Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft
File: Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft (raw, json)
Hash identifier: qkFI67C5LvmCl6S6wUFcaGl73LuMux9aCQWX+pPek7k=
Subject key identifier: 34:F7:EE:10:8E:2D:BD:61:87:D7:82:50:19:4E:A9:71:EB:C6:02:B9
Authority key identifier: 02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3
Certificate issuer: /CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3
Certificate serial: 019F9022C8A5BF49BD3B4511CD2C10346ACA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft
Manifest number: 19D5
Signing time: Thu 23 Jul 2026 18:00:26 +0000
Manifest this update: Thu 23 Jul 2026 18:00:26 +0000
Manifest next update: Fri 24 Jul 2026 18:00:26 +0000
Files and hashes: 1: 4IwtnOs_iwVpuxuyxf_djhxqxzo.roa (hash: G10HT/r9NNyWdyBn6Pz/raHjo4uYh+brQrONHtIQaYE=)
2: Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl (hash: FLqWnVzD+4EvN8LoWOoyiG6FWV3pxtH60QfCEcXbUDw=)
3: Cpsl_lQBgEEbAkoRvRPOG0W_Zc8.roa (hash: 8vUi/f1O2zm8nVjMwrWjmaGjGaEoQH6CKoqkrynjuWo=)
4: ETuJmIkUjvADd3UUWdC650htGXA.roa (hash: cAH43gJZX/Jo2JqBoDIwhveRaUPmMSrjgllQlOy9U+4=)
5: PUJfscloQMHgI371vUqE3n8p0O0.roa (hash: HCrGmAGRieyRrO1ZecDc/2ZONQZ1+T4NdqF9jJscfgc=)
6: TJ-NxfDDAC6I8oepMl_uJgBKeY4.roa (hash: LQb2DMXHpcDAYFTx6JeAZ71tuwMz9N0jPtDCjoOf9gM=)
7: lX8eqAs6CwoIAtAewjNrfYtrQ4s.roa (hash: z/P+PTXsb20XgLXYqeqn92M2nr8qJ+zQMUYiqOb95J8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:c8:a5:bf:49:bd:3b:45:11:cd:2c:10:34:6a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3
Validity
Not Before: Jul 23 18:00:26 2026 GMT
Not After : Jul 24 18:00:26 2026 GMT
Subject: CN=34f7ee108e2dbd6187d78250194ea971ebc602b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:32:64:35:88:1a:3c:3e:31:f2:e4:12:07:51:
a1:52:df:a1:ca:59:3c:c1:3f:23:d0:c4:75:1e:2b:
9c:3a:36:3d:7b:86:2e:e8:fc:5a:ee:39:16:18:07:
22:60:b7:cd:e4:37:08:a5:b6:40:4f:1d:5c:9d:5d:
10:dc:f8:3a:7c:37:ba:09:17:54:7c:61:a6:0a:1c:
eb:2b:63:cd:de:b6:0c:6f:47:aa:7b:d2:69:20:14:
04:93:20:b3:80:6d:de:73:65:33:6d:c9:13:b1:09:
a8:e7:b5:2a:a9:12:3c:c9:cb:38:54:81:3f:97:cb:
68:5d:c2:1f:3d:e0:47:23:ee:66:c8:0b:dd:da:1c:
84:ea:84:a1:28:17:1b:ba:e6:0c:cf:12:c2:eb:09:
b2:5b:78:34:25:25:86:be:b2:66:7e:59:61:2a:3d:
0a:1e:3b:8f:15:d1:96:f5:d0:cd:6d:79:c1:db:fb:
57:3a:e7:0d:32:48:36:39:97:9b:be:47:ba:3e:85:
59:3a:9f:d4:68:e0:66:6d:f5:f1:69:19:ab:35:0b:
f2:17:60:d7:41:26:8d:0e:28:96:54:8d:36:eb:a8:
9c:79:8c:21:8d:93:76:87:56:01:e4:9f:2e:39:e2:
d3:d0:0d:c1:a7:aa:41:6d:65:f7:4b:7c:d5:51:4b:
f6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F7:EE:10:8E:2D:BD:61:87:D7:82:50:19:4E:A9:71:EB:C6:02:B9
X509v3 Authority Key Identifier:
keyid:02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:d6:d0:b3:26:78:1c:f8:bb:87:26:be:37:93:75:df:bc:b5:
4b:51:a0:36:87:23:f0:66:ed:c0:8a:32:43:96:66:50:e9:c1:
47:cf:e8:fe:e4:08:d9:7a:f4:a4:fc:af:94:fd:26:f5:d1:7c:
81:99:4f:0b:fe:11:09:62:d1:0c:52:98:8a:fa:93:2a:ce:b2:
fb:3e:2c:38:90:54:ec:07:d5:50:d1:47:0a:c4:6d:fb:5e:30:
2f:04:ac:d8:f7:37:1b:7f:86:e7:a2:0a:be:e1:f2:65:bc:70:
1b:84:41:8e:30:02:ae:97:0e:7c:00:d5:98:24:39:4f:53:d4:
9d:08:57:a2:2a:24:af:77:90:1e:8c:4e:fa:ae:aa:74:f1:88:
fa:a0:3f:a8:72:b1:da:c8:12:9d:81:36:64:43:fa:d2:7c:d4:
83:41:64:f3:ae:07:3c:fd:a6:ef:46:f4:43:02:0b:7e:48:1c:
a4:4f:69:e3:f1:e4:2c:d0:5c:e8:4f:a3:07:00:a0:6d:b2:8c:
78:41:54:33:8a:9c:8d:7e:53:98:43:fb:f2:14:6a:69:f6:30:
fa:c2:51:1d:bc:ef:c4:9c:75:2f:5f:3b:1b:4f:81:df:88:59:
a0:e8:1f:e7:09:c1:8a:a7:28:6c:a0:a3:48:9b:bd:de:80:ce:
23:92:b7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:15:00 2026 by rpki-client