Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft
File: ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft (raw, json)
Hash identifier: MLHkzbc5XV1MFqPktwTZVkAIgzZPx/biNbD7w6VQz7M=
Subject key identifier: 33:DB:3A:0E:46:B6:08:4A:A3:D7:81:86:F9:6C:B8:88:4C:57:54:68
Authority key identifier: 00:B4:FE:43:94:E3:3F:C2:2A:C5:CB:B5:45:F9:CD:10:94:08:75:67
Certificate issuer: /CN=00b4fe4394e33fc22ac5cbb545f9cd1094087567
Certificate serial: 019D284E3D66960CA7E76B304D1BC30A8B2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft
Manifest number: 09CD
Signing time: Thu 26 Mar 2026 04:01:49 +0000
Manifest this update: Thu 26 Mar 2026 04:01:49 +0000
Manifest next update: Fri 27 Mar 2026 04:01:49 +0000
Files and hashes: 1: ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.crl (hash: O09cmkI2SntDi0hwYv+C69MuUMl0AonQYzD3Hnds/JA=)
2: tG0LVlaf72tjaFcLZI694UkMyBM.roa (hash: TqiU8MWJoU3H6JgdgSsoTmNJ+nJJZVq6ZzlSY2+KtJ8=)
3: xDM12CcGD2Bni6l8L8cHWegda-o.asa (hash: KFGZ+nd44n5SlA7OxGk3cEFVuk7r49rEOqIITKnjxxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:3d:66:96:0c:a7:e7:6b:30:4d:1b:c3:0a:8b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00b4fe4394e33fc22ac5cbb545f9cd1094087567
Validity
Not Before: Mar 26 04:01:49 2026 GMT
Not After : Mar 27 04:01:49 2026 GMT
Subject: CN=33db3a0e46b6084aa3d78186f96cb8884c575468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2c:31:a3:d7:46:7c:66:ad:c5:85:d4:36:1f:
26:36:c6:ea:c6:da:75:5c:b1:33:36:13:20:37:cb:
f9:31:21:cf:15:96:70:3d:08:d1:65:63:b2:37:06:
4e:09:f0:58:97:a1:32:5d:3f:eb:5a:23:fd:79:59:
b2:a2:97:13:d6:3e:ff:48:04:9b:2b:99:c3:08:8a:
d1:37:fa:f4:07:07:d8:aa:76:29:73:d8:64:88:02:
db:51:43:aa:ff:ab:33:5d:5d:b5:53:a5:c7:fd:69:
21:f8:79:af:e2:17:da:88:a5:b2:9a:63:56:6a:16:
ef:50:a7:e8:88:b4:82:90:32:87:17:4b:ee:e7:5a:
d5:23:9d:3a:51:5b:4b:30:07:94:53:54:dc:ab:d9:
a0:0e:8f:8f:8c:33:7b:6f:fd:87:e8:45:8a:06:9d:
47:d9:b2:94:16:9d:6e:af:4a:07:8e:f5:0f:e9:9f:
6d:64:f1:bf:42:be:1a:cc:75:2d:41:30:39:c5:1d:
9c:98:f3:85:e9:1b:b0:a5:0a:42:88:42:48:9e:18:
79:0e:ec:94:4c:ac:ad:25:7a:bd:54:70:7b:7d:88:
6f:6e:88:a4:28:7a:37:c4:df:26:48:2e:bd:de:fd:
7b:79:15:af:1c:7a:3d:a4:48:1f:f8:ab:84:6f:33:
19:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:DB:3A:0E:46:B6:08:4A:A3:D7:81:86:F9:6C:B8:88:4C:57:54:68
X509v3 Authority Key Identifier:
keyid:00:B4:FE:43:94:E3:3F:C2:2A:C5:CB:B5:45:F9:CD:10:94:08:75:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:93:23:c6:51:64:09:35:4f:49:0e:c5:5a:6c:c3:94:78:56:
40:95:62:0e:6f:ab:f6:71:f9:79:88:a7:23:a3:e3:29:79:14:
94:ed:f9:29:8e:63:5d:5c:81:22:60:1c:a0:3c:55:2a:94:7a:
aa:70:96:1c:fa:79:28:52:f6:2d:8a:30:9d:40:97:d4:94:73:
bd:ee:56:43:76:38:9c:c1:e1:db:5f:1e:2f:3b:3a:dd:10:5e:
6b:a7:38:b9:25:44:0c:06:bb:6a:0c:3c:61:66:b9:ee:e2:cd:
42:fe:e0:a8:59:41:05:70:84:2e:4c:0f:50:01:24:13:22:dd:
af:5b:02:90:00:fb:35:88:b1:fc:4c:5b:d8:84:19:6c:04:20:
35:2a:69:d5:99:14:4a:dc:81:7e:df:0b:a0:c6:bb:45:41:3e:
37:50:9b:43:2f:3f:ee:01:6f:b5:bb:c1:2b:ba:65:f2:65:d0:
20:cb:5c:37:0a:e7:3e:03:a1:ce:d3:b1:9f:ac:ad:00:f6:e3:
a2:f0:62:1b:e1:e7:20:6a:ac:46:cc:f7:da:f1:44:48:17:28:
e1:db:7f:2a:b7:81:c8:83:87:f0:71:01:86:b6:f9:2f:05:11:
86:dd:8c:45:b2:45:90:8c:f4:ea:ee:d3:14:88:fc:54:7d:8d:
f1:01:44:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:42:56 2026 by rpki-client