Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/3bafd8-c34e-4890-b4cf-73db0f2841c9/1/AlO5GdddwgTZyjjbeyihdINLOz0.mft
File: AlO5GdddwgTZyjjbeyihdINLOz0.mft (raw, json)
Hash identifier: sV4lfWWOnAIv3TRW+HLcGBNsFHy6lDrhqS6NfWptw10=
Subject key identifier: C0:B1:A5:4E:F2:7F:69:21:64:FC:6C:70:E0:D6:F3:BF:79:34:94:A6
Authority key identifier: 02:53:B9:19:D7:5D:C2:04:D9:CA:38:DB:7B:28:A1:74:83:4B:3B:3D
Certificate issuer: /CN=0253b919d75dc204d9ca38db7b28a174834b3b3d
Certificate serial: 01A1DF14F7561EA06F194A7DF2C31232D767
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AlO5GdddwgTZyjjbeyihdINLOz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/3bafd8-c34e-4890-b4cf-73db0f2841c9/1/AlO5GdddwgTZyjjbeyihdINLOz0.mft
Manifest number: 0B19
Signing time: Sun 15 Nov 2026 12:00:55 +0000
Manifest this update: Sun 15 Nov 2026 12:00:55 +0000
Manifest next update: Mon 16 Nov 2026 12:00:55 +0000
Files and hashes: 1: AlO5GdddwgTZyjjbeyihdINLOz0.crl (hash: XYhbEAp8iA/av+pjoInkm4L2m5uep6NET5CKRC/VTAw=)
2: PMWWklW51anXq7aRQXkdao86Jek.roa (hash: +f085vkz6griqp0/YZpf7yExFFEfbfc0Y85L8JbYisc=)
3: h3tLHRWk_OmFsZTg_jd5-mdYTds.roa (hash: xHXqRtgjeuL+vMeMb7Pl+kHYtqxysXcomaAK0drp85s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/3bafd8-c34e-4890-b4cf-73db0f2841c9/1/AlO5GdddwgTZyjjbeyihdINLOz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/3bafd8-c34e-4890-b4cf-73db0f2841c9/1/AlO5GdddwgTZyjjbeyihdINLOz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AlO5GdddwgTZyjjbeyihdINLOz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:14:f7:56:1e:a0:6f:19:4a:7d:f2:c3:12:32:d7:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0253b919d75dc204d9ca38db7b28a174834b3b3d
Validity
Not Before: Nov 15 12:00:55 2026 GMT
Not After : Nov 16 12:00:55 2026 GMT
Subject: CN=c0b1a54ef27f692164fc6c70e0d6f3bf793494a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ed:4a:a8:bc:25:71:f2:1b:19:5b:11:88:b3:
ad:34:3c:57:ec:55:f7:8b:03:67:a0:9f:06:3e:ff:
2a:4e:08:bc:1a:a1:41:45:80:e6:fb:24:12:f2:93:
1f:44:cf:21:23:98:46:d3:3d:68:41:02:41:fd:39:
7c:bf:db:84:86:95:ec:9b:c9:4e:cc:ae:5b:00:6b:
9d:69:86:f5:4c:22:2f:78:68:77:c3:41:36:37:50:
01:b4:6b:c9:d9:0e:45:d9:57:a4:01:d0:ee:b6:1b:
cc:49:7c:e1:59:d0:63:b1:c4:2a:f7:97:0a:cf:b5:
4c:f7:91:2c:aa:49:27:7e:a8:2b:a5:1f:b8:a2:bf:
1c:c5:74:14:59:73:02:1a:61:33:0a:2d:48:6b:c4:
db:1e:11:e5:46:dc:6e:ab:37:ec:34:9d:50:23:f9:
64:e0:cc:f2:b1:5e:d1:2c:cd:a2:c3:11:50:7d:c9:
17:10:7a:aa:d4:49:f4:5b:8e:16:3a:6d:82:44:40:
a1:6d:3a:f6:72:7f:58:c8:5b:8b:72:63:92:c8:d3:
8b:b2:0a:1b:bd:26:19:92:10:80:7a:02:0c:fd:ab:
fb:0b:79:1e:4d:fc:83:4e:ce:80:52:f7:6c:a8:69:
13:6d:76:30:a2:e2:b1:8a:86:ea:69:84:8b:d3:8f:
0b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B1:A5:4E:F2:7F:69:21:64:FC:6C:70:E0:D6:F3:BF:79:34:94:A6
X509v3 Authority Key Identifier:
keyid:02:53:B9:19:D7:5D:C2:04:D9:CA:38:DB:7B:28:A1:74:83:4B:3B:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlO5GdddwgTZyjjbeyihdINLOz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/3bafd8-c34e-4890-b4cf-73db0f2841c9/1/AlO5GdddwgTZyjjbeyihdINLOz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/3bafd8-c34e-4890-b4cf-73db0f2841c9/1/AlO5GdddwgTZyjjbeyihdINLOz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:fd:a0:64:06:25:fa:2f:42:96:bb:84:e8:71:86:6b:90:9d:
0a:d2:e5:8e:f4:65:64:42:cb:20:c1:cb:cc:23:53:9c:3a:63:
df:fc:1b:e6:4a:4a:af:6b:cd:21:27:89:ec:2f:f4:b6:06:3e:
b1:55:22:0a:e6:5b:30:87:87:69:22:b2:9b:3e:79:d2:0c:7e:
bd:6c:5a:ba:7a:55:63:12:95:f4:75:af:1d:e4:d0:82:10:08:
e8:0b:ca:f9:6c:62:ec:69:49:d0:8c:f2:fb:72:cc:fb:8b:a9:
5a:70:a6:b2:be:04:56:08:03:2c:c2:9c:1a:56:50:b3:2e:62:
53:b8:ca:e4:2f:1a:b6:ea:f5:55:3d:b5:44:9b:8c:07:00:d6:
0a:5f:f3:d6:de:2e:05:85:bb:d5:1c:ba:0e:af:ec:fd:cf:9b:
09:12:5e:e9:c1:98:b3:56:72:3c:c1:8c:26:5a:5c:dd:05:2b:
39:56:ef:1b:96:95:a3:46:8c:5c:87:8a:c9:54:04:43:3e:19:
d6:6a:e9:4e:c7:35:0b:25:31:32:e5:65:28:65:db:b1:03:10:
79:da:17:1e:e8:a0:21:23:0d:40:84:8d:0d:33:d4:c5:4b:34:
14:1c:da:e9:84:91:29:d0:3d:63:b0:cf:99:49:cd:fc:57:a7:
15:17:bc:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:22:59 2026 by rpki-client