Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.mft
File: _aZpttXiJAUBetNZh8xXrJYjnJo.mft (raw, json)
Hash identifier: vcXBiwZqSuYkS7M8gWygxUk/e3JeQDsNHZuhjWTZtl8=
Subject key identifier: A5:CC:27:01:66:C4:09:0A:48:FF:72:FF:C9:F7:1A:70:B0:F8:95:AA
Authority key identifier: FD:A6:69:B6:D5:E2:24:05:01:7A:D3:59:87:CC:57:AC:96:23:9C:9A
Certificate issuer: /CN=fda669b6d5e22405017ad35987cc57ac96239c9a
Certificate serial: 019CAEA31707A4E8F25D8040A4E82306C64E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_aZpttXiJAUBetNZh8xXrJYjnJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 13:00:49 +0000
Manifest this update: Mon 02 Mar 2026 13:00:49 +0000
Manifest next update: Tue 03 Mar 2026 13:00:49 +0000
Files and hashes: 1: _aZpttXiJAUBetNZh8xXrJYjnJo.crl (hash: 4XIwP4lgxh4L8UQOUL53eq2pJPNfRMqZ5OSrbKfEXsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_aZpttXiJAUBetNZh8xXrJYjnJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:17:07:a4:e8:f2:5d:80:40:a4:e8:23:06:c6:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fda669b6d5e22405017ad35987cc57ac96239c9a
Validity
Not Before: Mar 2 13:00:49 2026 GMT
Not After : Mar 3 13:00:49 2026 GMT
Subject: CN=a5cc270166c4090a48ff72ffc9f71a70b0f895aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7d:41:6e:b1:a5:d4:49:13:f7:7b:b0:2b:1c:
66:81:5c:15:4e:b8:3a:62:d2:94:b0:d4:16:dd:dd:
bc:d8:1a:9c:96:48:f6:2e:ad:6e:27:78:44:12:a9:
b6:c5:7e:89:81:5d:5c:53:e4:e3:00:db:26:9c:c2:
b8:7f:fc:36:cd:dc:e7:cb:fc:15:c4:e2:7d:2e:fa:
8d:7a:8d:61:28:a2:9a:02:46:c0:e7:b7:de:36:11:
b4:19:f6:20:12:fc:20:c0:fa:a9:35:99:6f:b2:4f:
f3:05:21:1b:6c:da:3d:87:5f:5e:ac:46:fb:0e:24:
fb:17:40:35:6b:33:5b:e9:87:ef:c7:35:1e:80:4c:
37:9f:6a:1e:88:dd:b6:84:bb:dc:37:b6:be:bf:06:
53:c7:37:2c:2e:fe:33:cf:95:4d:0e:62:d0:99:c8:
73:56:b6:28:1d:a3:c2:b5:f5:cf:ba:18:ec:7b:d4:
b3:cd:17:07:73:cd:fb:a5:f7:d8:90:a8:0e:44:c1:
ca:4e:a6:2f:26:1a:72:12:a3:ea:78:c8:7a:7c:be:
7f:a4:87:6d:23:08:1e:4f:84:11:53:97:18:6c:ba:
22:aa:2a:44:1c:e9:db:2c:f1:24:5b:8e:cf:ac:70:
c3:68:f1:dc:93:f2:b6:9b:e0:d0:76:d3:ac:6b:7a:
f8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CC:27:01:66:C4:09:0A:48:FF:72:FF:C9:F7:1A:70:B0:F8:95:AA
X509v3 Authority Key Identifier:
keyid:FD:A6:69:B6:D5:E2:24:05:01:7A:D3:59:87:CC:57:AC:96:23:9C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_aZpttXiJAUBetNZh8xXrJYjnJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:d0:4c:7a:ac:17:a0:84:50:1a:01:55:0f:c1:d9:7f:5c:ef:
be:8c:fc:2b:75:29:fe:c8:70:4f:dd:3e:eb:77:98:8b:dc:01:
b6:b9:a0:cc:fb:87:ec:f1:4c:90:ca:b3:4a:5d:01:91:e8:98:
9c:73:c6:7e:0f:2b:02:31:dd:75:e3:a3:28:3f:59:c6:f1:94:
6d:c8:26:c4:23:8d:74:88:45:12:c7:8c:05:90:9a:5b:52:e7:
a2:cb:37:73:a6:35:44:04:71:33:d1:e6:bc:53:f6:34:59:d3:
4a:cc:4b:ef:67:12:65:23:58:e5:99:ca:a5:2c:d5:69:85:f4:
1f:dc:0b:30:07:26:30:04:34:36:7c:77:45:ae:96:38:5c:84:
79:3e:0d:ce:cb:18:8b:2c:c7:0a:46:56:56:8e:36:6e:7a:24:
0e:cb:11:a6:32:a7:a4:b0:fb:e0:ab:0b:6b:9a:84:8a:64:8d:
60:56:6c:d2:93:0b:61:0c:71:c9:b7:94:f6:10:b8:62:10:b6:
ae:c1:c1:6e:c2:c8:22:f9:55:58:3c:4a:e3:5a:5a:8f:61:cf:
d8:0c:d2:f0:a4:3c:38:55:d3:01:3c:04:ac:fa:3e:0e:57:79:
55:d3:5e:00:b2:3e:fe:76:de:2d:d2:fa:15:77:bb:da:9b:29:
08:92:89:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:20:49 2026 by rpki-client