Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.mft
File: AlY31IiO4AWN6a06cMQtxGmWmpk.mft (raw, json)
Hash identifier: ZBJBqwjTv/tTO9nkgtHqpVNcsmgcokK/PyuulbZBLkU=
Subject key identifier: 2F:FD:AD:B9:7C:E4:CD:26:05:1E:79:CB:59:AC:7B:27:61:C9:C5:28
Authority key identifier: 02:56:37:D4:88:8E:E0:05:8D:E9:AD:3A:70:C4:2D:C4:69:96:9A:99
Certificate issuer: /CN=025637d4888ee0058de9ad3a70c42dc469969a99
Certificate serial: 019D2772812D0D41C3936E094B0EFF7C1B87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AlY31IiO4AWN6a06cMQtxGmWmpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.mft
Manifest number: 0CFC
Signing time: Thu 26 Mar 2026 00:01:48 +0000
Manifest this update: Thu 26 Mar 2026 00:01:48 +0000
Manifest next update: Fri 27 Mar 2026 00:01:48 +0000
Files and hashes: 1: AlY31IiO4AWN6a06cMQtxGmWmpk.crl (hash: 1XRTkyLOVfPcBhfEQVZIHG6Z6w40lI5EHkwwP9hce0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AlY31IiO4AWN6a06cMQtxGmWmpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:81:2d:0d:41:c3:93:6e:09:4b:0e:ff:7c:1b:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=025637d4888ee0058de9ad3a70c42dc469969a99
Validity
Not Before: Mar 26 00:01:48 2026 GMT
Not After : Mar 27 00:01:48 2026 GMT
Subject: CN=2ffdadb97ce4cd26051e79cb59ac7b2761c9c528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:30:66:05:61:cd:6e:5c:25:79:6e:ea:f6:a2:
76:a2:09:09:5d:f9:1e:c8:41:b4:f1:70:80:3a:a0:
4c:a9:72:a0:77:bd:e3:65:da:3d:3e:22:03:7f:5d:
12:0e:3d:48:50:7e:e5:2d:0b:e5:e2:25:cd:90:8f:
98:9e:3e:9b:01:43:b2:73:77:ad:44:1e:c6:da:72:
d4:9c:f3:03:02:c6:14:3f:02:97:3a:c4:06:1e:79:
19:f3:1a:37:e6:96:4f:23:c7:8e:91:01:97:33:d9:
b3:e8:f8:66:02:67:d7:9b:88:c7:50:48:67:bc:44:
6c:34:ac:d7:c1:39:4b:e3:68:af:61:4b:9d:ba:a3:
e1:6d:91:ef:25:5f:5e:92:3d:43:40:34:5d:97:62:
23:4a:eb:8f:58:73:4c:3e:7f:85:e4:2a:c3:7d:86:
c2:7a:7f:7e:61:cd:fa:10:2f:99:9d:46:26:61:13:
8a:5a:41:f7:0e:47:fb:16:e9:4e:ca:14:da:76:af:
d3:9a:40:d5:95:29:f6:65:e2:53:83:d7:77:78:30:
86:f6:e6:7a:89:02:70:b9:a4:55:b9:23:2a:5a:d5:
d1:ae:60:6f:dd:c1:ab:28:b4:05:52:46:16:2c:9b:
95:f0:28:55:90:c3:25:b4:c3:65:77:2c:38:e8:2b:
09:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:FD:AD:B9:7C:E4:CD:26:05:1E:79:CB:59:AC:7B:27:61:C9:C5:28
X509v3 Authority Key Identifier:
keyid:02:56:37:D4:88:8E:E0:05:8D:E9:AD:3A:70:C4:2D:C4:69:96:9A:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlY31IiO4AWN6a06cMQtxGmWmpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:3e:47:28:39:7a:af:e2:53:64:97:d9:b1:b0:15:66:ff:39:
