Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft
File: Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft (raw, json)
Hash identifier: gd3yP7JHZpmYw7kNu3B/xKhV0p0CReCr5xLDxptXdGg=
Subject key identifier: FF:53:79:DD:60:7B:E4:FA:4D:97:63:05:1E:08:6B:16:D3:72:4D:75
Authority key identifier: 02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3
Certificate issuer: /CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3
Certificate serial: 019D288493941CF93A4FAF02F7A59837B62C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft
Manifest number: 1895
Signing time: Thu 26 Mar 2026 05:01:10 +0000
Manifest this update: Thu 26 Mar 2026 05:01:10 +0000
Manifest next update: Fri 27 Mar 2026 05:01:10 +0000
Files and hashes: 1: ADB2NS1OG8KwsVLAD6NYCaCtJi4.roa (hash: aji7irnO+hSBbZms7WFiwbNpASyVLJ3jxlOuf/BgaKY=)
2: Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl (hash: yrpUTGSQD6WtI4oBolZfikLuqQN2JiWPquKtUqbaIOw=)
3: ETuJmIkUjvADd3UUWdC650htGXA.roa (hash: cAH43gJZX/Jo2JqBoDIwhveRaUPmMSrjgllQlOy9U+4=)
4: PUJfscloQMHgI371vUqE3n8p0O0.roa (hash: HCrGmAGRieyRrO1ZecDc/2ZONQZ1+T4NdqF9jJscfgc=)
5: TJ-NxfDDAC6I8oepMl_uJgBKeY4.roa (hash: LQb2DMXHpcDAYFTx6JeAZ71tuwMz9N0jPtDCjoOf9gM=)
6: lX8eqAs6CwoIAtAewjNrfYtrQ4s.roa (hash: z/P+PTXsb20XgLXYqeqn92M2nr8qJ+zQMUYiqOb95J8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:93:94:1c:f9:3a:4f:af:02:f7:a5:98:37:b6:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3
Validity
Not Before: Mar 26 05:01:10 2026 GMT
Not After : Mar 27 05:01:10 2026 GMT
Subject: CN=ff5379dd607be4fa4d9763051e086b16d3724d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:bc:77:ab:37:78:46:dd:0b:76:59:cf:9d:90:
89:8a:ae:9f:19:f4:f0:1a:c8:63:aa:77:21:36:9b:
fc:d8:68:76:09:39:bd:11:b8:e4:d9:a5:2f:77:fa:
a7:4c:f8:f4:6f:56:3d:99:7d:38:7a:4a:73:33:6e:
ec:1c:7f:2d:47:01:ab:ec:d4:fa:b6:5c:b6:eb:f3:
8e:1e:3a:4a:5b:31:6a:2f:ae:ab:86:f9:51:4d:6d:
12:84:bc:22:71:2a:cb:da:20:2d:c9:d2:33:71:99:
ed:e5:72:82:be:3d:3a:a7:5c:c0:f5:71:5d:5b:59:
f6:f1:37:1c:e7:8e:19:c2:d4:c2:3d:3e:69:b7:6c:
0c:a5:0a:ff:5e:b2:e1:57:09:29:02:f4:4f:20:49:
d7:63:ea:fc:0e:3d:40:49:b5:27:e8:55:a6:bb:0a:
ce:1a:5e:c9:c2:1c:7d:25:4e:ba:28:27:bf:fb:96:
e9:4a:12:a7:ae:00:c7:bb:c7:03:a9:70:01:6c:2c:
03:3e:07:e0:29:14:18:0b:91:3f:cf:72:10:bf:bb:
bd:6e:85:1d:13:9f:25:23:8c:b8:14:3e:1e:86:e4:
de:4e:a2:8b:be:bb:5d:cd:0c:e1:df:c2:f2:37:75:
fd:4b:cf:21:dd:53:f1:8b:e5:a8:96:b1:56:cf:97:
19:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:53:79:DD:60:7B:E4:FA:4D:97:63:05:1E:08:6B:16:D3:72:4D:75
