Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft
File: aZlc4YW2DnhgSd9V8VydLsBdT2s.mft (raw, json)
Hash identifier: Xfq+s2v9LDbV53TROMHO6QYN+4i/f3vaQmF9L1XSDhc=
Subject key identifier: 8B:2F:AA:A9:8E:BE:37:1A:D4:1A:F2:B3:30:BD:DB:16:ED:00:0E:77
Authority key identifier: 69:99:5C:E1:85:B6:0E:78:60:49:DF:55:F1:5C:9D:2E:C0:5D:4F:6B
Certificate issuer: /CN=69995ce185b60e786049df55f15c9d2ec05d4f6b
Certificate serial: 019DA48B389549C60D8DB6BB78CCBEF51204
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZlc4YW2DnhgSd9V8VydLsBdT2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft
Manifest number: 18C3
Signing time: Sun 19 Apr 2026 07:01:20 +0000
Manifest this update: Sun 19 Apr 2026 07:01:20 +0000
Manifest next update: Mon 20 Apr 2026 07:01:20 +0000
Files and hashes: 1: aZlc4YW2DnhgSd9V8VydLsBdT2s.crl (hash: A8BWVqpw5cOhL1c9lA3ndCcfpUDUMHygsoVfkFgFcmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZlc4YW2DnhgSd9V8VydLsBdT2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8b:38:95:49:c6:0d:8d:b6:bb:78:cc:be:f5:12:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69995ce185b60e786049df55f15c9d2ec05d4f6b
Validity
Not Before: Apr 19 07:01:20 2026 GMT
Not After : Apr 20 07:01:20 2026 GMT
Subject: CN=8b2faaa98ebe371ad41af2b330bddb16ed000e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4b:8e:0a:ba:9b:22:14:f2:3a:db:dc:bf:99:
ba:68:47:42:42:7c:aa:df:b2:b2:82:43:2a:01:e8:
ec:82:1c:e8:5c:fb:e3:02:00:3f:68:93:3f:6f:e6:
fb:98:2c:06:8b:05:c9:08:27:46:1b:43:11:7b:82:
37:e4:0f:8f:75:1a:8e:ed:95:99:d1:09:87:88:be:
61:8f:da:c9:46:c5:0c:97:3c:92:43:7e:2f:fc:c3:
50:2a:cf:b1:4f:1e:64:92:d6:f8:8c:e8:96:76:a2:
72:d0:d5:6f:15:9b:a6:86:57:57:cf:5b:70:a8:0a:
0c:5e:2d:7d:f3:a5:42:37:4c:7b:e8:88:2a:64:8d:
fa:ec:02:a9:60:bc:bb:ac:da:ea:5c:bb:35:2e:58:
32:e9:72:c2:33:bd:ab:47:7e:53:3e:8c:00:f1:db:
97:93:73:94:6c:46:97:a4:50:0a:ee:9c:bf:6f:cc:
12:f9:a6:47:3f:fa:0a:a6:92:1a:15:39:bc:50:2e:
d1:0b:29:70:95:27:d3:31:dd:11:3a:62:da:34:86:
ef:a8:38:19:d2:1b:c6:af:47:6b:7b:ca:b3:dd:94:
c0:58:7f:3e:90:54:3e:45:05:f2:d5:75:0f:32:3b:
ab:3b:7a:0d:d8:ed:9f:9c:15:bc:1b:2e:81:3d:15:
ee:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:2F:AA:A9:8E:BE:37:1A:D4:1A:F2:B3:30:BD:DB:16:ED:00:0E:77
X509v3 Authority Key Identifier:
keyid:69:99:5C:E1:85:B6:0E:78:60:49:DF:55:F1:5C:9D:2E:C0:5D:4F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZlc4YW2DnhgSd9V8VydLsBdT2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:79:83:7d:ef:85:ba:1e:e8:f2:54:db:fd:9f:a8:e8:45:69:
dd:08:b6:56:51:d7:38:b3:af:f9:4a:4c:c1:55:15:90:e9:dd:
47:4c:3f:cb:d3:48:b4:73:d2:1a:25:c7:5d:f4:a3:26:f5:25:
92:b8:0f:5d:16:8f:b9:4a:d0:fa:cb:0d:f8:f6:ea:26:41:de:
e3:d7:08:07:a3:fe:10:36:79:ab:22:ff:6a:41:f8:f0:57:63:
9f:09:52:71:0d:5f:ea:1c:f4:2c:db:67:50:7f:f8:e1:65:7e:
f2:6d:7c:2a:f0:d7:a4:e5:43:02:c9:92:4e:3d:d5:6b:15:b9:
7d:c5:33:03:84:74:72:8e:08:58:d8:6b:b2:02:39:c0:e9:20:
c8:4c:34:bc:a0:4c:e7:60:31:92:fc:a7:05:08:db:35:e9:fe:
85:e5:01:8b:84:ca:ee:7c:11:24:87:30:f1:57:4c:57:7f:26:
59:4c:d2:ca:27:b9:c2:d0:a2:27:ed:26:5b:cd:21:25:ca:86:
93:72:8b:13:72:8b:c7:86:95:f6:8f:c4:4a:61:28:0e:b8:c5:
36:fb:fb:e8:87:d3:ef:67:18:fb:7e:83:e8:48:bd:eb:24:42:
57:3b:c2:f5:24:19:44:1e:d1:85:3b:29:02:48:bd:46:16:88:
25:66:65:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:43:18 2026 by rpki-client