Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
File: aesALwAL1CbkpkDHHWwCAbUFDjQ.mft (raw, json)
Hash identifier: i9cSWJCebkG+ZwukC/0ITW1gK1yqXrnO/7ZK8fqp0QM=
Subject key identifier: 02:0E:C8:E3:C3:7A:4A:CF:9F:60:93:39:04:CD:3D:66:9C:AD:62:99
Authority key identifier: 69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34
Certificate issuer: /CN=69eb002f000bd426e4a640c71d6c0201b5050e34
Certificate serial: 019DA52F27B93AA699D0B58872016626257A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
Manifest number: 180D
Signing time: Sun 19 Apr 2026 10:00:24 +0000
Manifest this update: Sun 19 Apr 2026 10:00:24 +0000
Manifest next update: Mon 20 Apr 2026 10:00:24 +0000
Files and hashes: 1: Y8aRMIYRH1jVjryKKP1v8mGsOdc.roa (hash: 3j6bnXLc/3ckyPdMqKUjErtfoWBW1SDwWHfzwh4ftiY=)
2: aesALwAL1CbkpkDHHWwCAbUFDjQ.crl (hash: sjhwdN6H4Dj8tfyG5pqLo8X6vyc+SWlWcVJJLBTpw98=)
3: uFe4cVHbxr_G6s1--UuURiKCbYs.roa (hash: Fv5WNCecba9l/1dLNg+gP0QmW1CKOnk01tR8y8gBZWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:2f:27:b9:3a:a6:99:d0:b5:88:72:01:66:26:25:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69eb002f000bd426e4a640c71d6c0201b5050e34
Validity
Not Before: Apr 19 10:00:24 2026 GMT
Not After : Apr 20 10:00:24 2026 GMT
Subject: CN=020ec8e3c37a4acf9f60933904cd3d669cad6299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9d:e0:79:c2:e2:c7:f8:16:ee:e1:18:ab:ba:
28:62:ac:ac:3f:e0:4a:c4:32:35:c4:27:5c:b1:1d:
13:08:89:07:0c:98:62:30:64:bb:62:91:42:d8:04:
36:d5:12:7b:bd:a2:bb:2c:09:8b:e3:8e:e1:1a:43:
93:8c:68:c4:cc:68:5b:c1:0b:22:af:3c:2b:af:06:
32:0b:dc:3b:97:f1:e7:a6:9e:92:46:d5:7b:b9:29:
4b:39:ae:fe:d9:c8:08:3b:90:c5:1c:8b:13:e8:59:
e3:61:ec:ba:62:25:a2:a7:1d:3f:f7:ad:e6:e8:db:
cd:d6:1e:f5:79:d8:86:62:b1:6e:47:5e:ba:18:88:
ac:43:0f:1a:2a:ac:30:8a:c8:bc:af:62:9c:57:5e:
60:c6:a8:78:1c:0e:7b:43:8d:a0:f7:17:41:f7:16:
2e:7c:e5:e6:e9:e2:90:36:09:1d:37:b7:8a:f7:01:
85:49:11:d2:62:59:4b:a0:ee:88:96:92:be:b8:61:
1a:b3:35:59:a0:60:59:4a:bf:62:a5:6b:63:42:43:
19:1e:a9:f8:71:16:a8:45:3a:d0:e1:36:aa:4c:c1:
de:8e:17:17:35:7f:dd:ff:f0:50:5e:39:d3:c6:bc:
9c:16:a6:bf:94:ca:7b:75:e7:a4:a0:f8:25:ed:87:
5f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:0E:C8:E3:C3:7A:4A:CF:9F:60:93:39:04:CD:3D:66:9C:AD:62:99
X509v3 Authority Key Identifier:
keyid:69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:73:a6:ab:b5:00:05:d0:13:3c:05:3c:cb:b6:fe:76:b3:fc:
d6:b2:50:60:2a:74:dd:e8:46:6f:86:0f:8b:40:31:0e:02:1a:
17:d1:9f:7c:ea:9a:d9:48:59:fe:62:0f:5e:37:9a:cb:1b:75:
93:4a:dc:d0:29:2f:eb:9e:73:56:ec:05:c1:8f:52:3a:87:24:
1a:d2:9e:65:4d:01:18:ea:1c:3f:32:7f:35:9e:91:fa:25:88:
1c:75:0a:96:3a:07:98:65:27:5d:5f:28:42:78:eb:37:92:1a:
c7:94:12:05:f1:24:5d:e3:d8:f0:08:29:e8:05:d8:29:8b:21:
0b:c8:2c:39:25:5a:d1:a2:5f:8d:db:68:ab:33:2a:4e:54:bd:
4a:5f:a3:d4:45:e1:51:79:11:6d:e7:15:48:4f:e0:87:05:9f:
04:0b:e5:4e:1b:86:2c:7e:bc:39:1e:27:fc:d2:87:86:2f:1f:
6e:fc:8c:47:6c:0b:1a:d7:b9:a7:fc:dc:b0:df:4f:ae:36:ce:
1f:75:70:24:60:5e:3b:6f:1c:2e:a7:2d:eb:a1:6f:ff:3d:7b:
18:9e:4d:47:83:c3:f0:23:5e:5e:a8:c2:bf:03:6d:fe:70:4d:
13:b3:72:4e:95:f1:49:7c:28:59:ab:af:40:6d:ab:70:f4:29:
26:59:42:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:19:14 2026 by rpki-client