Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
File: aesALwAL1CbkpkDHHWwCAbUFDjQ.mft (raw, json)
Hash identifier: PIWPzLVWIu96xo/A1wP7bvPPp5zOTJORP9s1fnWKeTw=
Subject key identifier: 82:13:62:5D:25:C9:EC:AA:42:48:54:BD:DC:68:01:27:A5:28:80:2F
Authority key identifier: 69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34
Certificate issuer: /CN=69eb002f000bd426e4a640c71d6c0201b5050e34
Certificate serial: 019DA3413DA6AF1D731D814086B397290CE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
Manifest number: 180C
Signing time: Sun 19 Apr 2026 01:00:54 +0000
Manifest this update: Sun 19 Apr 2026 01:00:54 +0000
Manifest next update: Mon 20 Apr 2026 01:00:54 +0000
Files and hashes: 1: Y8aRMIYRH1jVjryKKP1v8mGsOdc.roa (hash: 3j6bnXLc/3ckyPdMqKUjErtfoWBW1SDwWHfzwh4ftiY=)
2: aesALwAL1CbkpkDHHWwCAbUFDjQ.crl (hash: Tg7459woEkVyl4J9RLsZPgmd1mCPB8o2H8eGxmpbu44=)
3: uFe4cVHbxr_G6s1--UuURiKCbYs.roa (hash: Fv5WNCecba9l/1dLNg+gP0QmW1CKOnk01tR8y8gBZWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:41:3d:a6:af:1d:73:1d:81:40:86:b3:97:29:0c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69eb002f000bd426e4a640c71d6c0201b5050e34
Validity
Not Before: Apr 19 01:00:54 2026 GMT
Not After : Apr 20 01:00:54 2026 GMT
Subject: CN=8213625d25c9ecaa424854bddc680127a528802f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c9:ed:66:5e:70:e8:de:19:36:90:06:ae:c7:
35:47:2c:67:91:95:9d:42:2d:b5:4a:7f:ba:ba:9f:
cf:95:55:44:2b:66:01:0a:65:80:31:73:d5:cc:a6:
d5:6c:f3:a3:e9:8f:d0:e0:b5:c6:e7:03:cf:e9:69:
d6:60:da:62:ae:93:fd:9e:0c:d3:a3:d8:97:d7:c9:
78:94:e3:50:a5:2c:51:68:70:06:31:6e:d6:50:d3:
6b:ad:53:95:83:a7:31:9c:76:cb:47:6c:fa:3e:a4:
ab:ec:81:86:c2:0e:1d:27:d3:be:91:af:06:b0:b6:
67:a7:6f:06:cd:37:5c:53:09:89:42:75:e3:b9:ab:
ea:50:18:32:98:46:1d:43:74:5c:69:0d:64:3f:26:
78:55:5b:b9:dd:7c:2f:19:ee:ab:91:56:09:69:88:
e5:c2:ab:23:53:da:53:37:be:3c:2d:b7:ab:3f:95:
48:09:13:20:cc:9e:e5:7b:54:ab:19:5f:2f:3c:fa:
73:ae:3f:4d:b3:8e:6e:8a:6e:18:6b:7c:61:cf:19:
9b:cb:1e:9a:2e:bd:2e:ee:89:b7:d7:ac:16:c5:e2:
27:bd:d9:38:c0:10:8d:38:40:a1:6c:13:d7:17:58:
26:68:3f:69:c4:d7:8b:77:85:06:4e:0e:69:81:10:
86:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:13:62:5D:25:C9:EC:AA:42:48:54:BD:DC:68:01:27:A5:28:80:2F
X509v3 Authority Key Identifier:
keyid:69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:dc:1e:1e:5a:5f:a2:18:0d:b6:3b:86:6d:3d:35:cb:e0:5b:
0e:7c:12:47:23:f1:60:57:ad:a6:7f:97:4e:54:26:a7:15:91:
ab:42:d8:4b:51:34:10:d8:a6:f4:fc:d6:e5:ff:4a:15:b9:7f:
8e:0d:96:60:b2:de:7d:f1:d0:b0:ee:5d:e1:cc:9c:d7:9d:71:
8e:7e:cc:96:22:fd:ac:c5:53:f2:c3:4a:bd:e2:f6:f9:0a:26:
85:b3:53:77:de:e2:1e:d7:d3:f7:13:0e:22:df:a9:b6:ea:82:
45:61:db:4c:43:18:bf:75:00:83:a4:d4:d1:32:8c:7f:7a:8b:
1d:f3:51:b5:d5:39:22:89:ce:c0:92:85:7a:4c:e7:86:f5:32:
0e:fb:01:64:bd:1a:8d:0e:47:09:0d:8d:b9:a3:ac:fd:71:cb:
aa:e2:16:31:d0:fd:0a:e4:3a:74:da:36:d6:12:2d:f7:aa:6d:
f6:91:11:57:70:d7:b3:fe:85:de:6d:38:0b:f6:ab:3f:9e:75:
19:a3:a4:bf:84:29:36:dd:c2:c0:84:08:4e:a2:c4:75:57:89:
f7:ed:c6:53:31:b2:9e:85:10:e0:13:bd:2d:f6:ef:6e:9a:59:
d2:25:5b:00:74:af:bc:02:6d:9f:b3:94:21:35:c3:2b:89:84:
d8:f2:fb:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:18:48 2026 by rpki-client