Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
File: aesALwAL1CbkpkDHHWwCAbUFDjQ.mft (raw, json)
Hash identifier: PJgCv+0FAXy2K73fPWkDWaWGnsMQ++t8FbSVEh2pzPM=
Subject key identifier: 99:56:BE:18:5B:09:46:FA:1E:97:65:1A:B5:DD:FC:8C:D3:A1:9F:32
Authority key identifier: 69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34
Certificate issuer: /CN=69eb002f000bd426e4a640c71d6c0201b5050e34
Certificate serial: 019FF83539185F242AF02A45BE6B75732F18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
Manifest number: 1943
Signing time: Wed 12 Aug 2026 23:01:05 +0000
Manifest this update: Wed 12 Aug 2026 23:01:05 +0000
Manifest next update: Thu 13 Aug 2026 23:01:05 +0000
Files and hashes: 1: aesALwAL1CbkpkDHHWwCAbUFDjQ.crl (hash: y2+e98Tv7IAx/MxDW+/hHffZFigEdpZAa2xwET0ZAKw=)
2: o_hUBXndKvvbdzISAd6rD0cHoMk.asa (hash: NgnlpeJggKrHizTOEK4IHp9zymg05RTjL+zoELCPJcw=)
3: uFe4cVHbxr_G6s1--UuURiKCbYs.roa (hash: Fv5WNCecba9l/1dLNg+gP0QmW1CKOnk01tR8y8gBZWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 23:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:35:39:18:5f:24:2a:f0:2a:45:be:6b:75:73:2f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69eb002f000bd426e4a640c71d6c0201b5050e34
Validity
Not Before: Aug 12 23:01:05 2026 GMT
Not After : Aug 13 23:01:05 2026 GMT
Subject: CN=9956be185b0946fa1e97651ab5ddfc8cd3a19f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:bb:d7:a3:48:c9:28:4b:d0:e8:36:32:1c:fc:
01:a0:4d:d0:98:be:ab:ac:1d:b7:db:1e:d3:f5:84:
bc:71:e7:28:2a:95:ff:92:14:12:9c:a6:94:96:7a:
db:65:bd:32:a4:1a:11:ac:ce:85:c6:bf:82:f5:33:
10:df:a1:2d:53:c4:99:2f:93:ef:6c:9e:f2:37:90:
e4:b5:e4:06:26:bd:31:ed:cf:06:d5:11:c5:fa:99:
64:62:03:7b:38:5d:6c:2d:62:eb:2f:da:ce:5b:75:
a5:14:0b:c2:d4:2f:61:03:52:00:68:fa:df:08:09:
3a:30:92:24:01:9e:7c:ed:c3:14:88:63:ee:4a:9e:
89:d1:73:00:50:41:d7:f8:12:58:66:23:27:4a:cd:
82:8b:b0:a5:75:1f:4e:a9:82:88:95:8d:bf:d2:d5:
b0:25:f0:a3:58:54:93:47:2f:b1:ba:74:d1:de:4b:
1f:59:34:9a:24:79:56:9a:4e:4a:20:8a:65:01:6d:
2d:df:ea:21:3a:76:57:c8:d2:25:60:d6:1c:44:74:
e6:ed:3c:8d:68:30:bc:4a:b3:41:80:d5:2b:69:f8:
55:84:c8:11:60:57:41:59:33:d8:1c:84:b9:43:1f:
4a:18:97:7c:e2:f0:f0:d3:5f:31:cf:7e:e2:15:a5:
d7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:56:BE:18:5B:09:46:FA:1E:97:65:1A:B5:DD:FC:8C:D3:A1:9F:32
X509v3 Authority Key Identifier:
keyid:69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:75:f7:ab:fe:02:09:99:e6:cc:38:95:6a:4a:d1:38:0c:4c:
93:ac:d0:5e:f2:36:f9:00:c6:13:cd:1f:ba:0b:2d:01:19:65:
64:7f:f2:1a:60:bc:64:14:1b:ec:69:07:2c:eb:00:98:c3:e3:
50:bc:fb:21:f2:f1:10:e2:68:c1:b8:11:d7:1e:07:25:cd:d6:
95:cc:47:b3:59:93:ab:e9:56:8e:a3:34:3d:18:09:c1:73:da:
31:46:fc:25:58:93:85:06:f2:f4:19:39:1b:1d:3e:cf:ac:5e:
9a:d7:bc:5b:63:7c:74:cf:a4:da:00:6b:78:9e:3a:32:2b:e4:
ac:f3:d2:51:85:b8:9b:62:8a:3b:45:f7:f3:d0:2f:ba:6b:4a:
2b:50:d0:6d:ac:71:e2:b7:26:e1:dc:a3:9d:45:6e:cb:95:e1:
8a:a2:e8:c7:4b:ab:79:55:95:65:08:c2:63:5e:fc:b2:f2:f1:
5b:40:69:78:17:e3:5c:8a:cc:36:1b:a1:2a:6b:84:8d:74:c3:
14:2f:61:06:12:e3:29:03:31:c5:f9:d9:d0:2d:7c:e5:92:3c:
0a:6c:eb:41:b2:5c:fd:ce:64:5a:b4:e1:1b:60:ab:df:bd:95:
c1:94:03:35:c7:9e:ce:66:90:9e:ae:e8:f9:98:a2:a4:05:09:
e5:6e:1b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:02:42 2026 by rpki-client