Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
File: aesALwAL1CbkpkDHHWwCAbUFDjQ.mft (raw, json)
Hash identifier: rL/cYqp+Dl2YrSc1Z3Vk25jbBrHF/MIU9w901AKCsC0=
Subject key identifier: E1:11:1F:C1:A2:3E:01:CE:B0:BE:70:54:B6:7F:52:F8:81:87:71:28
Authority key identifier: 69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34
Certificate issuer: /CN=69eb002f000bd426e4a640c71d6c0201b5050e34
Certificate serial: 019DCFABCA98949EB2553B48C48B701F1D4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
Manifest number: 1823
Signing time: Mon 27 Apr 2026 16:00:35 +0000
Manifest this update: Mon 27 Apr 2026 16:00:35 +0000
Manifest next update: Tue 28 Apr 2026 16:00:35 +0000
Files and hashes: 1: Y8aRMIYRH1jVjryKKP1v8mGsOdc.roa (hash: 3j6bnXLc/3ckyPdMqKUjErtfoWBW1SDwWHfzwh4ftiY=)
2: aesALwAL1CbkpkDHHWwCAbUFDjQ.crl (hash: +jX9h5Tzl5j3NaXv9/I+DCI4zqOULXY8vMKukkWoOZs=)
3: uFe4cVHbxr_G6s1--UuURiKCbYs.roa (hash: Fv5WNCecba9l/1dLNg+gP0QmW1CKOnk01tR8y8gBZWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 16:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:ab:ca:98:94:9e:b2:55:3b:48:c4:8b:70:1f:1d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69eb002f000bd426e4a640c71d6c0201b5050e34
Validity
Not Before: Apr 27 16:00:35 2026 GMT
Not After : Apr 28 16:00:35 2026 GMT
Subject: CN=e1111fc1a23e01ceb0be7054b67f52f881877128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:10:d3:6b:50:5b:04:b9:86:8b:f7:72:9c:a1:
f8:e4:32:c5:c3:1d:79:c6:2b:40:04:b2:82:4e:82:
46:5c:c1:eb:17:de:46:51:c1:75:6c:cd:4d:ce:51:
3d:cb:0b:13:1b:9b:ce:25:a0:bc:61:a5:73:bf:7b:
d5:e3:4e:66:7a:fd:54:04:84:74:4f:57:a2:26:88:
4c:10:ba:17:3c:dd:c4:ab:0a:cc:0c:91:85:ea:48:
75:86:c5:9a:9d:4f:76:d5:54:fa:40:75:fb:fd:7e:
08:30:e8:cd:0d:be:a8:f4:6b:94:cc:11:4a:fe:3f:
f7:b0:f7:30:56:cf:8d:be:61:8a:d4:d3:47:37:71:
14:62:f9:01:1b:1c:5b:ea:27:3c:2a:18:e4:98:e4:
54:92:eb:1a:a1:cd:43:63:7f:fc:f1:6b:f3:7a:01:
3f:30:bd:e4:c0:10:75:e8:a4:55:e5:ce:de:2e:e2:
82:0f:4a:50:9f:f5:47:ee:3b:5f:9f:3e:10:81:ad:
95:12:42:d3:98:76:3d:50:4f:af:c9:7c:b8:61:4b:
48:7d:6c:a3:ba:cb:12:aa:05:b9:64:9c:22:a3:5e:
1c:bc:8e:80:f1:0f:83:9d:34:67:44:aa:e3:63:88:
41:2b:25:f4:59:0a:18:e1:ba:3e:e4:b0:16:a3:e6:
88:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:11:1F:C1:A2:3E:01:CE:B0:BE:70:54:B6:7F:52:F8:81:87:71:28
X509v3 Authority Key Identifier:
keyid:69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:a9:61:e9:ae:47:b9:c1:b2:9a:8f:81:d1:1e:96:55:0b:ea:
