Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
File: aesALwAL1CbkpkDHHWwCAbUFDjQ.mft (raw, json)
Hash identifier: Cx7AyoUJimNL8KG/qRuX6tWQwFtk52Dis+6nb0d8ZzQ=
Subject key identifier: C9:21:82:82:79:CE:62:AF:5C:3A:1D:A3:15:B6:45:9A:C6:0D:F8:17
Authority key identifier: 69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34
Certificate issuer: /CN=69eb002f000bd426e4a640c71d6c0201b5050e34
Certificate serial: 019CAC0FDAABEE73681DB82D43AB3F5338A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
Manifest number: 178C
Signing time: Mon 02 Mar 2026 01:00:45 +0000
Manifest this update: Mon 02 Mar 2026 01:00:45 +0000
Manifest next update: Tue 03 Mar 2026 01:00:45 +0000
Files and hashes: 1: Y8aRMIYRH1jVjryKKP1v8mGsOdc.roa (hash: 3j6bnXLc/3ckyPdMqKUjErtfoWBW1SDwWHfzwh4ftiY=)
2: aesALwAL1CbkpkDHHWwCAbUFDjQ.crl (hash: 2WfcwPNjlX5i8WOCLUz3AV3u5nPf7VZ36UQ9N2CdtrE=)
3: uFe4cVHbxr_G6s1--UuURiKCbYs.roa (hash: Fv5WNCecba9l/1dLNg+gP0QmW1CKOnk01tR8y8gBZWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:da:ab:ee:73:68:1d:b8:2d:43:ab:3f:53:38:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69eb002f000bd426e4a640c71d6c0201b5050e34
Validity
Not Before: Mar 2 01:00:45 2026 GMT
Not After : Mar 3 01:00:45 2026 GMT
Subject: CN=c921828279ce62af5c3a1da315b6459ac60df817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:1f:bb:ec:32:0a:fa:94:48:67:e1:d4:c5:0c:
0c:f7:07:bf:6d:12:e4:31:b8:c1:eb:4e:01:68:e3:
9e:75:92:7a:54:d3:e7:09:51:ae:d5:07:1f:0f:4e:
53:23:91:49:a3:6b:0a:59:83:03:a8:a7:08:2a:eb:
17:7e:e6:39:39:77:4a:f5:37:82:cd:4a:bc:25:c9:
16:b2:d5:d2:16:07:a1:a6:17:fe:5a:cb:6e:24:75:
ea:4d:44:0c:2d:a2:37:30:78:dd:8c:14:56:96:2d:
8a:31:dd:ee:2f:a0:2a:69:69:52:c9:b3:8b:18:a2:
95:61:56:69:62:46:24:31:67:e7:09:0b:eb:c8:21:
59:7d:77:26:8d:ed:30:76:72:43:94:f6:11:cf:71:
05:f3:c8:db:6b:d0:a2:5a:2c:ab:df:00:27:74:66:
97:20:08:ea:9b:b9:d2:ee:f3:c0:e8:56:94:ea:72:
b8:38:aa:97:c4:e6:d8:2c:64:d2:ab:14:be:5c:24:
3d:f8:67:2f:20:32:1e:9e:97:de:b6:21:19:00:e5:
b1:a2:53:14:90:7b:de:1c:a9:dc:e0:c6:fe:26:2a:
c1:a4:dd:d1:e7:1f:0d:48:cc:d8:b7:13:52:6c:b2:
13:93:61:9e:16:95:f5:cb:19:d9:15:aa:a2:48:0b:
20:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:21:82:82:79:CE:62:AF:5C:3A:1D:A3:15:B6:45:9A:C6:0D:F8:17
X509v3 Authority Key Identifier:
keyid:69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:6b:d2:f2:29:83:41:34:f2:a7:b2:d2:1b:96:4a:e7:3f:90:
9f:ab:55:0a:5c:2f:ca:bc:00:bb:cf:e8:1a:ff:46:f0:fa:e0:
f9:fb:b4:dc:60:a3:7e:03:3a:1d:1d:f0:f9:91:e2:99:b7:54:
e6:43:66:8e:de:87:4f:fa:47:3f:49:8d:44:26:b9:a4:1e:85:
41:59:41:26:e5:2b:44:79:1e:c3:1f:2c:99:72:71:4f:dc:db:
47:4b:65:f1:33:e8:a6:fe:c2:03:86:25:95:5d:f4:3e:e0:e4:
1d:e7:a0:95:8e:69:42:f7:2c:c6:60:e0:8a:2b:df:cc:61:3c:
26:5b:35:b5:f5:a4:77:7d:99:4d:61:f3:5d:74:fa:58:35:70:
b8:01:99:d8:f3:02:ff:da:80:91:e8:93:26:b6:88:f2:5d:43:
74:23:b3:aa:89:a2:c0:26:c1:c5:d3:67:e7:29:ae:10:19:2f:
0d:10:05:f6:03:91:52:c1:7c:90:2f:2f:a0:e6:5e:ac:10:2e:
89:ea:93:ed:7d:a2:c2:e8:4b:96:c7:67:f8:12:4b:e1:a0:d7:
8e:3d:28:72:94:69:a5:25:2b:0b:f7:50:f7:38:ab:ce:c2:56:
8b:87:17:9b:bb:eb:a0:3e:d2:6a:1d:10:65:2e:de:fc:37:31:
c3:b0:bf:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:02 2026 by rpki-client