Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
File: aesALwAL1CbkpkDHHWwCAbUFDjQ.mft (raw, json)
Hash identifier: 62x9dISRA2fu+k0HbjgfonJ89Egm1aw5fq4Jn5YS/3k=
Subject key identifier: BA:7E:6F:37:8B:54:09:C9:29:C0:68:79:53:38:20:43:9E:06:0C:C1
Authority key identifier: 69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34
Certificate issuer: /CN=69eb002f000bd426e4a640c71d6c0201b5050e34
Certificate serial: 019F8FECC48947DAAD9926E03F1048DCDCA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
Manifest number: 190D
Signing time: Thu 23 Jul 2026 17:01:26 +0000
Manifest this update: Thu 23 Jul 2026 17:01:26 +0000
Manifest next update: Fri 24 Jul 2026 17:01:26 +0000
Files and hashes: 1: aesALwAL1CbkpkDHHWwCAbUFDjQ.crl (hash: MqEMKRdxnyqVFfytWQVEqydjmUvyroDpoh+IUOeiNZE=)
2: o_hUBXndKvvbdzISAd6rD0cHoMk.asa (hash: NgnlpeJggKrHizTOEK4IHp9zymg05RTjL+zoELCPJcw=)
3: uFe4cVHbxr_G6s1--UuURiKCbYs.roa (hash: Fv5WNCecba9l/1dLNg+gP0QmW1CKOnk01tR8y8gBZWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:c4:89:47:da:ad:99:26:e0:3f:10:48:dc:dc:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69eb002f000bd426e4a640c71d6c0201b5050e34
Validity
Not Before: Jul 23 17:01:26 2026 GMT
Not After : Jul 24 17:01:26 2026 GMT
Subject: CN=ba7e6f378b5409c929c06879533820439e060cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:6e:f9:ee:93:fe:8b:ab:27:9c:e2:8f:25:f7:
ea:2b:18:8f:ed:ac:d3:3e:09:b2:bf:36:db:31:ed:
ac:53:9a:98:a6:25:86:e6:8e:4d:c0:a3:2c:d8:3d:
18:d3:c2:a4:8a:3d:e8:fb:6d:3c:a2:8c:ca:7e:a6:
4b:1f:a5:44:6f:a9:a2:2f:b3:e5:e7:7c:77:8e:bc:
e8:e3:87:8d:c9:81:ff:80:c5:97:e1:3e:fb:7a:34:
d6:e6:bd:a2:9a:fb:c3:e3:ed:8e:cc:79:5e:d3:43:
03:1c:17:71:24:ef:5d:75:d8:93:fd:04:d4:28:38:
db:59:69:e5:b3:89:77:59:9b:58:61:4b:d3:0e:7c:
9a:57:33:34:cb:ad:94:9e:5e:d2:cd:1b:6f:1f:de:
a6:da:ee:0d:9e:57:c3:bc:97:14:9b:d9:48:40:98:
08:67:4d:9f:e8:a8:d6:c1:ab:5d:ec:5d:b6:c9:20:
d5:64:e2:32:3a:fd:6f:36:85:54:dc:cb:75:5a:c5:
8e:32:c2:c3:8c:a0:a6:cf:a5:02:e4:8e:c9:73:5d:
14:81:b4:82:8d:e7:02:b5:42:33:d1:bd:7a:ee:63:
b8:d6:8f:8c:81:4a:38:55:83:72:76:7b:ec:0a:53:
8f:c1:b1:3e:46:9c:07:a5:a3:0c:e0:94:33:ba:6f:
ed:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:7E:6F:37:8B:54:09:C9:29:C0:68:79:53:38:20:43:9E:06:0C:C1
X509v3 Authority Key Identifier:
keyid:69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:31:26:ab:74:91:c5:47:72:74:cf:c1:ed:3e:ff:0c:68:97:
f6:e7:a4:10:2c:86:2d:1e:e5:46:7f:3e:03:76:c4:dd:e5:4c:
64:26:5f:65:1a:6b:d9:19:40:c1:d8:50:52:8d:f2:81:b4:84:
e9:7c:cb:4c:46:c0:8d:c8:2a:bd:e2:26:5d:69:44:79:f7:25:
21:5a:f8:27:8e:76:17:72:77:ff:20:ec:a1:b2:86:81:a5:78:
9c:e0:22:e3:4f:58:fe:21:f4:fa:13:73:dd:0e:01:3b:30:82:
91:31:df:c6:06:52:e6:fa:a7:d1:3f:c7:21:6e:3e:51:2d:52:
85:45:96:9f:59:94:5e:b1:54:4d:81:dd:46:c2:45:1f:82:e4:
ba:b5:be:0f:3e:6e:43:a4:b2:17:e3:28:a0:e9:cb:62:ae:c7:
72:38:11:07:cf:62:ca:78:20:a2:52:02:32:6b:0c:b8:82:78:
a6:99:cc:11:dc:26:b7:35:71:80:8e:e1:c5:e4:56:1b:3c:8c:
e7:28:32:3e:77:9b:30:e0:91:02:ed:23:c8:f3:4a:bf:d9:7e:
3a:68:77:0b:f3:39:c2:be:e7:29:83:78:8d:2a:52:5f:63:f3:
4d:76:93:ce:f6:54:2c:e3:3f:77:49:55:58:59:31:0b:7e:74:
50:53:d7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:26 2026 by rpki-client