Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft
File: aZlc4YW2DnhgSd9V8VydLsBdT2s.mft (raw, json)
Hash identifier: o8oNLdU+oJLdVjy/ng26cGz5bqERD4iKhpJpfduCyE0=
Subject key identifier: 32:7E:F4:01:DD:A3:27:57:D8:6C:42:DD:48:2F:47:C3:91:F5:7B:1C
Authority key identifier: 69:99:5C:E1:85:B6:0E:78:60:49:DF:55:F1:5C:9D:2E:C0:5D:4F:6B
Certificate issuer: /CN=69995ce185b60e786049df55f15c9d2ec05d4f6b
Certificate serial: 019CAB6B66FA838C2E4BDB08A4BFEF8907EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZlc4YW2DnhgSd9V8VydLsBdT2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft
Manifest number: 1842
Signing time: Sun 01 Mar 2026 22:01:08 +0000
Manifest this update: Sun 01 Mar 2026 22:01:08 +0000
Manifest next update: Mon 02 Mar 2026 22:01:08 +0000
Files and hashes: 1: aZlc4YW2DnhgSd9V8VydLsBdT2s.crl (hash: wRrP42JQRd1OwieYRRPftTAamlKAaHcuvFvinWCaBik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZlc4YW2DnhgSd9V8VydLsBdT2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:66:fa:83:8c:2e:4b:db:08:a4:bf:ef:89:07:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69995ce185b60e786049df55f15c9d2ec05d4f6b
Validity
Not Before: Mar 1 22:01:08 2026 GMT
Not After : Mar 2 22:01:08 2026 GMT
Subject: CN=327ef401dda32757d86c42dd482f47c391f57b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:52:d4:fd:97:b7:7c:8c:79:ec:00:d2:bb:95:
68:bd:83:f2:32:9c:80:13:19:2a:53:1f:19:f7:61:
b8:7a:d9:92:a7:86:cb:55:22:05:bd:7a:5c:4d:14:
e5:3f:de:b2:b7:c1:69:e3:b8:f8:f6:1e:11:56:70:
ce:4a:75:7f:46:fc:c1:be:cb:eb:50:9e:3b:53:45:
8f:7a:13:07:9f:ea:5d:62:10:0a:e8:ee:b7:a9:bd:
a2:de:b4:c2:cc:cc:0f:da:9d:c1:b5:f6:9b:99:31:
32:2d:d3:ed:22:f7:f6:40:ca:56:2a:79:d5:51:d5:
5c:53:6d:e0:51:9b:cd:ad:1e:bc:11:78:21:87:6b:
95:f5:03:12:c5:9e:b7:50:79:aa:53:88:72:01:2e:
ba:88:2c:26:c3:10:c7:a7:03:b0:7f:d2:5f:76:22:
05:71:b5:a2:e8:99:f8:04:01:72:db:45:55:3a:26:
ee:51:e4:8f:20:ff:0f:b0:d0:c3:1c:36:b9:d9:16:
ba:67:b8:83:1c:c4:e9:67:9a:33:b8:e2:d6:9c:21:
ee:65:9d:a5:e2:cc:8f:14:b6:85:cf:d5:81:59:bf:
2c:af:9c:2b:d9:a5:9c:64:61:bf:95:b9:e6:88:a1:
08:1c:94:3d:4e:6f:ca:82:75:42:31:5b:a5:f9:2a:
2b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:7E:F4:01:DD:A3:27:57:D8:6C:42:DD:48:2F:47:C3:91:F5:7B:1C
X509v3 Authority Key Identifier:
keyid:69:99:5C:E1:85:B6:0E:78:60:49:DF:55:F1:5C:9D:2E:C0:5D:4F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZlc4YW2DnhgSd9V8VydLsBdT2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:1c:bb:f8:ba:b9:d4:d6:32:dd:e7:f1:f0:42:f0:19:47:6f:
64:cd:2a:59:45:f5:66:24:09:74:54:ba:8b:8c:c9:06:a1:b6:
37:d0:6d:a3:47:fd:ad:33:5e:69:5f:b6:12:07:de:fa:18:44:
d3:27:b3:1a:28:6d:30:71:1b:f7:ae:ee:22:54:a4:ab:35:00:
b3:a7:b8:6b:38:d1:5d:4f:bd:f3:ad:e1:7f:bf:5c:e7:e5:a0:
88:57:fe:fc:65:2a:67:66:f5:f8:43:01:50:96:34:a4:52:33:
50:c4:8d:a0:20:d6:b8:5b:b0:cd:fd:fa:c9:e2:60:95:44:8f:
58:b7:16:52:56:8a:a3:50:53:97:4f:32:e4:5e:47:01:5a:1e:
d3:81:b3:ab:e8:e4:d3:e5:3d:17:d1:72:f8:3a:3a:e4:32:b7:
a4:cd:a0:02:eb:e2:ee:26:2a:f0:6e:55:b3:ac:63:6f:71:e2:
13:78:94:09:d8:49:2b:64:4f:81:26:ec:9f:0c:8e:8b:32:b0:
fc:db:4f:0c:4e:de:5e:cb:1e:57:39:4e:16:b5:62:76:82:ef:
c9:21:57:18:23:c1:3d:05:32:26:b6:f1:44:9c:2c:10:37:93:
b5:eb:40:f8:d5:06:b5:70:26:6c:9c:f8:f4:2b:19:e0:c5:48:
9a:e7:7b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:42:31 2026 by rpki-client