Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/3bafd8-c34e-4890-b4cf-73db0f2841c9/1/AlO5GdddwgTZyjjbeyihdINLOz0.mft
File: AlO5GdddwgTZyjjbeyihdINLOz0.mft (raw, json)
Hash identifier: wgFU8QndDz3VEMDEmUcGUrAo+/hbhlwBLiMnFuPimxo=
Subject key identifier: A2:A8:A5:0B:3C:DD:B5:BB:A9:9C:D2:AD:03:3D:59:58:6A:9D:49:E6
Authority key identifier: 02:53:B9:19:D7:5D:C2:04:D9:CA:38:DB:7B:28:A1:74:83:4B:3B:3D
Certificate issuer: /CN=0253b919d75dc204d9ca38db7b28a174834b3b3d
Certificate serial: 01A0D4944DCCB144ACC283938FA8269C96F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AlO5GdddwgTZyjjbeyihdINLOz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/3bafd8-c34e-4890-b4cf-73db0f2841c9/1/AlO5GdddwgTZyjjbeyihdINLOz0.mft
Manifest number: 0A8F
Signing time: Thu 24 Sep 2026 18:01:23 +0000
Manifest this update: Thu 24 Sep 2026 18:01:23 +0000
Manifest next update: Fri 25 Sep 2026 18:01:23 +0000
Files and hashes: 1: AlO5GdddwgTZyjjbeyihdINLOz0.crl (hash: sYuIp2hfUGup3NDbywVzMR5Ax3E9rT8kObEnMVERlWg=)
2: PMWWklW51anXq7aRQXkdao86Jek.roa (hash: +f085vkz6griqp0/YZpf7yExFFEfbfc0Y85L8JbYisc=)
3: h3tLHRWk_OmFsZTg_jd5-mdYTds.roa (hash: xHXqRtgjeuL+vMeMb7Pl+kHYtqxysXcomaAK0drp85s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/3bafd8-c34e-4890-b4cf-73db0f2841c9/1/AlO5GdddwgTZyjjbeyihdINLOz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/3bafd8-c34e-4890-b4cf-73db0f2841c9/1/AlO5GdddwgTZyjjbeyihdINLOz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AlO5GdddwgTZyjjbeyihdINLOz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 18:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:94:4d:cc:b1:44:ac:c2:83:93:8f:a8:26:9c:96:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0253b919d75dc204d9ca38db7b28a174834b3b3d
Validity
Not Before: Sep 24 18:01:23 2026 GMT
Not After : Sep 25 18:01:23 2026 GMT
Subject: CN=a2a8a50b3cddb5bba99cd2ad033d59586a9d49e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fc:e7:27:e1:04:af:ea:97:91:9e:dd:9a:e8:
00:bc:b2:ca:1b:6e:3c:63:59:ea:cb:e1:e8:97:42:
7d:47:35:f4:e7:74:db:c5:90:9b:23:11:b3:a2:50:
8f:69:ab:6c:75:ab:c7:73:bb:70:f3:bb:4d:ce:ca:
c3:c5:8c:34:bd:07:ba:f6:58:59:a7:92:7d:d1:c3:
76:0a:9d:c4:94:4d:7f:34:13:4d:0a:49:6d:fd:5f:
4a:c1:93:99:fb:55:07:37:0b:b8:59:b3:1f:80:c9:
b7:57:96:ab:04:3e:f7:1d:a0:a7:d9:67:ea:a5:3a:
de:c4:d6:e5:36:b7:ff:de:bf:87:e3:04:73:6f:fd:
62:f1:b3:c5:08:21:82:1c:3f:0b:ac:fd:8f:16:fc:
42:cc:8d:d4:10:21:4d:e3:83:82:02:7e:e5:cc:72:
4b:d8:a3:52:e1:82:88:d2:21:7f:d6:3b:49:9e:d0:
09:61:ba:ef:6e:82:41:fb:73:b4:4d:99:5d:9e:87:
44:be:d5:13:14:d7:90:28:db:47:d4:70:37:64:e6:
ad:bc:de:b2:60:13:1d:29:ee:4a:a6:af:43:b6:d4:
e4:e0:ea:a1:cb:d1:50:68:21:35:70:98:b8:fc:4d:
26:e9:2a:40:bf:aa:5d:95:ae:89:87:05:3c:ee:ec:
cd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A8:A5:0B:3C:DD:B5:BB:A9:9C:D2:AD:03:3D:59:58:6A:9D:49:E6
X509v3 Authority Key Identifier:
keyid:02:53:B9:19:D7:5D:C2:04:D9:CA:38:DB:7B:28:A1:74:83:4B:3B:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlO5GdddwgTZyjjbeyihdINLOz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/3bafd8-c34e-4890-b4cf-73db0f2841c9/1/AlO5GdddwgTZyjjbeyihdINLOz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/3bafd8-c34e-4890-b4cf-73db0f2841c9/1/AlO5GdddwgTZyjjbeyihdINLOz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:d8:44:8c:42:02:46:c1:b7:3b:9f:78:cc:75:c9:58:89:bc:
59:17:55:21:9c:6c:78:9a:40:10:96:da:93:d7:03:83:87:5f:
69:98:ce:43:61:b6:1b:15:bf:0d:5b:25:86:01:e2:83:a1:49:
e4:91:21:3f:de:e0:bc:e4:be:ec:3a:92:70:24:88:a4:5b:72:
be:03:21:b1:65:e0:0e:56:f9:54:b5:20:e9:db:68:32:34:0c:
10:0b:e0:38:7a:51:62:59:dd:b4:64:86:0b:60:8c:2e:68:62:
6e:b6:30:b5:dd:2a:e1:46:40:5a:ca:0e:bd:eb:4b:31:47:24:
fe:a4:47:4f:2b:e9:11:84:c1:3e:6b:1a:bd:cc:67:f8:3d:13:
fa:8c:1f:80:8e:22:56:79:88:67:08:0d:32:ee:55:b9:96:1c:
ca:bd:69:8b:d2:71:7f:bf:db:37:43:43:cc:35:28:a9:fa:6a:
82:6b:d5:ac:8c:2e:75:92:21:a6:4e:a9:da:f2:0c:cb:ca:43:
3f:5e:df:69:71:ca:ab:f2:0c:00:2b:51:be:61:23:fe:2a:31:
64:dc:54:9a:83:6a:d6:62:47:1e:1e:9e:49:11:48:e0:88:03:
d2:84:f8:e1:f3:b0:1b:f9:15:6a:53:56:d1:fd:c4:85:50:2b:
70:a1:11:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:56:39 2026 by rpki-client