Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.mft
File: AlY31IiO4AWN6a06cMQtxGmWmpk.mft (raw, json)
Hash identifier: MOkNohA/qSEL/UxTaspDWlPstO0EGKxewZM/LAt//e0=
Subject key identifier: 70:69:C2:EF:5F:6C:AD:02:44:1A:BD:F7:54:5D:19:66:A6:59:B2:40
Authority key identifier: 02:56:37:D4:88:8E:E0:05:8D:E9:AD:3A:70:C4:2D:C4:69:96:9A:99
Certificate issuer: /CN=025637d4888ee0058de9ad3a70c42dc469969a99
Certificate serial: 01A0D012241C0E3BCC2CDFBF017227E06942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AlY31IiO4AWN6a06cMQtxGmWmpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.mft
Manifest number: 0EE1
Signing time: Wed 23 Sep 2026 21:00:44 +0000
Manifest this update: Wed 23 Sep 2026 21:00:44 +0000
Manifest next update: Thu 24 Sep 2026 21:00:44 +0000
Files and hashes: 1: AlY31IiO4AWN6a06cMQtxGmWmpk.crl (hash: ENn8HHXqWK8aDkn85IVmclIsLMPb8p5C0DZrZR814r4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AlY31IiO4AWN6a06cMQtxGmWmpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:24:1c:0e:3b:cc:2c:df:bf:01:72:27:e0:69:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=025637d4888ee0058de9ad3a70c42dc469969a99
Validity
Not Before: Sep 23 21:00:44 2026 GMT
Not After : Sep 24 21:00:44 2026 GMT
Subject: CN=7069c2ef5f6cad02441abdf7545d1966a659b240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:71:3d:ac:c9:5e:3d:cd:fe:d5:be:e8:5b:d7:
1a:96:24:c2:0f:73:a7:ab:a4:76:27:81:ab:db:03:
f2:8a:ac:0e:80:a0:cc:bf:55:bb:6e:47:9a:bb:ed:
42:8f:67:33:ec:d8:7c:cb:88:6c:3c:b4:a3:4e:c8:
a2:b4:fd:3a:9d:27:3a:d5:6a:0f:6e:d6:fc:5c:64:
f5:ab:3f:06:d9:a3:00:88:f7:8a:1f:f8:19:99:3e:
9f:01:ff:ba:03:04:eb:5b:fd:ab:fe:38:39:0f:61:
9e:9d:1d:2f:12:9c:42:ee:39:fa:cd:b3:08:a0:f5:
01:e7:d7:b1:42:8c:88:97:57:7f:47:53:18:ce:5c:
42:8a:fe:c2:a7:a8:7e:38:1e:e0:e9:aa:d4:6f:74:
eb:bc:0e:81:56:0e:ff:a8:de:3f:62:66:ac:3d:e2:
67:5b:a0:33:13:a0:80:f4:5d:57:b5:a7:fc:cc:53:
40:a8:67:30:fd:03:be:f9:bf:25:42:be:41:cf:6d:
44:aa:d1:d2:75:37:04:43:77:cb:a8:fd:94:08:f1:
84:5e:bd:c0:44:1f:3b:b3:be:15:72:26:ca:6e:f1:
5b:d5:f4:9a:91:4e:cd:66:b4:f4:a1:ab:95:76:5e:
d3:73:17:c7:8b:38:65:d0:26:ca:41:5e:ad:82:6d:
3f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:69:C2:EF:5F:6C:AD:02:44:1A:BD:F7:54:5D:19:66:A6:59:B2:40
X509v3 Authority Key Identifier:
keyid:02:56:37:D4:88:8E:E0:05:8D:E9:AD:3A:70:C4:2D:C4:69:96:9A:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlY31IiO4AWN6a06cMQtxGmWmpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ef:f1:ca:a5:c9:a7:e6:4b:6f:9e:2b:24:7f:9e:a6:44:43:
34:f3:b6:f3:43:bc:ad:58:f5:c6:87:7e:c7:ce:13:cf:51:33:
52:d5:56:de:08:01:22:33:4c:0e:6c:d8:48:19:2d:69:60:1d:
b3:f2:d1:84:34:0f:1b:58:80:46:e5:bb:01:74:33:27:66:fa:
3c:63:24:ad:63:3a:4a:88:a6:ea:14:b2:e1:09:bd:88:44:94:
dc:f8:51:7a:b4:80:fd:5f:61:08:c2:43:1e:6e:3c:c6:4e:ac:
d2:03:74:35:7e:25:5c:ad:7a:6d:39:b1:d2:77:cd:da:37:b1:
ef:0c:2c:9e:e6:d1:6b:84:15:08:0f:cf:e5:ec:d9:53:c3:7b:
60:45:ea:46:88:51:fd:7a:90:17:af:ce:d4:22:18:0a:1a:e7:
7d:78:66:48:9b:0d:83:c7:27:50:f1:28:c5:07:7d:20:8a:23:
63:ad:4d:29:40:47:7d:12:85:82:4b:68:73:f0:94:d4:14:07:
2e:91:5d:26:9a:4f:3f:48:9d:f3:0f:00:a1:2c:48:50:01:27:
9a:37:12:f3:b5:7e:96:3a:f9:60:a7:dc:65:ec:78:71:8b:ad:
41:4b:f5:f5:9d:33:9c:c9:7a:47:70:e1:2f:49:91:18:1b:16:
bd:22:53:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:39:34 2026 by rpki-client