Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/ddded3-5491-4964-8c37-ec9d72b35c29/1/AL4NnjFC6A88j5R7AAX7ynoGnL0.mft
File: AL4NnjFC6A88j5R7AAX7ynoGnL0.mft (raw, json)
Hash identifier: nQz9Ih5YkhwrX1Rb1qEdmZF9OfU/zcwJCSAaq1DuVBs=
Subject key identifier: 89:E7:16:5F:18:04:CF:0E:9D:F5:BA:C1:5E:D6:A9:C2:7E:7C:68:BC
Authority key identifier: 00:BE:0D:9E:31:42:E8:0F:3C:8F:94:7B:00:05:FB:CA:7A:06:9C:BD
Certificate issuer: /CN=00be0d9e3142e80f3c8f947b0005fbca7a069cbd
Certificate serial: 01A0CEC8978F51D00D9FE180215969D5C301
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AL4NnjFC6A88j5R7AAX7ynoGnL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ddded3-5491-4964-8c37-ec9d72b35c29/1/AL4NnjFC6A88j5R7AAX7ynoGnL0.mft
Manifest number: 78
Signing time: Wed 23 Sep 2026 15:00:47 +0000
Manifest this update: Wed 23 Sep 2026 15:00:47 +0000
Manifest next update: Thu 24 Sep 2026 15:00:47 +0000
Files and hashes: 1: AL4NnjFC6A88j5R7AAX7ynoGnL0.crl (hash: gOgxWwUKJWYE8iWl5hdMMDjWIBjTU7EJzGThgyg9YXo=)
2: rxx610TEM9K7g4k8uEuD_x3BY2g.roa (hash: hWWk8EwyqjcDzUE/xZKAlOyEjA5gxVP+zqApjAKcJHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ddded3-5491-4964-8c37-ec9d72b35c29/1/AL4NnjFC6A88j5R7AAX7ynoGnL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/ddded3-5491-4964-8c37-ec9d72b35c29/1/AL4NnjFC6A88j5R7AAX7ynoGnL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AL4NnjFC6A88j5R7AAX7ynoGnL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:97:8f:51:d0:0d:9f:e1:80:21:59:69:d5:c3:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00be0d9e3142e80f3c8f947b0005fbca7a069cbd
Validity
Not Before: Sep 23 15:00:47 2026 GMT
Not After : Sep 24 15:00:47 2026 GMT
Subject: CN=89e7165f1804cf0e9df5bac15ed6a9c27e7c68bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:97:b5:51:51:9b:c6:df:cc:b3:b5:57:4e:af:
67:ba:39:35:2d:11:ca:c6:b8:b7:9f:ef:a5:58:bd:
43:6c:17:d3:1b:4a:f9:28:0f:e5:62:e8:60:72:3d:
5d:45:c3:c0:bf:35:8a:76:40:3c:4f:ab:e5:b3:d2:
31:c4:16:fa:61:71:c4:02:bb:bc:7f:ca:6c:df:50:
46:59:47:da:66:fe:24:80:f9:46:a0:c5:d6:ef:4e:
c2:88:43:77:72:b8:f5:ff:a2:08:4e:0d:9f:8e:63:
c0:cf:57:95:4a:3e:58:b1:66:1d:ee:e4:76:b0:7a:
b5:da:ce:8a:e8:a2:66:5e:c1:4b:14:10:3b:8a:21:
bf:aa:3f:8a:4e:cc:c4:e4:85:c0:d9:d0:48:9c:e1:
18:50:b6:2d:ef:a0:68:56:89:6c:c5:23:f8:f8:d6:
70:47:dd:61:f8:8f:7f:bb:6c:4b:eb:02:f3:b9:d6:
19:87:6a:84:75:a7:80:ae:e5:df:54:7d:62:74:12:
16:31:ee:f1:eb:32:a0:c1:b4:42:05:1e:41:5e:fa:
b6:1f:78:e0:4d:9b:09:f8:c7:64:6b:f4:2f:46:4f:
de:c3:50:e8:24:a3:5a:8d:05:d2:0d:89:cf:51:3a:
29:e7:9a:50:75:ef:0c:73:19:a7:7a:90:59:32:1f:
bb:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E7:16:5F:18:04:CF:0E:9D:F5:BA:C1:5E:D6:A9:C2:7E:7C:68:BC
X509v3 Authority Key Identifier:
keyid:00:BE:0D:9E:31:42:E8:0F:3C:8F:94:7B:00:05:FB:CA:7A:06:9C:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AL4NnjFC6A88j5R7AAX7ynoGnL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ddded3-5491-4964-8c37-ec9d72b35c29/1/AL4NnjFC6A88j5R7AAX7ynoGnL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ddded3-5491-4964-8c37-ec9d72b35c29/1/AL4NnjFC6A88j5R7AAX7ynoGnL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:14:b6:3c:15:99:66:05:30:12:53:54:85:3a:f1:ec:a1:2c:
6c:1b:b5:7a:ca:5c:22:f7:fc:fd:77:a4:88:24:d9:91:a6:1f:
dc:3a:11:43:c7:dc:7c:a4:24:c5:9a:d0:ca:29:0d:89:b7:39:
f7:4c:27:bc:51:93:46:28:60:0e:75:b4:45:67:34:3b:f2:89:
e1:7c:3d:c0:b6:1b:ad:b3:81:8c:3e:e0:e4:4f:af:33:67:b9:
4e:7c:85:9e:ca:9d:8b:ed:b2:c7:a9:d2:8d:0e:6a:49:95:f4:
53:2e:47:5c:c7:69:05:4e:7e:2f:d7:04:3b:c4:83:16:2e:82:
50:ac:73:a3:83:7e:f5:b3:90:be:c5:43:73:aa:2c:7f:3a:c4:
40:09:22:a8:49:72:5f:51:a7:12:b6:50:7d:5c:56:2b:35:78:
3a:34:b2:8b:36:07:dc:a0:48:a1:06:35:5e:18:fb:d0:02:5d:
a9:5e:40:ad:d7:22:fd:73:c3:76:c6:b4:8b:07:31:3f:f4:fa:
93:fe:75:36:7d:1a:84:2d:75:89:6e:9e:9e:8a:94:ca:72:5c:
1c:d6:69:73:d0:f2:0e:c3:dd:8f:ec:80:3f:f3:6f:4b:49:07:
5d:2d:9f:3d:7f:3c:67:b4:9d:23:36:08:a7:ba:e8:6f:8e:44:
97:a6:c0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:08:22 2026 by rpki-client