Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
File: aesALwAL1CbkpkDHHWwCAbUFDjQ.mft (raw, json)
Hash identifier: Wi5Qo7rr6hwsjPUgLdxiQ+8+pKBS5aw8FNMePLdTYpU=
Subject key identifier: 93:6B:9E:DF:F7:B9:B1:8E:E7:E3:3B:84:BB:0F:21:CC:6A:36:5A:62
Authority key identifier: 69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34
Certificate issuer: /CN=69eb002f000bd426e4a640c71d6c0201b5050e34
Certificate serial: 01A0D7CD60AB0D94F59E8D0FB9A34256ADC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
Manifest number: 19B7
Signing time: Fri 25 Sep 2026 09:02:35 +0000
Manifest this update: Fri 25 Sep 2026 09:02:35 +0000
Manifest next update: Sat 26 Sep 2026 09:02:35 +0000
Files and hashes: 1: 22czVAVfb6NGXSC4sIFt9S-UT44.asa (hash: nlpdMfUz/LgI9MnFoPN71TMamMbPx9faJTypOf9lIxI=)
2: aesALwAL1CbkpkDHHWwCAbUFDjQ.crl (hash: pPZAerkTIPmTcWLLhsC1apjy2FzqOE4gURuTX/lY51k=)
3: uFe4cVHbxr_G6s1--UuURiKCbYs.roa (hash: Fv5WNCecba9l/1dLNg+gP0QmW1CKOnk01tR8y8gBZWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cd:60:ab:0d:94:f5:9e:8d:0f:b9:a3:42:56:ad:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69eb002f000bd426e4a640c71d6c0201b5050e34
Validity
Not Before: Sep 25 09:02:35 2026 GMT
Not After : Sep 26 09:02:35 2026 GMT
Subject: CN=936b9edff7b9b18ee7e33b84bb0f21cc6a365a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5e:82:56:f9:dc:ba:04:26:73:da:57:04:b8:
35:19:25:f3:b5:da:2e:d5:70:d7:99:fb:60:1d:20:
8d:c6:67:2b:c4:d1:42:b1:e9:f7:83:cd:96:6d:8b:
11:61:00:bf:5a:c8:20:fa:20:f7:39:d0:2a:eb:4a:
1f:79:ac:c4:45:69:de:be:36:fd:4e:8a:b6:21:6a:
02:f7:a9:b3:38:b9:c9:14:cb:c6:d8:bc:07:4a:57:
1a:3e:72:cb:42:ca:ac:24:e7:fe:6b:d1:3b:8c:f0:
b9:bf:16:69:b7:1f:0d:c6:4f:71:60:f8:93:65:15:
e3:eb:a4:d6:58:15:b8:b9:fc:59:dd:fe:06:84:fe:
fc:78:1c:74:5d:47:6e:ea:06:9d:4a:8c:4f:d1:4c:
c0:77:cf:09:d6:37:94:db:5d:df:48:b8:81:ee:1f:
dc:2a:ee:7d:5d:45:a6:f1:4a:56:8d:fc:25:d5:be:
7a:36:8f:bb:09:5c:5a:8d:36:f8:7f:ec:a5:e8:88:
a7:a2:70:0c:f2:34:c5:50:64:81:3c:d9:b1:f8:c6:
cc:4b:da:9c:e7:31:a0:25:34:34:11:af:6f:03:1e:
1f:9f:c1:0a:4d:5f:9d:0f:a3:71:d1:d7:13:83:cd:
7a:fd:7d:5d:47:e9:fe:72:68:95:30:08:5c:b3:8d:
3a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:6B:9E:DF:F7:B9:B1:8E:E7:E3:3B:84:BB:0F:21:CC:6A:36:5A:62
X509v3 Authority Key Identifier:
keyid:69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:df:fd:8a:cd:e3:9e:39:36:e1:f9:9a:ef:f4:02:02:ab:26:
6a:95:7f:19:5b:91:10:ca:22:af:17:ba:85:c2:2b:b3:ad:5e:
6e:9b:65:4b:79:d9:c6:be:52:e2:ef:b0:fb:ab:4f:64:74:93:
bc:f7:16:05:be:b6:e8:0b:5d:02:a4:b9:78:2d:a3:1e:f7:a9:
2b:d4:48:ac:bb:49:87:9f:8a:11:a7:5c:d4:4e:0a:d1:0f:56:
b0:c0:e5:d3:c2:66:05:96:a0:b0:b3:93:df:cb:eb:07:cd:c2:
02:ae:f1:a5:06:a5:3f:39:6e:64:c1:2c:56:2f:e1:68:8c:ea:
af:a1:b1:7e:2a:48:58:cd:a8:80:ee:92:90:c2:16:24:78:1a:
dd:0f:c1:e1:ff:84:84:fa:c5:18:92:74:af:4b:4d:36:16:2f:
26:c6:f0:ea:98:09:a7:f0:09:fb:5c:9c:e2:ce:e5:27:04:44:
0f:66:ec:46:33:db:19:ed:ff:d2:a8:0d:99:dc:be:f5:43:c7:
c9:0e:83:35:98:aa:46:3d:66:d1:0d:36:60:af:e9:4f:89:fc:
c4:28:92:55:77:73:3f:82:bb:4d:0c:91:e5:95:57:64:fd:8d:
02:bb:49:63:75:9b:15:12:dd:75:a3:39:8c:83:72:7e:5c:3a:
da:25:0d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:28:39 2026 by rpki-client