X509v3 Authority Key Identifier:
keyid:02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:42:57:e5:95:22:58:a4:bf:6a:b1:bf:05:bd:94:c9:97:e1:
d9:7b:91:22:6e:bb:a5:9f:35:a2:2e:50:7a:9e:60:b8:80:71:
cf:c5:fc:1a:f4:fc:71:e1:36:1a:6f:10:06:05:d6:01:52:91:
5e:06:9e:e7:ad:53:e4:0b:ca:03:f3:01:e5:2c:b7:5a:17:80:
46:eb:47:10:91:46:8d:18:24:b7:7e:dd:26:0f:f6:7d:49:02:
08:85:cb:7a:75:d9:0d:0a:11:43:e5:3d:ce:d3:f6:0c:96:99:
c9:b6:f4:0e:4f:ff:69:11:11:e4:3d:7a:ed:f6:a0:3f:01:ab:
90:0c:2c:76:79:bf:8c:08:f6:5c:86:78:9d:4e:af:35:c5:81:
f1:74:9a:77:8b:0b:52:35:6b:2a:7e:24:91:2f:c4:57:79:b2:
e5:b7:78:76:87:73:cf:41:b3:34:54:0a:82:30:60:34:d7:6d:
65:69:4c:7e:b7:da:40:ad:f0:a9:c7:22:78:d8:5f:8a:bd:f2:
c1:e9:53:79:b0:e2:16:51:2b:18:be:13:10:7d:79:e5:55:40:
f5:6c:76:72:ca:97:db:f6:1f:ee:0d:ad:65:2e:b9:59:aa:af:
5e:93:6b:4e:ce:7c:fe:26:8b:a4:7b:a7:7b:d6:1f:30:34:05:
cc:69:53:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohJOUHPk6T68C96WYN7YsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNWYyYTkzZGIxMGYyZGQ1ZjZhNTViYjJhNDQwZjY3NDg2
Y2QxYTMwHhcNMjYwMzI2MDUwMTEwWhcNMjYwMzI3MDUwMTEwWjAzMTEwLwYDVQQD
EyhmZjUzNzlkZDYwN2JlNGZhNGQ5NzYzMDUxZTA4NmIxNmQzNzI0ZDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bx3qzd4Rt0LdlnPnZCJiq6fGfTw
GshjqnchNpv82Gh2CTm9Ebjk2aUvd/qnTPj0b1Y9mX04ekpzM27sHH8tRwGr7NT6
tly26/OOHjpKWzFqL66rhvlRTW0ShLwicSrL2iAtydIzcZnt5XKCvj06p1zA9XFd
W1n28Tcc544ZwtTCPT5pt2wMpQr/XrLhVwkpAvRPIEnXY+r8Dj1ASbUn6FWmuwrO
Gl7Jwhx9JU66KCe/+5bpShKnrgDHu8cDqXABbCwDPgfgKRQYC5E/z3IQv7u9boUd
E58lI4y4FD4ehuTeTqKLvrtdzQzh38LyN3X9S88h3VPxi+WolrFWz5cZhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP9Ted1ge+T6TZdjBR4IaxbTck11MB8GA1UdIwQY
MBaAFAJfKpPbEPLdX2pVuypED2dIbNGjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWw4cWs5c1E4dDFmYWxXN0trUVBaMGhzMGFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yMDVkMjQtMDA5Zi00ODZhLTk3NmYt
MmVjZGExMWRlMTUzLzEvQWw4cWs5c1E4dDFmYWxXN0trUVBaMGhzMGFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8yMDVkMjQtMDA5Zi00ODZhLTk3NmYtMmVjZGExMWRlMTUz
LzEvQWw4cWs5c1E4dDFmYWxXN0trUVBaMGhzMGFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoUJX5ZUi
WKS/arG/Bb2UyZfh2XuRIm67pZ81oi5Qep5guIBxz8X8GvT8ceE2Gm8QBgXWAVKR
Xgae561T5AvKA/MB5Sy3WheARutHEJFGjRgkt37dJg/2fUkCCIXLenXZDQoRQ+U9
ztP2DJaZybb0Dk//aRER5D167fagPwGrkAwsdnm/jAj2XIZ4nU6vNcWB8XSad4sL
UjVrKn4kkS/EV3my5bd4dodzz0GzNFQKgjBgNNdtZWlMfrfaQK3wqccieNhfir3y
welTebDiFlErGL4TEH155VVA9Wx2csqX2/Yf7g2tZS65WaqvXpNrTs58/iaLpHun
e9YfMDQFzGlTjg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:21 2026 by rpki-client