Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.mft
File: 0AL76fCkE2A-3vtzOlMfLiwOnAY.mft (raw, json)
Hash identifier: w/HElGD0cVA/musEG+4yUEKq6+DZgYtNG2qGU6n5ws0=
Subject key identifier: 66:7F:33:FA:CD:7F:CD:A8:A0:7C:B6:C5:82:E9:27:CD:B1:56:DB:E8
Authority key identifier: D0:02:FB:E9:F0:A4:13:60:3E:DE:FB:73:3A:53:1F:2E:2C:0E:9C:06
Certificate issuer: /CN=d002fbe9f0a413603edefb733a531f2e2c0e9c06
Certificate serial: 019F921181F84F646F8EDB9CEB0606E48505
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AL76fCkE2A-3vtzOlMfLiwOnAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.mft
Manifest number: 19C6
Signing time: Fri 24 Jul 2026 03:00:48 +0000
Manifest this update: Fri 24 Jul 2026 03:00:48 +0000
Manifest next update: Sat 25 Jul 2026 03:00:48 +0000
Files and hashes: 1: 0AL76fCkE2A-3vtzOlMfLiwOnAY.crl (hash: VFFqI5nHn1nIvfLDTCQjMrIqAbflKBR746eAgDa+lCE=)
2: dsXROTd2qvJarDLFNerpFXp5tvM.roa (hash: g4jlzZr8kyp6l2Rwmj8PdLtnag5RCNjP07Ftz4rMi7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AL76fCkE2A-3vtzOlMfLiwOnAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:81:f8:4f:64:6f:8e:db:9c:eb:06:06:e4:85:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d002fbe9f0a413603edefb733a531f2e2c0e9c06
Validity
Not Before: Jul 24 03:00:48 2026 GMT
Not After : Jul 25 03:00:48 2026 GMT
Subject: CN=667f33facd7fcda8a07cb6c582e927cdb156dbe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:58:70:ee:9c:a9:4a:c5:a0:37:10:84:7e:3a:
8d:c1:d7:a9:55:d7:e2:a2:05:05:f9:28:e6:b1:cf:
55:df:87:72:6c:12:14:cf:9a:2b:10:76:9f:a6:76:
f2:16:ec:e9:bd:fb:13:73:54:2e:11:4b:37:4c:9b:
6c:5b:c3:d2:46:93:a3:b9:e6:d7:9a:51:0c:a6:3e:
a6:50:24:41:2f:bf:a2:b0:d8:f2:d4:27:5c:ce:c3:
52:91:d1:99:3d:11:dd:68:24:da:db:3f:c7:2c:fe:
32:ab:1c:76:cd:44:1f:ff:26:a0:e1:c7:cb:e5:eb:
b6:a2:b0:30:5a:98:d9:c5:36:10:34:d4:3c:cd:e8:
ce:c2:fe:df:60:53:3d:ed:72:f0:e9:7c:16:5f:cb:
e2:17:a1:a0:e6:9f:bd:4d:c0:c8:9e:73:2a:7a:7e:
7e:a2:82:60:64:c6:54:5c:92:9c:c9:2d:c3:a9:63:
17:8a:15:e1:d7:10:02:90:77:6f:cd:f4:f6:d7:79:
a7:f1:80:d1:75:cf:0e:6d:ee:a0:04:c7:52:2d:e6:
f2:bb:72:2e:8e:a0:fa:2e:b4:6e:a4:43:d7:ee:95:
33:ee:41:5b:67:2f:f9:af:aa:14:a1:f8:2b:94:d0:
9a:b2:a6:f9:68:8c:1f:2b:f3:d6:a6:44:44:00:ec:
47:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:7F:33:FA:CD:7F:CD:A8:A0:7C:B6:C5:82:E9:27:CD:B1:56:DB:E8
X509v3 Authority Key Identifier:
keyid:D0:02:FB:E9:F0:A4:13:60:3E:DE:FB:73:3A:53:1F:2E:2C:0E:9C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AL76fCkE2A-3vtzOlMfLiwOnAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:e2:a2:88:88:63:94:91:2b:0c:b0:9a:00:b6:ab:d0:e8:4b:
