Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
File: aesALwAL1CbkpkDHHWwCAbUFDjQ.mft (raw, json)
Hash identifier: 935k2Z4jtvGtySlE8PnD4v8I0nr3xrFCRVNjj56nH9M=
Subject key identifier: 68:43:17:A7:5D:D6:63:E3:6B:C6:DD:4D:62:47:33:D4:33:72:26:65
Authority key identifier: 69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34
Certificate issuer: /CN=69eb002f000bd426e4a640c71d6c0201b5050e34
Certificate serial: 019FA907723A0D0960AA4B6969EBEC402D3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
Manifest number: 191A
Signing time: Tue 28 Jul 2026 14:01:05 +0000
Manifest this update: Tue 28 Jul 2026 14:01:05 +0000
Manifest next update: Wed 29 Jul 2026 14:01:05 +0000
Files and hashes: 1: aesALwAL1CbkpkDHHWwCAbUFDjQ.crl (hash: l6vCV8sqYP2n9463KxsmYAPQEKMurUhGMoXHss9pE2o=)
2: o_hUBXndKvvbdzISAd6rD0cHoMk.asa (hash: NgnlpeJggKrHizTOEK4IHp9zymg05RTjL+zoELCPJcw=)
3: uFe4cVHbxr_G6s1--UuURiKCbYs.roa (hash: Fv5WNCecba9l/1dLNg+gP0QmW1CKOnk01tR8y8gBZWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:72:3a:0d:09:60:aa:4b:69:69:eb:ec:40:2d:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69eb002f000bd426e4a640c71d6c0201b5050e34
Validity
Not Before: Jul 28 14:01:05 2026 GMT
Not After : Jul 29 14:01:05 2026 GMT
Subject: CN=684317a75dd663e36bc6dd4d624733d433722665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7d:ba:fb:58:7c:0a:23:d4:6f:04:49:d4:46:
5f:ae:ca:83:02:c4:3d:d0:21:93:99:c8:b9:44:89:
30:a0:a2:68:1d:b7:3b:01:31:fc:cf:cb:af:61:13:
e9:5e:ce:4c:69:3b:eb:17:53:7d:0c:b1:47:a6:96:
09:45:c0:6f:59:37:f7:2f:55:19:78:4d:2a:ce:7e:
8a:c2:7a:db:18:88:4b:d2:5d:b2:6c:84:42:aa:65:
56:26:b1:89:41:ec:84:2d:db:b2:72:35:78:6a:bd:
9a:75:71:fd:f7:61:4b:f5:fb:9c:6b:f3:97:03:21:
67:b7:c0:41:90:e9:cf:11:25:9c:0b:88:76:10:12:
fe:09:67:3f:45:e9:de:68:86:8f:63:13:14:cd:39:
59:c0:c0:18:d9:a3:b4:79:97:08:57:93:40:83:26:
2d:5e:47:2f:33:ee:e7:b5:a2:53:6d:61:2d:9a:78:
e9:64:37:4a:c0:a9:c7:d5:d5:99:43:09:fc:9a:9c:
3f:a9:5c:20:1b:e1:d7:2e:8d:ad:71:82:5c:0a:f1:
f7:b5:60:f5:13:1e:5f:dc:48:ad:fa:e4:2a:46:9d:
bf:e2:19:23:04:65:dd:92:c1:da:77:e3:4d:23:47:
4b:16:a5:96:22:17:36:c6:b4:5f:05:b4:57:f9:8a:
a3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:43:17:A7:5D:D6:63:E3:6B:C6:DD:4D:62:47:33:D4:33:72:26:65
X509v3 Authority Key Identifier:
keyid:69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:3a:bf:f5:78:8c:2b:f2:8d:bc:a6:fc:bf:81:dd:a3:5e:25:
37:1e:f6:b4:bf:15:f2:6c:c8:d8:cc:2e:b0:de:64:ce:a2:27:
48:e9:1b:19:5a:4e:70:c9:bf:01:e4:02:03:14:c5:05:0e:d9:
a3:b9:6e:1f:83:97:8c:bd:e1:56:77:4e:3f:31:22:93:92:c2:
27:e5:e5:de:86:f6:58:08:eb:f1:88:19:46:d0:9c:7d:07:f7:
bf:a3:89:1b:d1:2d:21:22:9e:f0:96:bc:0e:4c:35:20:f7:67:
67:73:e8:f5:8f:7b:c0:b9:a8:32:ff:d6:1a:c8:23:05:b2:86:
91:02:25:9e:af:5d:36:a8:ca:88:e1:c0:96:53:18:93:69:02:
bf:a1:3c:eb:c1:9d:cf:28:58:b1:7b:5e:0b:8c:99:5d:41:c0:
c8:fa:dc:02:c5:a9:bd:68:36:f5:f4:2c:77:6e:f0:77:3a:65:
12:6e:12:32:4f:8f:63:02:fc:5d:ff:57:b1:67:73:20:50:c5:
55:d0:9b:58:41:c9:f7:57:09:6e:26:c4:f5:3e:fd:69:90:2e:
c5:1a:24:96:9a:24:56:c8:94:f8:91:49:5e:c1:9b:34:91:89:
61:e6:3b:ae:0a:e6:f2:3a:75:71:21:c7:be:dc:a1:47:99:d3:
e3:4e:bd:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:28:16 2026 by rpki-client