Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.mft
File: _aZpttXiJAUBetNZh8xXrJYjnJo.mft (raw, json)
Hash identifier: iy2Gz2muhLQhXoGCICD5hkH9dXiLjujbCQIxZqOgW+I=
Subject key identifier: FD:1C:EC:3E:F4:E8:8F:21:26:4F:DE:79:FF:5A:F7:60:86:96:FF:EE
Authority key identifier: FD:A6:69:B6:D5:E2:24:05:01:7A:D3:59:87:CC:57:AC:96:23:9C:9A
Certificate issuer: /CN=fda669b6d5e22405017ad35987cc57ac96239c9a
Certificate serial: 019D9A3DE1A1A0AC9C6D01C554E4A79215D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_aZpttXiJAUBetNZh8xXrJYjnJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 07:00:39 +0000
Manifest this update: Fri 17 Apr 2026 07:00:39 +0000
Manifest next update: Sat 18 Apr 2026 07:00:39 +0000
Files and hashes: 1: _aZpttXiJAUBetNZh8xXrJYjnJo.crl (hash: 1M4LB2pGYTMa5U/1vhaPPbnKZQxqVbcjvJlkX7GRLms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_aZpttXiJAUBetNZh8xXrJYjnJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3d:e1:a1:a0:ac:9c:6d:01:c5:54:e4:a7:92:15:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fda669b6d5e22405017ad35987cc57ac96239c9a
Validity
Not Before: Apr 17 07:00:39 2026 GMT
Not After : Apr 18 07:00:39 2026 GMT
Subject: CN=fd1cec3ef4e88f21264fde79ff5af7608696ffee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:75:5f:a8:52:be:7c:9d:e9:99:fe:65:42:f7:
08:58:6b:b0:1e:ac:a9:40:0c:4f:1d:66:e5:5d:4d:
97:d4:22:ef:26:06:be:3d:30:a7:1d:91:7f:8c:50:
6a:d8:36:14:dd:ee:fa:14:04:d3:89:f9:14:3d:d1:
2f:8f:8a:09:2f:ec:cb:48:09:6f:0b:b3:ab:a9:39:
38:2d:86:e8:02:5c:61:0a:b4:26:51:ae:61:30:0c:
04:8d:16:9f:41:2a:ec:b9:e9:23:65:c0:65:74:f9:
86:39:57:ea:cb:3b:2b:02:41:27:d0:d4:e3:87:b9:
4c:78:4c:36:8e:59:66:b9:a2:69:86:30:7c:7f:fc:
b5:56:24:93:a8:e5:df:9c:cd:0b:58:d7:7c:25:5b:
04:ac:71:77:1e:56:c2:79:79:c6:4b:a0:15:4f:38:
5a:81:a9:21:7e:a8:f2:ee:da:9e:d0:52:28:9f:08:
5b:b8:64:d7:54:5b:00:46:a5:7c:a6:84:8b:95:d5:
6b:ef:d6:45:53:77:25:f5:3b:98:06:65:bf:d1:52:
f7:03:d9:c3:b0:38:5b:5e:16:12:66:7a:76:49:94:
22:bb:2b:15:ec:f8:2c:2d:63:0c:09:e5:5e:3c:84:
5f:62:58:46:55:84:7b:e5:1c:d5:d6:49:77:70:e2:
bc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:1C:EC:3E:F4:E8:8F:21:26:4F:DE:79:FF:5A:F7:60:86:96:FF:EE
X509v3 Authority Key Identifier:
keyid:FD:A6:69:B6:D5:E2:24:05:01:7A:D3:59:87:CC:57:AC:96:23:9C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_aZpttXiJAUBetNZh8xXrJYjnJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:f5:42:16:04:32:17:8e:b1:4e:84:55:1a:3a:01:54:75:54:
eb:61:9c:7b:fa:d8:ec:8b:a3:17:a0:f3:a9:86:fb:af:e5:54:
e7:2c:75:8e:5f:a5:ee:e0:b8:af:a7:34:b2:90:4f:d8:4a:79:
72:b5:9d:b4:7b:2d:6b:be:38:54:b6:09:f1:75:87:c6:a3:31:
be:e4:aa:12:d9:dc:41:ec:86:98:9a:0b:33:2d:7f:5d:cd:6e:
81:21:7b:1e:29:65:23:f8:25:83:d5:c5:49:5e:e2:26:a5:54:
43:84:18:cd:de:3f:fe:42:14:db:59:42:f1:eb:3a:28:83:71:
07:97:27:74:f3:8c:92:d1:72:86:07:ea:fd:83:21:05:5c:62:
05:92:c3:6d:4a:75:17:79:31:18:8f:59:40:78:5d:66:03:a5:
33:cd:c2:eb:ad:78:d4:a6:35:51:ef:eb:a6:99:a1:d6:9c:21:
32:0a:6a:6c:85:cd:45:6a:f8:ac:a8:8f:b0:da:4a:29:ed:bc:
5d:a8:75:85:06:c3:3e:6e:77:1e:07:52:eb:df:7f:75:4e:7d:
45:fb:77:b6:4d:ce:d3:5b:b2:22:09:4f:3d:50:b3:9f:e4:c3:
ba:92:df:e6:bc:f4:11:06:7d:3a:8b:fa:7d:2a:2c:2d:e6:76:
c9:9a:ed:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:24:07 2026 by rpki-client