d2:c4:62:7f:0a:3f:65:6c:c3:31:4c:42:9f:8a:fb:8d:7a:08:
50:a5:4a:0e:a5:57:fc:57:91:81:17:80:7a:c7:f6:9f:f2:a3:
17:a2:35:42:78:22:f4:28:a1:4b:f5:40:cd:35:bd:af:c8:fe:
a5:ab:a6:f7:99:34:69:cb:e3:2a:18:0c:12:7c:4a:2b:dd:1b:
0b:a7:b9:bb:1e:b7:ee:46:ca:52:08:ed:48:aa:23:6f:a2:5a:
64:4f:78:ee:df:14:34:20:d7:5e:6e:1c:c9:8c:1b:be:8c:cb:
0b:95:64:a5:69:4b:0c:b8:28:84:84:44:8d:a9:3e:45:2c:49:
eb:cf:51:d4:09:c0:84:01:12:ff:a9:58:15:43:72:b2:3b:89:
d8:d2:c5:a2:aa:10:67:eb:ea:d7:c1:18:6e:93:10:ec:13:d5:
99:15:47:f4:11:50:1f:c1:23:56:2a:c5:42:26:81:d9:29:e9:
29:44:4c:5a:d0:85:be:48:ae:d3:a8:fd:9a:88:3e:8d:1b:87:
88:1e:c9:3f:54:bf:1b:68:8d:4c:40:5e:18:97:21:fb:e5:c8:
b9:0f:4c:6d:97:f9:30:44:f5:11:c6:9d:73:97:a0:ac:3f:03:
cf:38:37:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SEYH4T2Rvjtuc6wYG5IUFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMDJmYmU5ZjBhNDEzNjAzZWRlZmI3MzNhNTMxZjJlMmMw
ZTljMDYwHhcNMjYwNzI0MDMwMDQ4WhcNMjYwNzI1MDMwMDQ4WjAzMTEwLwYDVQQD
Eyg2NjdmMzNmYWNkN2ZjZGE4YTA3Y2I2YzU4MmU5MjdjZGIxNTZkYmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11hw7pypSsWgNxCEfjqNwdepVdfi
ogUF+Sjmsc9V34dybBIUz5orEHafpnbyFuzpvfsTc1QuEUs3TJtsW8PSRpOjuebX
mlEMpj6mUCRBL7+isNjy1CdczsNSkdGZPRHdaCTa2z/HLP4yqxx2zUQf/yag4cfL
5eu2orAwWpjZxTYQNNQ8zejOwv7fYFM97XLw6XwWX8viF6Gg5p+9TcDInnMqen5+
ooJgZMZUXJKcyS3DqWMXihXh1xACkHdvzfT213mn8YDRdc8Obe6gBMdSLebyu3Iu
jqD6LrRupEPX7pUz7kFbZy/5r6oUofgrlNCasqb5aIwfK/PWpkREAOxHvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGZ/M/rNf82ooHy2xYLpJ82xVtvoMB8GA1UdIwQY
MBaAFNAC++nwpBNgPt77czpTHy4sDpwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEFMNzZmQ2tFMkEtM3Z0ek9sTWZMaXdPbkFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS85YmFmYjEtMGM0Mi00MjViLWFhMjkt
MTljMDQ1YzZhMTRmLzEvMEFMNzZmQ2tFMkEtM3Z0ek9sTWZMaXdPbkFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS85YmFmYjEtMGM0Mi00MjViLWFhMjktMTljMDQ1YzZhMTRm
LzEvMEFMNzZmQ2tFMkEtM3Z0ek9sTWZMaXdPbkFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhuKiiIhj
lJErDLCaALar0OhL0sRifwo/ZWzDMUxCn4r7jXoIUKVKDqVX/FeRgReAesf2n/Kj
F6I1Qngi9CihS/VAzTW9r8j+paum95k0acvjKhgMEnxKK90bC6e5ux637kbKUgjt
SKojb6JaZE947t8UNCDXXm4cyYwbvozLC5VkpWlLDLgohIREjak+RSxJ689R1AnA
hAES/6lYFUNysjuJ2NLFoqoQZ+vq18EYbpMQ7BPVmRVH9BFQH8EjVirFQiaB2Snp
KURMWtCFvkiu06j9mog+jRuHiB7JP1S/G2iNTEBeGJch++XIuQ9MbZf5MET1Ecad
c5egrD8Dzzg3wg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:22:50 2026 by rpki-client