12:18:21:72:cb:b0:ca:ea:bd:c0:7c:a4:dd:a9:f2:3c:90:e0:
fb:30:86:4f:82:58:aa:2d:7c:de:da:0c:db:2e:51:e8:77:09:
39:db:d0:f3:c7:76:32:d5:5f:c6:e0:6d:51:05:fd:9c:74:14:
ca:13:46:7e:13:5a:08:5c:a7:b5:72:7e:93:4d:47:3b:7e:57:
50:bb:06:ea:8a:8d:12:7d:60:04:38:75:cf:82:63:c7:36:51:
04:52:3b:7e:0c:21:74:e0:34:1d:80:30:2d:77:6a:3e:13:1c:
b0:fa:e1:c6:f8:88:45:58:cb:36:fd:cd:61:de:4c:1a:18:85:
e5:2a:d6:4b:f6:3d:d5:ef:d0:bd:73:a9:13:ef:39:1f:f7:c0:
56:b7:cb:2a:61:66:81:b7:e9:a8:04:ab:f8:bd:15:6e:b2:75:
36:a7:c3:8f:e0:5e:7c:47:3e:11:55:30:66:49:da:d1:7f:a3:
90:56:e5:41:6a:67:88:f7:3d:b2:f1:c7:13:f5:91:39:8c:02:
f3:e3:2a:b8:19:31:e0:53:13:a7:74:59:57:71:c0:7d:25:c4:
8c:33:ff:dd:33:48:a1:7a:1f:1a:3e:b7:91:fe:5b:ae:22:fd:
fc:cd:63:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncoEtDUHDk24JSw7/fBuHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNTYzN2Q0ODg4ZWUwMDU4ZGU5YWQzYTcwYzQyZGM0Njk5
NjlhOTkwHhcNMjYwMzI2MDAwMTQ4WhcNMjYwMzI3MDAwMTQ4WjAzMTEwLwYDVQQD
EygyZmZkYWRiOTdjZTRjZDI2MDUxZTc5Y2I1OWFjN2IyNzYxYzljNTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDBmBWHNblwleW7q9qJ2ogkJXfke
yEG08XCAOqBMqXKgd73jZdo9PiIDf10SDj1IUH7lLQvl4iXNkI+Ynj6bAUOyc3et
RB7G2nLUnPMDAsYUPwKXOsQGHnkZ8xo35pZPI8eOkQGXM9mz6PhmAmfXm4jHUEhn
vERsNKzXwTlL42ivYUuduqPhbZHvJV9ekj1DQDRdl2IjSuuPWHNMPn+F5CrDfYbC
en9+Yc36EC+ZnUYmYROKWkH3Dkf7FulOyhTadq/TmkDVlSn2ZeJTg9d3eDCG9uZ6
iQJwuaRVuSMqWtXRrmBv3cGrKLQFUkYWLJuV8ChVkMMltMNldyw46CsJ1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC/9rbl85M0mBR55y1mseydhycUoMB8GA1UdIwQY
MBaAFAJWN9SIjuAFjemtOnDELcRplpqZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWxZMzFJaU80QVdONmEwNmNNUXR4R21XbXBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9iMjk5MGQtNGM1Mi00MmZhLWI2Yjct
ZTBhNGE0ZjljYWJjLzEvQWxZMzFJaU80QVdONmEwNmNNUXR4R21XbXBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9iMjk5MGQtNGM1Mi00MmZhLWI2YjctZTBhNGE0ZjljYWJj
LzEvQWxZMzFJaU80QVdONmEwNmNNUXR4R21XbXBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAST5HKDl6
r+JTZJfZsbAVZv85Ehghcsuwyuq9wHyk3anyPJDg+zCGT4JYqi183toM2y5R6HcJ
OdvQ88d2MtVfxuBtUQX9nHQUyhNGfhNaCFyntXJ+k01HO35XULsG6oqNEn1gBDh1
z4JjxzZRBFI7fgwhdOA0HYAwLXdqPhMcsPrhxviIRVjLNv3NYd5MGhiF5SrWS/Y9
1e/QvXOpE+85H/fAVrfLKmFmgbfpqASr+L0VbrJ1NqfDj+BefEc+EVUwZkna0X+j
kFblQWpniPc9svHHE/WROYwC8+MquBkx4FMTp3RZV3HAfSXEjDP/3TNIoXofGj63
kf5briL9/M1jyg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:42:42 2026 by rpki-client