Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.mft
File: 0AL76fCkE2A-3vtzOlMfLiwOnAY.mft (raw, json)
Hash identifier: FSrMEnAGs3jVnCiGdHzi23gpDpyseskEWc3xdXJ1XUY=
Subject key identifier: 70:57:CF:B2:D5:94:F0:33:5C:B8:73:50:A2:5F:D6:40:D9:F4:65:18
Authority key identifier: D0:02:FB:E9:F0:A4:13:60:3E:DE:FB:73:3A:53:1F:2E:2C:0E:9C:06
Certificate issuer: /CN=d002fbe9f0a413603edefb733a531f2e2c0e9c06
Certificate serial: 019E1D59DFE733E6D20956BB556A058CD96A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AL76fCkE2A-3vtzOlMfLiwOnAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.mft
Manifest number: 1905
Signing time: Tue 12 May 2026 18:01:29 +0000
Manifest this update: Tue 12 May 2026 18:01:29 +0000
Manifest next update: Wed 13 May 2026 18:01:29 +0000
Files and hashes: 1: 0AL76fCkE2A-3vtzOlMfLiwOnAY.crl (hash: tFgKro/9L/FgjpuN+x7iKrUQj/gnufn3NUYVX16STyA=)
2: dsXROTd2qvJarDLFNerpFXp5tvM.roa (hash: g4jlzZr8kyp6l2Rwmj8PdLtnag5RCNjP07Ftz4rMi7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AL76fCkE2A-3vtzOlMfLiwOnAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:df:e7:33:e6:d2:09:56:bb:55:6a:05:8c:d9:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d002fbe9f0a413603edefb733a531f2e2c0e9c06
Validity
Not Before: May 12 18:01:29 2026 GMT
Not After : May 13 18:01:29 2026 GMT
Subject: CN=7057cfb2d594f0335cb87350a25fd640d9f46518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8f:bd:b1:1f:ae:ed:e8:a8:03:f0:5b:6c:6d:
2b:2c:92:f4:b5:76:5c:59:bd:54:89:ad:c7:c1:74:
35:91:0f:62:5b:41:bd:67:62:16:51:58:3a:3c:35:
c1:45:98:71:85:03:00:69:1f:df:45:00:49:f2:56:
8a:e3:76:0e:26:02:a9:b3:de:90:25:fd:4f:5b:61:
f3:9e:c1:df:e3:1e:e3:cc:78:77:8f:66:ca:42:75:
c5:9c:20:9c:42:c4:c0:1c:03:8f:eb:c3:95:2d:bd:
6f:28:ea:d6:b0:ad:52:fd:39:96:5a:d8:47:d6:5e:
dc:46:b1:0f:8c:2e:04:f7:59:7f:44:42:d7:7b:bd:
91:0d:c3:43:ea:3d:74:ce:a9:a4:42:4e:59:1b:8e:
5e:d8:bd:7e:b8:0e:5d:a8:57:d2:26:bf:da:49:33:
24:d9:bc:06:0f:7a:05:2d:24:e0:cd:9d:cd:56:bf:
77:aa:22:e6:2b:96:51:3f:01:3c:5d:a9:68:35:b6:
b5:7e:f7:0c:31:f9:71:43:50:d1:1b:18:d3:61:a4:
5f:63:c5:28:7f:3d:01:34:89:09:dd:9a:1c:cc:b2:
2f:74:97:d0:aa:8a:a5:3c:ab:4b:2b:da:0c:ac:92:
29:45:15:0d:4a:20:6c:90:76:b7:cb:4c:e8:ff:ee:
5f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:57:CF:B2:D5:94:F0:33:5C:B8:73:50:A2:5F:D6:40:D9:F4:65:18
X509v3 Authority Key Identifier:
keyid:D0:02:FB:E9:F0:A4:13:60:3E:DE:FB:73:3A:53:1F:2E:2C:0E:9C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AL76fCkE2A-3vtzOlMfLiwOnAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:b1:86:3c:ab:eb:7b:7e:c5:3c:27:6a:28:53:02:6b:3e:e9:
cc:4b:b9:c3:2b:3d:73:45:cb:c8:3e:52:cf:ad:f9:1a:1a:a6:
e7:83:2d:fd:2f:97:ac:8f:ec:9c:90:aa:8f:0e:ba:89:90:93:
fd:85:c3:68:17:ce:f4:38:7e:bb:e9:88:b1:00:28:f6:e7:b7:
24:d6:89:cf:e5:25:bc:ba:18:5a:6f:34:a9:a5:e5:6f:4c:a4:
93:f5:30:22:59:da:66:f3:fa:e5:57:bb:06:c2:1f:6e:f3:16:
70:21:a2:61:ae:82:a8:71:a3:a2:a2:f4:6e:51:0a:0a:d7:b8:
bf:df:0c:d4:23:a8:33:f4:87:9d:25:d0:e0:b7:82:fd:24:b5:
45:3a:ed:d1:83:59:74:73:69:ef:a1:8f:1d:2c:94:c5:14:a0:
48:cf:3b:24:3e:99:7c:d7:dd:24:06:f3:3a:76:ad:00:0d:27:
d4:b9:c1:77:ad:ee:35:24:f0:c3:de:64:46:b2:1b:1e:b8:9e:
68:4f:35:2e:55:c5:23:e4:63:d8:9f:f8:03:94:da:13:e4:e3:
8d:aa:fb:9e:35:fb:47:02:16:fb:cc:48:a8:60:e8:42:8e:12:
5c:3d:60:76:49:dd:a3:55:cc:82:27:27:3e:bb:e8:c2:47:7e:
ae:fa:0b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:29:58 2026 by rpki-client