Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
File: aesALwAL1CbkpkDHHWwCAbUFDjQ.mft (raw, json)
Hash identifier: BWu6p89mkGFkfCTPkvmvUH7cc+xsWx03qeZvBixJYbY=
Subject key identifier: 1F:25:2E:C0:87:09:09:2E:EF:D3:BD:70:BA:4C:EF:EB:B5:C5:6F:18
Authority key identifier: 69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34
Certificate issuer: /CN=69eb002f000bd426e4a640c71d6c0201b5050e34
Certificate serial: 01A0C47B43E443A2DCF666BA6EE86A18908C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
Manifest number: 19AD
Signing time: Mon 21 Sep 2026 15:00:07 +0000
Manifest this update: Mon 21 Sep 2026 15:00:07 +0000
Manifest next update: Tue 22 Sep 2026 15:00:07 +0000
Files and hashes: 1: 22czVAVfb6NGXSC4sIFt9S-UT44.asa (hash: nlpdMfUz/LgI9MnFoPN71TMamMbPx9faJTypOf9lIxI=)
2: aesALwAL1CbkpkDHHWwCAbUFDjQ.crl (hash: qcnmbrgocexDLZIXJByqNVLpfQFOF6TBpOpklhqiUGo=)
3: uFe4cVHbxr_G6s1--UuURiKCbYs.roa (hash: Fv5WNCecba9l/1dLNg+gP0QmW1CKOnk01tR8y8gBZWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7b:43:e4:43:a2:dc:f6:66:ba:6e:e8:6a:18:90:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69eb002f000bd426e4a640c71d6c0201b5050e34
Validity
Not Before: Sep 21 15:00:07 2026 GMT
Not After : Sep 22 15:00:07 2026 GMT
Subject: CN=1f252ec08709092eefd3bd70ba4cefebb5c56f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f1:07:31:cd:d0:b6:21:e8:4f:73:4f:3c:62:
1a:e0:aa:07:05:e2:87:c0:80:b5:66:1a:60:cf:0c:
9f:9c:65:e9:97:8c:9f:85:1a:f7:76:f2:38:b2:28:
4e:b0:90:ce:34:29:40:db:be:31:e8:6d:21:98:68:
42:65:91:7c:70:31:c2:df:4d:c4:1b:7c:87:29:00:
c7:8b:f1:a8:d4:68:15:a9:e9:16:4a:0e:c3:a9:a9:
87:44:f9:77:ca:f5:a5:b0:46:a8:84:cf:c2:5b:25:
a4:a7:63:e4:74:26:59:0a:6b:06:d0:ed:77:2b:4b:
81:bc:98:5a:b8:cb:83:65:96:e9:05:25:f8:13:54:
e7:fc:c8:49:c6:6d:9d:d4:71:c0:ab:85:c6:2c:f9:
8c:5b:c6:85:cb:ee:3f:99:db:b9:a9:f1:3a:1c:bb:
7b:c6:3c:eb:38:94:6a:a6:d6:45:94:e7:a4:07:49:
3d:cb:0c:05:a5:6a:96:c4:56:25:e1:88:e9:b1:f1:
c3:ad:d7:5e:f6:8a:4b:1d:76:8f:b8:40:01:ed:de:
cd:14:7b:2b:c4:51:19:bf:69:82:62:93:c4:95:fe:
29:39:ce:65:6c:95:56:2c:5e:d1:6b:8d:16:db:2f:
f6:47:3e:53:c7:7c:d4:6a:8d:cb:06:d8:4f:9b:6c:
4b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:25:2E:C0:87:09:09:2E:EF:D3:BD:70:BA:4C:EF:EB:B5:C5:6F:18
X509v3 Authority Key Identifier:
keyid:69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:79:11:6b:b3:9f:f5:7b:3f:09:56:92:fd:e6:66:a9:68:e2:
b4:b7:62:ae:61:e3:8b:8a:e8:97:79:c8:b3:d0:bd:92:9e:53:
2d:49:77:34:82:2c:c7:a7:fb:15:09:c8:9b:d5:3d:45:48:fb:
35:b0:a1:88:0f:69:8d:4c:bc:b9:39:8e:e5:6c:52:04:bd:60:
ad:31:a0:f3:cd:8c:42:db:0c:01:ee:ee:d1:82:93:55:0f:bb:
cf:1d:ab:4c:8d:82:3f:29:4b:6c:a2:d3:54:34:93:eb:17:6a:
ae:a9:f9:68:b1:58:d2:51:8f:9b:33:5a:91:9a:00:52:d8:9e:
31:04:81:5a:33:76:31:8b:bc:5b:db:e6:97:d0:2a:d3:47:a2:
9f:69:62:5f:ad:b5:92:bc:70:8f:ca:50:e4:38:32:55:13:49:
7a:a1:cf:ae:bf:c7:b5:b1:d0:40:66:c2:32:1a:aa:96:3f:30:
cc:59:e2:b3:1e:6b:e8:74:78:a9:12:bd:ce:f6:e9:fe:b5:b6:
57:50:c4:6b:18:b2:61:43:de:3b:ab:cf:da:df:40:5e:88:d1:
d6:22:3f:79:b4:de:b2:5b:0c:b0:49:6c:78:7c:4e:72:0f:e6:
e1:d8:02:97:39:d0:60:a0:3b:15:13:8e:0d:a8:80:0a:a4:d7:
b6:48:57:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:50:56 2026 by rpki-client