63:28:53:d7:b2:ec:42:31:d6:3e:7c:3a:cc:c6:c3:e0:57:a5:
26:b1:b5:be:9a:70:3e:e7:fe:9c:58:64:2c:85:ae:34:d6:59:
dd:6c:07:b0:ab:a1:a0:41:c4:92:96:0d:70:e4:d6:09:0e:6f:
0d:54:77:11:7a:c6:f8:22:a4:8d:5d:f8:b7:eb:d2:92:c5:34:
80:a9:1b:04:cb:7f:a4:a5:8c:2e:5f:ae:6b:85:c8:d9:c0:f8:
9c:c4:4b:3c:6a:c2:0f:18:68:11:75:eb:c0:56:d9:82:5a:e2:
07:a1:0c:20:ce:34:12:ca:ed:3d:75:91:9a:ad:d7:b6:4d:30:
61:e8:42:08:44:c4:2e:e1:31:cf:d8:50:aa:7d:ef:c8:49:2d:
0a:aa:3d:b7:58:f3:4b:61:82:44:48:56:17:e8:46:71:51:3f:
c4:b0:33:62:62:12:22:fb:57:aa:95:06:43:c2:99:41:5a:0b:
4e:62:44:21:16:81:42:aa:53:80:7b:76:09:de:60:4f:73:7f:
c8:63:82:3f:a9:6f:01:85:55:fa:5f:f1:ff:b7:3b:d7:71:bd:
b4:73:d6:6b:10:a9:10:8e:fd:96:44:7d:5e:2c:ce:06:99:5b:
5f:fb:56:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3Pq8qYlJ6yVTtIxItwHx1NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZWIwMDJmMDAwYmQ0MjZlNGE2NDBjNzFkNmMwMjAxYjUw
NTBlMzQwHhcNMjYwNDI3MTYwMDM1WhcNMjYwNDI4MTYwMDM1WjAzMTEwLwYDVQQD
EyhlMTExMWZjMWEyM2UwMWNlYjBiZTcwNTRiNjdmNTJmODgxODc3MTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxDTa1BbBLmGi/dynKH45DLFwx15
xitABLKCToJGXMHrF95GUcF1bM1NzlE9ywsTG5vOJaC8YaVzv3vV405mev1UBIR0
T1eiJohMELoXPN3EqwrMDJGF6kh1hsWanU921VT6QHX7/X4IMOjNDb6o9GuUzBFK
/j/3sPcwVs+NvmGK1NNHN3EUYvkBGxxb6ic8KhjkmORUkusaoc1DY3/88WvzegE/
ML3kwBB16KRV5c7eLuKCD0pQn/VH7jtfnz4Qga2VEkLTmHY9UE+vyXy4YUtIfWyj
ussSqgW5ZJwio14cvI6A8Q+DnTRnRKrjY4hBKyX0WQoY4bo+5LAWo+aIFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOERH8GiPgHOsL5wVLZ/UviBh3EoMB8GA1UdIwQY
MBaAFGnrAC8AC9Qm5KZAxx1sAgG1BQ40MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWVzQUx3QUwxQ2JrcGtESEhXd0NBYlVGRGpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9kM2U2ODItMzM3MC00MjcxLTk0Mzct
Nzg1NDc1YzIyYzliLzEvYWVzQUx3QUwxQ2JrcGtESEhXd0NBYlVGRGpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9kM2U2ODItMzM3MC00MjcxLTk0MzctNzg1NDc1YzIyYzli
LzEvYWVzQUx3QUwxQ2JrcGtESEhXd0NBYlVGRGpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq6lh6a5H
ucGymo+B0R6WVQvqYyhT17LsQjHWPnw6zMbD4FelJrG1vppwPuf+nFhkLIWuNNZZ
3WwHsKuhoEHEkpYNcOTWCQ5vDVR3EXrG+CKkjV34t+vSksU0gKkbBMt/pKWMLl+u
a4XI2cD4nMRLPGrCDxhoEXXrwFbZglriB6EMIM40EsrtPXWRmq3Xtk0wYehCCETE
LuExz9hQqn3vyEktCqo9t1jzS2GCREhWF+hGcVE/xLAzYmISIvtXqpUGQ8KZQVoL
TmJEIRaBQqpTgHt2Cd5gT3N/yGOCP6lvAYVV+l/x/7c713G9tHPWaxCpEI79lkR9
XizOBplbX/tWnQ==
-----END CERTIFICATE-----
Generated at Tue Apr 28 00:53:01 2026 by rpki-client