcR1YdaM23E=
Subject key identifier: 19:67:20:58:CA:27:D4:31:88:98:99:BF:9C:0C:D8:C1:5B:11:A8:B2
Authority key identifier: D0:02:FB:E9:F0:A4:13:60:3E:DE:FB:73:3A:53:1F:2E:2C:0E:9C:06
Certificate issuer: /CN=d002fbe9f0a413603edefb733a531f2e2c0e9c06
Certificate serial: 019D2816FECF4262A2DFC2F87858A6C473DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AL76fCkE2A-3vtzOlMfLiwOnAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 03:01:28 +0000
Manifest this update: Thu 26 Mar 2026 03:01:28 +0000
Manifest next update: Fri 27 Mar 2026 03:01:28 +0000
Files and hashes: 1: 0AL76fCkE2A-3vtzOlMfLiwOnAY.crl (hash: u9vxnOWdbeV/HF2aJ4H6jmlD5uCHYIUFqzPPtapNCjc=)
2: dsXROTd2qvJarDLFNerpFXp5tvM.roa (hash: g4jlzZr8kyp6l2Rwmj8PdLtnag5RCNjP07Ftz4rMi7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AL76fCkE2A-3vtzOlMfLiwOnAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:fe:cf:42:62:a2:df:c2:f8:78:58:a6:c4:73:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d002fbe9f0a413603edefb733a531f2e2c0e9c06
Validity
Not Before: Mar 26 03:01:28 2026 GMT
Not After : Mar 27 03:01:28 2026 GMT
Subject: CN=19672058ca27d431889899bf9c0cd8c15b11a8b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1a:fc:bf:c3:d8:02:3e:63:52:37:0d:e0:b9:
94:c6:d9:e2:41:a3:76:b7:f7:ac:2f:d3:33:47:82:
ff:eb:80:f6:77:43:ef:80:0a:2b:a6:ba:87:46:f7:
7a:ca:e4:e3:ee:22:ff:8f:e8:b2:e6:cb:f2:72:40:
de:9d:5a:2f:a0:77:5f:49:49:7c:7c:3e:28:1b:29:
f1:58:71:6a:52:bf:15:13:77:3f:87:22:06:aa:79:
c8:8d:00:9c:f0:5a:30:b7:90:d1:1a:88:55:2c:7c:
a5:bc:9a:c6:cc:30:ea:63:93:0d:07:0e:ec:b8:7e:
09:12:20:1b:7d:64:c9:8b:c7:61:9a:ad:8f:df:66:
c7:62:6b:d2:49:e6:56:92:f2:c2:66:a5:71:b7:62:
17:5d:50:c9:97:b5:0f:6a:a6:2b:3b:9e:12:c2:e5:
bd:1f:4a:0e:04:c2:a2:72:8a:d5:61:31:ab:c3:11:
d9:ca:06:45:ce:ff:76:8c:87:e4:c2:ec:d1:c6:4c:
bf:fc:97:37:3d:12:98:37:22:4f:32:b9:f5:72:b4:
ec:9d:4c:c2:7a:cb:bc:7b:39:f6:5d:20:df:87:6f:
31:7f:55:fe:01:bb:89:01:f5:e9:c9:9c:29:24:94:
3a:6c:fe:fb:97:c2:c4:7d:cc:77:d7:9a:0b:5e:24:
5a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:67:20:58:CA:27:D4:31:88:98:99:BF:9C:0C:D8:C1:5B:11:A8:B2
X509v3 Authority Key Identifier:
keyid:D0:02:FB:E9:F0:A4:13:60:3E:DE:FB:73:3A:53:1F:2E:2C:0E:9C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AL76fCkE2A-3vtzOlMfLiwOnAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ac:15:8b:fc:ce:57:7b:86:06:5f:f9:0d:38:7c:6f:76:61:
69:63:d7:08:01:10:7f:c1:9f:be:1b:e3:70:af:8e:8d:63:ee:
b9:f2:4f:36:fd:bd:3f:64:f3:0f:44:98:51:68:d9:1e:66:ec:
a1:14:e6:8a:f5:46:1a:e2:3d:7f:59:b0:9e:ec:3a:70:cf:61:
2d:64:93:34:85:ee:ea:51:72:a3:cb:4d:f9:7f:61:33:2c:b6:
8f:07:1a:a4:67:fa:70:4f:d8:97:df:df:02:9c:91:0b:12:1e:
d6:92:c6:4b:1b:d2:8b:b3:fa:f9:3b:25:45:47:66:38:00:f1:
23:2e:51:36:9c:e0:b7:2c:ad:bb:d2:fc:60:81:31:94:ab:0d:
6f:ae:8a:48:a6:2f:ff:04:e0:d9:85:21:46:6d:72:8e:e1:84:
21:64:3b:30:7c:9f:de:f6:fc:e0:e2:79:1b:77:bc:8b:d0:ef:
71:17:71:5d:d4:40:ba:a6:0a:12:c1:24:ee:ad:64:8a:18:6b:
d1:5c:77:62:77:d5:e2:98:d3:14:fd:23:64:2f:e9:8c:35:b4:
cd:b5:d5:0e:e6:3b:a8:dc:f5:a1:48:f6:33:4f:2c:96:d2:5a:
e6:97:b7:d0:51:c8:5f:94:b4:8e:1a:cd:a8:8a:db:81:57:ae:
52:0f:42:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFv7PQmKi38L4eFimxHPaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMDJmYmU5ZjBhNDEzNjAzZWRlZmI3MzNhNTMxZjJlMmMw
ZTljMDYwHhcNMjYwMzI2MDMwMTI4WhcNMjYwMzI3MDMwMTI4WjAzMTEwLwYDVQQD
EygxOTY3MjA1OGNhMjdkNDMxODg5ODk5YmY5YzBjZDhjMTViMTFhOGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhr8v8PYAj5jUjcN4LmUxtniQaN2
t/esL9MzR4L/64D2d0PvgAorprqHRvd6yuTj7iL/j+iy5svyckDenVovoHdfSUl8
fD4oGynxWHFqUr8VE3c/hyIGqnnIjQCc8Fowt5DRGohVLHylvJrGzDDqY5MNBw7s
uH4JEiAbfWTJi8dhmq2P32bHYmvSSeZWkvLCZqVxt2IXXVDJl7UPaqYrO54SwuW9
H0oOBMKicorVYTGrwxHZygZFzv92jIfkwuzRxky//Jc3PRKYNyJPMrn1crTsnUzC
esu8ezn2XSDfh28xf1X+AbuJAfXpyZwpJJQ6bP77l8LEfcx315oLXiRaGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBlnIFjKJ9QxiJiZv5wM2MFbEaiyMB8GA1UdIwQY
MBaAFNAC++nwpBNgPt77czpTHy4sDpwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEFMNzZmQ2tFMkEtM3Z0ek9sTWZMaXdPbkFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS85YmFmYjEtMGM0Mi00MjViLWFhMjkt
MTljMDQ1YzZhMTRmLzEvMEFMNzZmQ2tFMkEtM3Z0ek9sTWZMaXdPbkFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS85YmFmYjEtMGM0Mi00MjViLWFhMjktMTljMDQ1YzZhMTRm
LzEvMEFMNzZmQ2tFMkEtM3Z0ek9sTWZMaXdPbkFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQawVi/zO
V3uGBl/5DTh8b3ZhaWPXCAEQf8GfvhvjcK+OjWPuufJPNv29P2TzD0SYUWjZHmbs
oRTmivVGGuI9f1mwnuw6cM9hLWSTNIXu6lFyo8tN+X9hMyy2jwcapGf6cE/Yl9/f
ApyRCxIe1pLGSxvSi7P6+TslRUdmOADxIy5RNpzgtyytu9L8YIExlKsNb66KSKYv
/wTg2YUhRm1yjuGEIWQ7MHyf3vb84OJ5G3e8i9DvcRdxXdRAuqYKEsEk7q1kihhr
0Vx3YnfV4pjTFP0jZC/pjDW0zbXVDuY7qNz1oUj2M08sltJa5pe30FHIX5S0jhrN
qIrbgVeuUg9CkQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:29:41 2026 by rpki-client