Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/3bafd8-c34e-4890-b4cf-73db0f2841c9/1/AlO5GdddwgTZyjjbeyihdINLOz0.mft
File: AlO5GdddwgTZyjjbeyihdINLOz0.mft (raw, json)
Hash identifier: 6HddbLcDgyZxMXI873NJLPH0xD0CjiMYhO4n7WzSRGA=
Subject key identifier: 94:E0:10:06:3D:91:85:74:72:53:96:06:CA:15:56:EB:D0:69:53:12
Authority key identifier: 02:53:B9:19:D7:5D:C2:04:D9:CA:38:DB:7B:28:A1:74:83:4B:3B:3D
Certificate issuer: /CN=0253b919d75dc204d9ca38db7b28a174834b3b3d
Certificate serial: 019F9022D5065B294478E95E877C296499EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AlO5GdddwgTZyjjbeyihdINLOz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/3bafd8-c34e-4890-b4cf-73db0f2841c9/1/AlO5GdddwgTZyjjbeyihdINLOz0.mft
Manifest number: 09E7
Signing time: Thu 23 Jul 2026 18:00:29 +0000
Manifest this update: Thu 23 Jul 2026 18:00:29 +0000
Manifest next update: Fri 24 Jul 2026 18:00:29 +0000
Files and hashes: 1: AlO5GdddwgTZyjjbeyihdINLOz0.crl (hash: JOnZQ9hDFrK1LwtaaLW54lfrGAvrd1EXKQdHXxlHLf8=)
2: PMWWklW51anXq7aRQXkdao86Jek.roa (hash: +f085vkz6griqp0/YZpf7yExFFEfbfc0Y85L8JbYisc=)
3: h3tLHRWk_OmFsZTg_jd5-mdYTds.roa (hash: xHXqRtgjeuL+vMeMb7Pl+kHYtqxysXcomaAK0drp85s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/3bafd8-c34e-4890-b4cf-73db0f2841c9/1/AlO5GdddwgTZyjjbeyihdINLOz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/3bafd8-c34e-4890-b4cf-73db0f2841c9/1/AlO5GdddwgTZyjjbeyihdINLOz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AlO5GdddwgTZyjjbeyihdINLOz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:d5:06:5b:29:44:78:e9:5e:87:7c:29:64:99:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0253b919d75dc204d9ca38db7b28a174834b3b3d
Validity
Not Before: Jul 23 18:00:29 2026 GMT
Not After : Jul 24 18:00:29 2026 GMT
Subject: CN=94e010063d91857472539606ca1556ebd0695312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c0:41:eb:36:6b:cc:5b:5e:da:6c:5c:52:3a:
e7:cc:a3:a4:0f:42:bc:05:e6:fc:88:73:a1:6d:38:
37:5a:13:ed:bf:b3:a8:99:b1:ad:c9:c9:73:60:c8:
df:a0:f5:e1:19:71:9d:74:f0:2c:62:7c:3e:53:c1:
83:ea:6f:79:1f:4b:dd:56:ab:d1:82:5d:96:f7:68:
34:3a:5a:08:1d:97:d9:ce:18:34:2b:2c:97:a0:4a:
2c:47:35:95:d7:bf:30:0a:ff:26:74:dc:76:3f:b9:
e2:53:4d:d6:4f:a9:0a:33:b0:82:67:65:7e:95:40:
83:8d:26:19:67:31:a0:41:a2:2f:f5:3e:14:18:4d:
ae:9d:61:22:01:2c:57:c4:63:b1:0d:3e:a5:ba:ae:
9e:dc:02:63:bf:35:58:58:80:ff:bd:78:b3:66:9d:
55:34:ac:6c:5c:09:fb:4b:eb:80:e5:60:44:57:06:
63:99:ed:e6:f5:5f:0f:0c:56:cc:fe:8e:77:1b:91:
a4:ab:dc:7b:c7:42:85:8e:7c:50:1f:68:d6:3a:25:
2b:9a:28:da:83:c9:76:ac:35:2b:19:37:1a:ff:d5:
53:bd:c3:5c:a8:d2:18:12:34:ff:37:08:d9:85:50:
58:ba:61:3e:5b:81:b2:f8:e0:36:3e:aa:de:c3:2c:
25:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E0:10:06:3D:91:85:74:72:53:96:06:CA:15:56:EB:D0:69:53:12
X509v3 Authority Key Identifier:
keyid:02:53:B9:19:D7:5D:C2:04:D9:CA:38:DB:7B:28:A1:74:83:4B:3B:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlO5GdddwgTZyjjbeyihdINLOz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/3bafd8-c34e-4890-b4cf-73db0f2841c9/1/AlO5GdddwgTZyjjbeyihdINLOz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/3bafd8-c34e-4890-b4cf-73db0f2841c9/1/AlO5GdddwgTZyjjbeyihdINLOz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:7a:a8:8c:26:b9:c4:3d:f3:94:87:cf:a4:e6:ca:88:7c:f8:
19:ad:11:78:68:63:7b:03:d0:7e:4a:87:fc:01:38:03:a0:2a:
88:76:d2:a7:9e:75:3d:aa:88:98:c5:8d:5f:d7:99:34:06:e0:
6a:9b:cd:f8:8a:0e:f9:1f:da:35:0c:7d:11:9f:27:c7:45:9c:
43:0e:5a:bc:3d:cf:58:2e:47:38:dc:0f:e2:b4:22:eb:71:c6:
a2:db:4a:17:37:ed:18:69:9d:12:67:34:3e:be:b2:f5:f6:10:
d8:2f:c7:93:e3:a0:aa:55:47:aa:53:c0:e1:fb:37:ef:cb:b6:
ce:7a:a0:61:82:f6:70:48:26:99:a7:06:2f:c3:32:e7:20:15:
ab:af:07:a0:2e:f3:26:58:c7:24:d6:7d:db:b3:93:34:3c:b0:
61:29:f0:56:f3:e4:6c:44:0b:e5:fe:b8:2c:ba:bf:5b:3f:3f:
89:ea:50:b4:ca:bb:fa:42:54:c8:f5:6f:1f:c2:1f:7d:48:15:
84:f8:7b:75:66:63:ea:94:fc:ec:c6:1d:12:40:d7:07:93:d9:
8f:42:cd:75:9b:fe:35:53:4d:92:d6:e0:d9:e8:d8:7c:42:35:
9c:0c:c6:20:d6:b0:ca:1e:8b:ab:f6:57:da:8a:44:9f:4d:fc:
e4:4b:43:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:41:47 2026 by rpki-client