Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
File: aesALwAL1CbkpkDHHWwCAbUFDjQ.mft (raw, json)
Hash identifier: RjqFfsJnU5lnbqUdVt7xTba3dJ6mRUYTZzp+HRIwWjw=
Subject key identifier: F1:AB:14:A4:3E:81:54:90:EB:35:0B:59:4A:FB:45:A1:18:F8:12:EE
Authority key identifier: 69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34
Certificate issuer: /CN=69eb002f000bd426e4a640c71d6c0201b5050e34
Certificate serial: 019EBF5A5C624031A064650AD7775CF9001F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
Manifest number: 18A1
Signing time: Sat 13 Jun 2026 05:00:30 +0000
Manifest this update: Sat 13 Jun 2026 05:00:30 +0000
Manifest next update: Sun 14 Jun 2026 05:00:30 +0000
Files and hashes: 1: aesALwAL1CbkpkDHHWwCAbUFDjQ.crl (hash: EtA2b7Roa3glz0X5ALKf0ELLjcpHVDm5SZn6mJSx4w4=)
2: o_hUBXndKvvbdzISAd6rD0cHoMk.asa (hash: NgnlpeJggKrHizTOEK4IHp9zymg05RTjL+zoELCPJcw=)
3: uFe4cVHbxr_G6s1--UuURiKCbYs.roa (hash: Fv5WNCecba9l/1dLNg+gP0QmW1CKOnk01tR8y8gBZWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:5c:62:40:31:a0:64:65:0a:d7:77:5c:f9:00:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69eb002f000bd426e4a640c71d6c0201b5050e34
Validity
Not Before: Jun 13 05:00:30 2026 GMT
Not After : Jun 14 05:00:30 2026 GMT
Subject: CN=f1ab14a43e815490eb350b594afb45a118f812ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f2:96:39:0f:31:d6:7e:e9:3f:bd:5d:33:3c:
dc:a9:d0:1d:5c:a0:9c:9c:80:06:ee:1e:01:06:ef:
50:92:71:60:68:fd:4f:b7:41:f8:82:5f:1b:28:99:
80:5b:13:ea:ca:33:df:27:76:c1:68:d9:6c:b7:d0:
5f:5b:2f:a6:22:9d:32:84:77:d8:8d:03:7d:3f:74:
54:a6:08:cd:dd:8f:12:8a:64:cd:73:e2:79:9f:33:
ec:1e:1c:f9:2e:b5:8d:34:c0:be:31:25:0e:ba:30:
a0:38:f7:ae:76:42:bc:5e:8b:61:85:e8:e7:5f:9f:
18:8c:9d:56:55:3e:10:e3:17:b6:ba:44:64:a5:12:
99:be:bf:dc:33:e0:84:b9:b2:29:cd:54:4f:e8:ae:
d8:7b:43:96:45:a7:4b:8c:fe:d1:e7:4b:1d:36:67:
b5:97:c6:70:77:62:d7:d0:f2:a8:e0:31:51:6f:1e:
ac:dd:cd:70:ae:80:a3:46:b5:a0:83:28:45:e7:7f:
76:92:32:62:bb:8a:77:9b:ba:b0:d0:66:ea:4e:22:
da:6e:5c:e4:70:40:6a:84:b3:71:b1:47:62:48:98:
aa:b4:9e:7f:69:7e:0b:f5:a7:15:b9:21:b0:9f:27:
a7:ef:bd:82:ea:6b:fc:f8:8f:19:08:4e:7c:0f:02:
65:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:AB:14:A4:3E:81:54:90:EB:35:0B:59:4A:FB:45:A1:18:F8:12:EE
X509v3 Authority Key Identifier:
keyid:69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ed:3d:20:01:8e:d6:f4:dd:93:17:a3:f5:90:67:d9:1a:1a:
bd:db:7a:e0:db:cb:74:36:77:fc:87:27:0f:a4:98:cc:3d:50:
0c:60:26:a1:97:2c:c5:74:69:01:6e:b6:74:83:32:da:4c:59:
d3:4d:22:38:19:a2:af:92:45:b1:48:a3:d3:a2:e5:4a:0a:e3:
79:7d:c0:4d:45:8b:5b:fd:97:51:48:a5:72:89:e5:21:6b:3a:
b7:df:93:2f:68:dc:92:7e:0c:18:3f:c4:a4:50:8a:d6:a3:06:
c7:b8:ef:78:54:fc:41:6c:46:34:0c:19:32:2d:4e:de:52:98:
32:a6:28:9a:1c:20:20:bc:c3:8b:8f:0c:b5:7d:ae:bd:12:de:
77:fa:b4:40:70:ae:c8:4f:65:d1:bf:b5:cc:a4:be:a1:5b:02:
a8:8f:87:7f:36:9f:47:4e:f1:20:1e:76:34:8b:a3:c1:1e:6b:
56:8f:b9:17:13:1b:77:e6:47:71:e6:5a:84:a5:42:24:e5:8d:
19:3d:91:f5:ff:32:bc:a1:60:ab:c3:79:91:98:54:22:2d:82:
a2:6c:88:c1:a4:3d:3a:83:f3:5c:d5:a6:74:b8:46:df:4d:59:
1c:07:74:0d:6f:e1:27:fe:41:92:7e:61:44:24:2d:b9:3d:eb:
26:0f:0a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:51:08 2026 by rpki-client