Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft
File: ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft (raw, json)
Hash identifier: AN7tqgg5r3ldnBmiP/1a7pSJM2agSt2FLzyBy34crkU=
Subject key identifier: 37:C1:43:AE:7F:59:2D:08:FE:3A:48:2C:96:3B:0E:FA:56:3E:54:DC
Authority key identifier: 00:B4:FE:43:94:E3:3F:C2:2A:C5:CB:B5:45:F9:CD:10:94:08:75:67
Certificate issuer: /CN=00b4fe4394e33fc22ac5cbb545f9cd1094087567
Certificate serial: 01A0F3E8216FA8F618095CEFE3CC01B317A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft
Manifest number: 0BC5
Signing time: Wed 30 Sep 2026 20:01:11 +0000
Manifest this update: Wed 30 Sep 2026 20:01:11 +0000
Manifest next update: Thu 01 Oct 2026 20:01:11 +0000
Files and hashes: 1: 5THBFYYQN6AvVFDDBOynen_kEN4.asa (hash: uv8hf3sG2Eq3TvJAuSS8E9jhZLBLRwtSX1fGNAlX7Ls=)
2: ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.crl (hash: 1RQBVOS6C5DfST7skPj/hNSXXIBpkOJPKCypj6u5yX4=)
3: tG0LVlaf72tjaFcLZI694UkMyBM.roa (hash: TqiU8MWJoU3H6JgdgSsoTmNJ+nJJZVq6ZzlSY2+KtJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:e8:21:6f:a8:f6:18:09:5c:ef:e3:cc:01:b3:17:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00b4fe4394e33fc22ac5cbb545f9cd1094087567
Validity
Not Before: Sep 30 20:01:11 2026 GMT
Not After : Oct 1 20:01:11 2026 GMT
Subject: CN=37c143ae7f592d08fe3a482c963b0efa563e54dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5d:71:78:cb:61:21:8b:63:5a:54:87:2e:21:
90:55:42:55:de:c3:14:5a:0c:76:76:35:68:cc:90:
56:c4:82:8c:13:91:7b:e9:ff:38:3e:a5:65:ae:09:
31:93:0d:6c:4d:ea:a8:c4:e1:da:92:dd:8e:6c:84:
ac:7e:fe:bf:12:ba:01:b6:a8:76:83:b4:ba:57:6c:
6f:11:42:94:2f:e4:be:95:c3:c7:72:b0:36:92:7a:
9e:56:08:da:92:0f:88:99:7c:54:79:bf:78:cf:b9:
c0:ad:f6:f3:f3:3d:0d:a4:8d:35:b6:0b:7f:8c:ff:
8e:3e:80:fa:61:a2:2f:54:21:0e:48:f8:db:d9:10:
11:57:74:bb:35:c9:65:e9:33:35:bd:fe:d8:ad:fe:
a0:dd:85:c2:c6:87:e4:ef:bb:42:0b:43:73:9d:ac:
cf:f0:26:49:53:aa:6e:88:b2:95:c1:59:1e:c0:1a:
37:86:ba:a6:fd:f2:47:35:41:98:24:e3:81:9e:a0:
63:db:e2:d3:40:4f:bf:89:af:35:8c:c8:6c:2b:0a:
a4:ca:6a:a6:9a:74:f8:9e:2b:92:7f:86:75:c8:a3:
98:22:44:0c:11:ca:1f:55:83:f9:05:d1:10:38:1f:
d4:0a:38:55:03:f0:30:11:37:f0:71:06:41:68:4b:
03:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C1:43:AE:7F:59:2D:08:FE:3A:48:2C:96:3B:0E:FA:56:3E:54:DC
X509v3 Authority Key Identifier:
keyid:00:B4:FE:43:94:E3:3F:C2:2A:C5:CB:B5:45:F9:CD:10:94:08:75:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:5b:66:fe:9e:1e:71:16:57:78:84:5d:a8:99:95:46:c7:24:
fa:bc:b2:e4:d4:b9:0f:79:ac:54:51:5b:0b:1a:d6:32:1e:7b:
9d:bb:d7:bc:d4:1f:5d:6b:53:c1:d5:aa:42:b2:cc:21:23:e3:
b0:0c:24:d9:dd:6b:4b:ec:71:39:67:db:23:d8:90:54:bb:29:
89:ae:c6:60:b8:84:ff:cd:bf:ae:64:89:4e:6a:f2:bd:5e:4d:
57:a8:11:9c:20:b3:31:e3:8a:a8:c8:c6:9c:d3:6c:66:2f:38:
68:58:06:33:70:72:9a:b4:57:a1:fe:71:17:bc:65:89:04:b5:
67:20:68:ca:1f:db:03:d7:4b:93:48:5b:c4:b9:99:a2:2d:16:
a8:c6:b1:0a:dd:e7:2f:ce:50:4f:ce:32:e6:67:12:4f:56:17:
80:2c:d1:b4:f2:e2:25:c3:9c:41:b4:f2:a1:90:03:47:f0:85:
e1:e3:6f:20:ca:2a:96:78:17:73:11:a5:de:6b:e6:36:86:3a:
6e:21:4c:e9:7d:9a:49:64:5e:78:74:5b:01:04:aa:bf:4b:59:
c1:e0:0c:89:21:2a:1a:30:d9:95:78:14:74:68:e6:e5:f3:26:
36:fc:4f:3d:86:e7:35:1f:bb:04:18:30:32:91:4a:4a:12:d8:
d8:0c:ab:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 08:09:27 2026 by rpki-client