Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
File: aesALwAL1CbkpkDHHWwCAbUFDjQ.mft (raw, json)
Hash identifier: M61QGbjhG26KeSLkNvgKjixDaAThsc+6uWiB6/ZN6dQ=
Subject key identifier: 84:E0:1B:80:02:67:2A:72:23:7E:D0:BD:20:30:35:1A:AA:03:13:F3
Authority key identifier: 69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34
Certificate issuer: /CN=69eb002f000bd426e4a640c71d6c0201b5050e34
Certificate serial: 019EF56DB1901D6C1B113832C314124C3F5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
Manifest number: 18BD
Signing time: Tue 23 Jun 2026 17:01:07 +0000
Manifest this update: Tue 23 Jun 2026 17:01:07 +0000
Manifest next update: Wed 24 Jun 2026 17:01:07 +0000
Files and hashes: 1: aesALwAL1CbkpkDHHWwCAbUFDjQ.crl (hash: nkKEjPEneWRmM079/s3WBvtIxrbF22nGLAWIV5E8Irs=)
2: o_hUBXndKvvbdzISAd6rD0cHoMk.asa (hash: NgnlpeJggKrHizTOEK4IHp9zymg05RTjL+zoELCPJcw=)
3: uFe4cVHbxr_G6s1--UuURiKCbYs.roa (hash: Fv5WNCecba9l/1dLNg+gP0QmW1CKOnk01tR8y8gBZWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 24 Jun 2026 17:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f5:6d:b1:90:1d:6c:1b:11:38:32:c3:14:12:4c:3f:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69eb002f000bd426e4a640c71d6c0201b5050e34
Validity
Not Before: Jun 23 17:01:07 2026 GMT
Not After : Jun 24 17:01:07 2026 GMT
Subject: CN=84e01b8002672a72237ed0bd2030351aaa0313f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:bc:0e:af:56:e2:19:6b:3e:a4:3d:51:45:21:
d1:91:95:54:28:de:fb:80:a5:42:28:aa:9b:87:7b:
77:63:89:5f:89:98:9f:76:15:19:86:b7:13:01:5f:
e4:8b:c5:b2:41:57:d9:de:07:bb:27:f8:94:e6:48:
81:68:80:e6:64:d2:6f:41:4d:f6:a5:40:20:00:1b:
a9:12:36:64:ff:c2:1b:aa:7c:e3:3b:44:ae:84:fa:
05:24:aa:98:72:e2:ad:bf:11:4a:d6:65:ca:08:86:
6e:27:12:a1:e4:cc:f6:8f:fa:50:2e:3b:13:19:aa:
ce:4c:8c:af:78:56:41:99:b9:01:fe:fa:e2:05:ac:
3f:5f:51:5e:5b:fc:83:f1:13:cc:fa:a0:a5:18:77:
e8:e7:06:08:ff:0c:d1:80:df:7a:e2:10:d7:9a:fc:
75:10:b6:8f:43:8d:03:0d:d1:51:84:5e:4f:8b:8a:
59:8e:68:e4:a2:57:ab:88:5f:3a:e4:54:79:b8:27:
00:40:43:41:33:e6:45:aa:41:73:2f:81:6b:37:1c:
78:27:f3:49:19:ed:27:ae:45:ea:75:99:33:96:a1:
04:3f:8b:b1:7d:64:b2:65:29:e8:54:f0:79:b7:70:
8c:88:55:c1:a0:af:0b:8f:3d:ad:ad:be:5c:4a:c7:
e8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E0:1B:80:02:67:2A:72:23:7E:D0:BD:20:30:35:1A:AA:03:13:F3
X509v3 Authority Key Identifier:
keyid:69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:f4:4a:fa:1a:44:8d:ca:74:62:f6:2c:f8:21:7b:7c:26:ba:
b1:7e:38:b9:e3:a7:83:77:b3:59:63:4e:b7:27:17:8c:c2:e3:
a3:71:5b:bc:6a:28:60:2b:96:db:9a:83:ef:33:a8:02:dd:ae:
0f:53:af:93:c8:5b:35:1c:93:25:27:48:a2:80:05:04:36:ff:
57:07:f5:88:53:e5:0a:4e:93:97:0b:e2:b2:3d:78:d1:e2:e9:
70:fc:c8:53:dd:a6:36:7a:15:e6:ac:50:33:0d:d5:11:f2:55:
71:42:d6:45:2e:b3:0b:b6:cf:dc:76:6b:e3:cb:78:b5:7f:ec:
fb:d0:00:00:d1:87:0f:60:5f:f2:9a:a8:e7:9f:35:f0:2e:f3:
4b:13:b6:d0:d4:80:0b:37:f7:34:63:d9:c2:0d:c9:4e:50:c2:
7d:e1:38:33:b9:22:62:8c:01:6c:db:11:f3:29:73:19:4c:01:
f4:10:b7:36:de:34:82:4e:f3:a4:b1:fe:8d:23:dd:29:12:4b:
5a:bd:c5:c3:1f:06:f0:22:df:69:f2:f0:94:59:66:a6:48:7c:
eb:78:fe:17:5f:eb:7a:37:0a:4c:ea:76:96:b3:98:5f:ab:db:
ac:46:45:b7:89:7a:f0:2c:f6:a3:5a:a1:c1:4a:14:17:69:e1:
c0:20:ad:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 04:13:16 2026 by rpki-client