Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
File: aesALwAL1CbkpkDHHWwCAbUFDjQ.mft (raw, json)
Hash identifier: lMezKWTMnpQfAbGwPVgXmG3TB7c9iy/Z5AIEAxdwoqs=
Subject key identifier: 26:33:4E:D8:7E:54:01:92:81:DE:E7:8A:0E:B1:70:B3:8F:31:14:8B
Authority key identifier: 69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34
Certificate issuer: /CN=69eb002f000bd426e4a640c71d6c0201b5050e34
Certificate serial: 019F6D29D7E62B540288657352AE3DEED86B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
Manifest number: 18FB
Signing time: Thu 16 Jul 2026 23:01:26 +0000
Manifest this update: Thu 16 Jul 2026 23:01:26 +0000
Manifest next update: Fri 17 Jul 2026 23:01:26 +0000
Files and hashes: 1: aesALwAL1CbkpkDHHWwCAbUFDjQ.crl (hash: BS+pVgz2hhIU+9WycTRyVH4GSdr1XtaS5okta4iKCRI=)
2: o_hUBXndKvvbdzISAd6rD0cHoMk.asa (hash: NgnlpeJggKrHizTOEK4IHp9zymg05RTjL+zoELCPJcw=)
3: uFe4cVHbxr_G6s1--UuURiKCbYs.roa (hash: Fv5WNCecba9l/1dLNg+gP0QmW1CKOnk01tR8y8gBZWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Jul 2026 23:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6d:29:d7:e6:2b:54:02:88:65:73:52:ae:3d:ee:d8:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69eb002f000bd426e4a640c71d6c0201b5050e34
Validity
Not Before: Jul 16 23:01:26 2026 GMT
Not After : Jul 17 23:01:26 2026 GMT
Subject: CN=26334ed87e54019281dee78a0eb170b38f31148b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:eb:a2:e4:3e:83:b6:01:69:6a:57:71:0b:44:
12:a7:89:71:9f:89:15:2d:84:93:d0:c4:53:4a:04:
d8:d7:84:4f:64:b4:6b:41:fa:af:96:b4:01:c6:d7:
29:f2:ef:30:17:a8:30:46:89:44:c6:66:cb:6f:b9:
4a:7d:fe:1d:2d:85:7a:08:92:a2:f2:51:d3:db:84:
6e:13:c8:ef:15:b3:a3:54:66:77:ce:5a:9b:35:1d:
c6:ba:51:ee:d0:96:e3:d8:d8:bf:fa:1f:38:e5:b1:
aa:bd:d0:9b:e8:bc:bd:b3:6d:00:ff:65:3e:c9:91:
9b:28:67:2b:f9:44:48:f4:8e:b4:7f:a7:fe:c8:e5:
9d:e4:a4:de:e9:cd:40:48:3e:42:52:76:1c:56:9c:
14:85:c2:6a:aa:3c:c4:b9:17:0b:9a:2c:da:dd:87:
b6:3c:df:24:5e:4b:07:7d:fb:82:a4:fe:60:d0:4c:
96:d7:91:77:bf:f8:96:9f:cc:c6:8c:d6:0a:14:a9:
9f:49:f6:b8:3c:d7:ed:7e:51:bf:8f:22:37:a2:47:
30:ce:bc:42:8f:b8:91:39:14:45:9d:36:54:35:87:
a7:de:f5:2a:e9:eb:cc:09:be:19:3a:12:b6:aa:98:
cc:99:c7:b1:7f:1e:8c:8b:18:63:25:91:10:66:dd:
23:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:33:4E:D8:7E:54:01:92:81:DE:E7:8A:0E:B1:70:B3:8F:31:14:8B
X509v3 Authority Key Identifier:
keyid:69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:c7:63:92:20:8d:aa:15:11:1e:17:3a:98:78:4e:63:ef:05:
ee:02:e0:eb:8b:54:0d:04:30:32:fd:a4:e6:1a:b6:89:7f:5a:
dc:7e:00:73:87:2b:f0:4e:2d:91:1e:39:98:98:c7:a9:35:9e:
31:37:fc:3d:53:76:a5:c1:eb:af:20:ea:db:d3:b4:e1:ec:d5:
bf:74:c6:65:e0:45:80:32:18:83:d8:11:c2:76:6b:de:fc:bf:
40:ec:01:b1:1d:a2:be:dc:c6:3c:71:28:49:64:93:10:28:50:
ce:c9:11:81:87:d7:9e:3f:f8:ed:07:06:5b:70:67:b8:8e:46:
a7:64:f3:4a:c6:cd:e2:98:55:a8:89:6d:0e:46:72:4c:92:f2:
28:b9:a7:39:62:6a:3c:d3:18:0f:02:ea:f3:db:0d:ec:6e:5c:
6d:92:5e:d8:15:d6:5e:27:ec:cb:b3:50:d7:73:87:b1:92:63:
c0:fa:48:cc:d6:97:db:dd:fa:24:4d:22:80:a2:a9:3d:3c:53:
d6:58:27:1f:3a:30:72:f9:f8:c4:d2:6d:3c:37:0b:58:0a:5e:
02:96:94:7f:4f:36:b7:65:35:b5:43:7c:b3:9f:93:94:89:f0:
fe:ab:d7:64:0d:f7:bd:dc:09:f2:6a:8b:34:88:05:65:3f:ea:
c2:a6:70:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 04:46:57 2026 by rpki-client