Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft
File: Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft (raw, json)
Hash identifier: FTIUXriupVrXXLA7+wUG1MBMrgYhAB7yK++3yR3zZWw=
Subject key identifier: BE:53:F9:09:73:95:70:F9:C9:4A:E0:9F:31:B5:FF:61:F9:DE:08:E0
Authority key identifier: 02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3
Certificate issuer: /CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3
Certificate serial: 01A0D2376EA75AD9C885B69D8124053B5FF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft
Manifest number: 1A7D
Signing time: Thu 24 Sep 2026 07:00:43 +0000
Manifest this update: Thu 24 Sep 2026 07:00:43 +0000
Manifest next update: Fri 25 Sep 2026 07:00:43 +0000
Files and hashes: 1: 4IwtnOs_iwVpuxuyxf_djhxqxzo.roa (hash: G10HT/r9NNyWdyBn6Pz/raHjo4uYh+brQrONHtIQaYE=)
2: Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl (hash: fJ2RR59h31GZkveGoyw3eFoOvBlWkQ9A6qDlto+p23k=)
3: L5XdgvVjz1-CxRRJ-biQ8dcQz5Q.roa (hash: mgC5TyjrOGnzxFMEk3uTfwFbUXB8nLluzlgGLdR5O7s=)
4: PUJfscloQMHgI371vUqE3n8p0O0.roa (hash: HCrGmAGRieyRrO1ZecDc/2ZONQZ1+T4NdqF9jJscfgc=)
5: TJ-NxfDDAC6I8oepMl_uJgBKeY4.roa (hash: LQb2DMXHpcDAYFTx6JeAZ71tuwMz9N0jPtDCjoOf9gM=)
6: Xo9a170WwWAaGk3ACXVytE6-X8Y.roa (hash: hLe8kLG+CBJL9Cc+0qIbKz/P+HvW76o6WO8v8lHcktI=)
7: lX8eqAs6CwoIAtAewjNrfYtrQ4s.roa (hash: z/P+PTXsb20XgLXYqeqn92M2nr8qJ+zQMUYiqOb95J8=)
8: r18VHhbVUEDHRwv2w5uNa5mVIjI.roa (hash: IQUd5RUia5Z/zTnW4UQLqf5CANnVe1tw4Gxv/vTf4Pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:37:6e:a7:5a:d9:c8:85:b6:9d:81:24:05:3b:5f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3
Validity
Not Before: Sep 24 07:00:43 2026 GMT
Not After : Sep 25 07:00:43 2026 GMT
Subject: CN=be53f909739570f9c94ae09f31b5ff61f9de08e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:cb:1f:43:e7:ed:10:2d:ae:c1:a3:f5:b3:90:
96:b8:f1:51:48:12:83:7f:40:20:d4:ec:f5:cb:b9:
42:c4:c5:1a:30:3f:cf:2e:9d:df:77:45:78:fc:5c:
65:3b:9f:1d:28:0b:6c:e8:9e:df:82:ce:be:4f:05:
26:29:88:dd:56:e8:c7:01:b1:67:68:cc:9f:c3:55:
3a:0b:cb:e9:e2:2a:dd:2b:64:ab:73:e5:21:d8:ea:
ea:ec:1d:bb:4d:11:a8:92:e5:22:a7:78:f4:0c:60:
ba:66:18:d2:c8:d5:2d:8c:88:46:13:13:11:29:51:
23:25:55:34:6a:cc:a5:4c:8e:0a:4d:f0:a5:b3:bc:
4e:f0:48:6d:c5:9a:22:46:61:0b:cc:d8:7a:1d:d7:
ba:64:cc:8e:61:70:0f:9d:54:19:02:c9:bc:8a:5e:
6b:66:cd:11:1f:46:22:f4:32:cf:96:04:0e:84:1f:
b5:13:13:4f:3f:f2:55:96:fb:a8:fb:3a:a7:4b:52:
94:fe:be:fe:37:09:af:b4:e6:a8:cc:38:aa:00:bb:
4f:62:c8:31:ff:9d:bf:11:23:13:55:e9:0b:5a:76:
a3:94:ee:ce:1f:33:0b:64:26:79:de:c8:ea:e9:b3:
d1:52:7e:67:2f:50:1b:94:cc:81:41:36:3c:af:30:
56:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:53:F9:09:73:95:70:F9:C9:4A:E0:9F:31:B5:FF:61:F9:DE:08:E0
X509v3 Authority Key Identifier:
keyid:02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ff:8a:84:15:55:b2:02:6e:c2:51:a9:d8:0a:a3:e8:da:ed:
c7:ef:ac:2f:ec:92:a2:4c:93:a5:b7:96:34:e4:89:2a:8b:9b:
df:60:a9:8b:87:3e:03:13:61:88:96:ea:78:98:98:b6:55:47:
99:0f:ae:6e:14:59:a7:29:3f:34:27:93:dc:d3:6b:ed:58:d8:
9c:03:8a:04:3b:9f:a3:3a:33:bf:f4:51:f4:73:ca:9b:8a:1e:
38:de:f8:3b:84:01:f1:af:1e:43:4b:00:09:df:80:09:55:93:
8f:2e:a2:a5:1e:1f:04:bb:36:c4:49:d1:37:5c:90:b9:39:6e:
f6:6a:e7:8f:7b:28:ce:ab:1d:65:3e:d7:1d:4d:4d:e7:b5:da:
df:19:26:73:fb:2a:f6:cf:87:bd:4f:b9:e8:25:16:54:57:b4:
a9:61:b4:61:77:dc:51:8d:0c:2e:4d:73:f0:98:e7:f8:c8:5b:
b4:ee:19:8e:9c:b3:91:d1:e0:5e:64:b4:be:d8:41:95:01:37:
cf:33:4c:e9:70:9f:fd:ed:ef:13:cf:2b:53:ec:da:28:c2:61:
db:8e:2f:ce:2d:c4:df:67:d7:9f:b3:3f:bc:11:44:06:54:59:
68:de:be:51:2c:16:f3:8b:54:ce:32:29:f5:68:7f:08:93:34:
42:bc:d0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:27:35 2026 by rpki-client