Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft
File: ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft (raw, json)
Hash identifier: HvCK8giWB3ngR6iq7Bx2HrW+h3KSoNjp2tTqJM00n7Q=
Subject key identifier: F0:D3:8F:B3:CA:C2:60:13:15:DE:FA:CC:36:89:29:90:00:20:09:31
Authority key identifier: 00:B4:FE:43:94:E3:3F:C2:2A:C5:CB:B5:45:F9:CD:10:94:08:75:67
Certificate issuer: /CN=00b4fe4394e33fc22ac5cbb545f9cd1094087567
Certificate serial: 019E1D909EBB808D0B8FFBBF09E45CC9C755
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft
Manifest number: 0A4C
Signing time: Tue 12 May 2026 19:01:17 +0000
Manifest this update: Tue 12 May 2026 19:01:17 +0000
Manifest next update: Wed 13 May 2026 19:01:17 +0000
Files and hashes: 1: ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.crl (hash: 7zPVke9w0TxRgweE/4w5oQF1iMBkddXd1zZx2bI+83c=)
2: tG0LVlaf72tjaFcLZI694UkMyBM.roa (hash: TqiU8MWJoU3H6JgdgSsoTmNJ+nJJZVq6ZzlSY2+KtJ8=)
3: xDM12CcGD2Bni6l8L8cHWegda-o.asa (hash: KFGZ+nd44n5SlA7OxGk3cEFVuk7r49rEOqIITKnjxxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:9e:bb:80:8d:0b:8f:fb:bf:09:e4:5c:c9:c7:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00b4fe4394e33fc22ac5cbb545f9cd1094087567
Validity
Not Before: May 12 19:01:17 2026 GMT
Not After : May 13 19:01:17 2026 GMT
Subject: CN=f0d38fb3cac2601315defacc3689299000200931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8c:49:e3:56:95:c4:de:ea:dc:bf:28:0b:01:
7d:0b:98:5f:55:c0:ea:61:cb:ad:8d:3c:ec:26:af:
9f:49:27:78:34:c5:1f:13:5f:7e:7f:92:9a:bf:7b:
29:d8:28:45:9b:35:82:26:ec:1a:d0:d7:ec:07:f7:
f3:03:46:8a:81:b2:6c:5c:62:3d:a9:dc:4e:14:3d:
e3:02:3e:a6:b9:7a:31:fe:16:5c:19:c0:cd:be:24:
39:0b:a4:89:53:04:97:ae:0b:a3:a5:bf:37:0e:42:
ce:20:0d:b4:8f:74:7c:ff:28:1c:dc:d8:ad:c6:69:
bd:9e:36:38:5a:30:4c:fa:c3:55:bb:9c:5a:10:28:
3e:eb:0f:8b:d0:ed:6a:d5:55:b0:f1:c5:16:84:e6:
aa:da:02:67:36:2c:d6:92:00:b4:e1:dc:43:e2:12:
cb:c8:84:ca:76:9f:44:de:84:2d:13:1c:bb:57:99:
0b:a9:6d:a4:f6:15:67:34:a8:02:50:0c:4b:c2:df:
5a:8f:48:24:11:c0:a6:85:0d:50:ca:b9:c8:c2:bb:
f7:ee:a5:db:e1:e6:88:c8:ba:b4:c5:8e:15:e8:d6:
3a:84:f0:03:d9:4f:db:a4:6f:6f:b9:50:b9:7b:7d:
6f:f2:25:b4:cd:99:8d:8c:c5:dc:82:40:14:a9:e3:
d8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D3:8F:B3:CA:C2:60:13:15:DE:FA:CC:36:89:29:90:00:20:09:31
X509v3 Authority Key Identifier:
keyid:00:B4:FE:43:94:E3:3F:C2:2A:C5:CB:B5:45:F9:CD:10:94:08:75:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:c6:01:43:70:84:58:c1:1b:14:fc:e1:4e:c0:97:70:c8:aa:
8f:14:39:96:9d:2c:d2:fa:2b:6c:c6:92:5f:62:42:6b:1e:46:
da:3a:6e:8b:06:c5:a2:ae:1b:e7:12:ee:f5:07:1e:42:f8:11:
6d:df:3e:13:1a:82:68:08:e7:f2:36:7e:48:e9:22:1d:34:e4:
e9:ec:08:b3:3c:0c:1c:21:23:b4:f2:c6:b3:b5:c7:a6:8c:78:
fb:cd:37:f1:07:a5:b3:c7:49:d1:fb:9c:4c:89:0f:43:08:8e:
58:00:54:ca:ec:bd:39:2b:ed:a2:c6:06:16:e7:5f:ca:eb:e0:
a9:20:0d:db:67:76:d0:d2:90:d4:9a:04:9f:43:93:59:ed:8d:
3f:78:9f:9f:95:e7:c8:41:3e:de:cb:17:9f:d6:52:00:df:57:
ac:ae:dd:12:f3:cc:2d:9d:c5:99:24:03:2a:53:a1:88:0f:68:
30:e9:0c:d8:c5:e5:ad:ea:f4:12:9c:d3:82:43:86:67:b0:91:
95:99:ec:07:70:68:8a:99:d8:8b:5e:5f:18:41:23:2f:5c:26:
b3:dd:ec:94:81:98:37:fe:8f:df:9b:39:ec:09:66:03:d6:7d:
5f:31:f0:76:a7:7f:d2:ac:46:a5:22:97:f3:a3:35:1c:86:75:
1b:bf:2d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:03 2026 by rpki-client