Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
File: aesALwAL1CbkpkDHHWwCAbUFDjQ.mft (raw, json)
Hash identifier: vg9RkAOVK/llb3baJtSVKXbEvvi+/A7YjHvc+eIMToc=
Subject key identifier: B7:9B:BE:30:96:AB:C3:F6:FC:CF:7E:C8:E0:C6:3A:A0:49:F3:79:D1
Authority key identifier: 69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34
Certificate issuer: /CN=69eb002f000bd426e4a640c71d6c0201b5050e34
Certificate serial: 019CE5FF06F32D65218C84FEBC149BFDF644
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
Manifest number: 17AA
Signing time: Fri 13 Mar 2026 07:00:21 +0000
Manifest this update: Fri 13 Mar 2026 07:00:21 +0000
Manifest next update: Sat 14 Mar 2026 07:00:21 +0000
Files and hashes: 1: Y8aRMIYRH1jVjryKKP1v8mGsOdc.roa (hash: 3j6bnXLc/3ckyPdMqKUjErtfoWBW1SDwWHfzwh4ftiY=)
2: aesALwAL1CbkpkDHHWwCAbUFDjQ.crl (hash: 5D9s+7wplfK0QhPyttq+OW3UUwfwkCrw/4iWS3+e8FY=)
3: uFe4cVHbxr_G6s1--UuURiKCbYs.roa (hash: Fv5WNCecba9l/1dLNg+gP0QmW1CKOnk01tR8y8gBZWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 07:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:ff:06:f3:2d:65:21:8c:84:fe:bc:14:9b:fd:f6:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69eb002f000bd426e4a640c71d6c0201b5050e34
Validity
Not Before: Mar 13 07:00:21 2026 GMT
Not After : Mar 14 07:00:21 2026 GMT
Subject: CN=b79bbe3096abc3f6fccf7ec8e0c63aa049f379d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:dc:1b:a6:30:82:f1:eb:24:85:98:da:e0:5b:
e7:43:8e:e6:04:b7:fa:89:0d:ba:97:46:5a:45:e6:
32:e4:18:75:cc:a0:ac:3e:f8:cf:64:33:3f:5e:59:
2e:01:f6:97:ca:cb:bb:3e:6d:6e:32:9f:2a:06:2d:
ea:20:be:0d:17:fd:2a:f7:5f:bd:c4:de:02:90:ec:
5f:42:3f:65:73:b9:7e:ab:7d:0a:39:6a:fa:62:75:
24:85:16:ff:cc:6f:8f:77:e1:3a:f6:66:f2:fc:52:
12:69:42:65:0a:a8:f7:e6:82:6c:74:a0:15:18:6e:
e9:05:ba:4a:8a:b4:eb:ed:37:c5:82:50:1a:91:17:
d3:1f:12:89:8c:77:6a:55:25:e3:27:21:bf:c9:20:
92:cf:b5:1f:58:99:07:0b:02:98:17:c1:cc:5d:4e:
20:2c:d5:16:7d:9e:a0:8e:b8:87:20:c8:9f:0f:4e:
5a:c4:36:da:9e:51:49:6b:4f:8e:d3:f7:34:3d:8e:
55:44:a6:3a:ad:1e:07:5a:d3:f2:a2:86:29:44:da:
db:ce:43:e2:ea:d6:37:fe:5d:28:4b:84:37:1e:6c:
b0:30:02:13:13:2b:e0:68:a6:dd:ee:7a:d4:02:87:
76:72:3a:da:40:86:76:3e:35:7b:c0:d2:01:e0:4d:
52:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:9B:BE:30:96:AB:C3:F6:FC:CF:7E:C8:E0:C6:3A:A0:49:F3:79:D1
X509v3 Authority Key Identifier:
keyid:69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:db:fb:95:6a:96:8e:db:79:2b:94:f3:f9:e8:3c:65:f8:19:
c4:14:7e:0c:5a:bd:d3:dd:9f:0f:02:ce:e7:dd:2e:a2:72:96:
19:9d:9c:2f:17:d0:37:b8:a3:ec:34:25:a6:8b:85:a3:bc:c4:
6f:d0:53:2b:f0:81:75:26:a9:7e:c0:dc:c6:7f:60:03:29:12:
90:57:1d:6f:f1:dc:93:bb:03:ad:1f:bf:ac:4c:55:9f:c1:8a:
fe:a9:c0:ce:ba:e3:c4:a9:c7:ad:79:58:da:b0:20:07:ff:3b:
4b:13:04:58:af:d7:f0:4c:f3:59:00:51:e1:93:12:62:dd:b8:
b1:64:eb:52:9e:7f:73:0d:b3:b5:2a:3b:5a:7e:42:6f:e0:81:
05:06:d4:41:45:38:cb:51:a1:d9:46:bc:c9:89:88:dd:6c:0d:
94:8a:63:83:21:91:1e:19:5d:8e:80:1c:e3:5c:ee:ab:d9:ef:
38:16:82:d7:db:38:74:3a:2d:ce:75:89:e9:98:a9:06:be:09:
04:c2:27:7f:67:6d:b7:01:4c:fa:60:d9:df:aa:0a:e1:2d:c6:
5c:5b:15:68:a2:5d:92:16:06:8c:31:e1:e4:58:1c:c2:9f:e3:
9c:71:45:05:ee:9f:44:d9:3f:52:92:ed:9c:a5:53:1b:b4:cf:
a5:26:82:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:51:58 2026 by rpki-client