Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft
File: aZlc4YW2DnhgSd9V8VydLsBdT2s.mft (raw, json)
Hash identifier: IRZrnSA4kJ5/rCrAyP93MCJ2Vg/3XynHfj3M0cWS2EU=
Subject key identifier: 4B:39:48:44:F8:45:F7:53:CB:B0:C4:8E:DA:8B:8A:9E:D3:F4:8D:05
Authority key identifier: 69:99:5C:E1:85:B6:0E:78:60:49:DF:55:F1:5C:9D:2E:C0:5D:4F:6B
Certificate issuer: /CN=69995ce185b60e786049df55f15c9d2ec05d4f6b
Certificate serial: 019D27043A4CC619F1AF497A9BC494FC72A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZlc4YW2DnhgSd9V8VydLsBdT2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft
Manifest number: 1882
Signing time: Wed 25 Mar 2026 22:01:21 +0000
Manifest this update: Wed 25 Mar 2026 22:01:21 +0000
Manifest next update: Thu 26 Mar 2026 22:01:21 +0000
Files and hashes: 1: aZlc4YW2DnhgSd9V8VydLsBdT2s.crl (hash: hZFZls7dT8Fgwygcx0H5BeL9HxHobDtrm6V2KxRT6lA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZlc4YW2DnhgSd9V8VydLsBdT2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:3a:4c:c6:19:f1:af:49:7a:9b:c4:94:fc:72:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69995ce185b60e786049df55f15c9d2ec05d4f6b
Validity
Not Before: Mar 25 22:01:21 2026 GMT
Not After : Mar 26 22:01:21 2026 GMT
Subject: CN=4b394844f845f753cbb0c48eda8b8a9ed3f48d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b0:0c:b3:60:a2:7e:6e:8d:6b:81:b1:41:25:
a7:13:24:15:4d:91:79:cd:88:61:cc:aa:d4:77:aa:
1b:a0:65:87:86:f8:0c:62:ac:62:e1:18:3f:f0:65:
fa:c6:02:ef:a0:77:d9:e6:9f:c2:6b:6f:ab:d7:5e:
e6:54:81:b5:29:9d:55:2e:45:28:28:7b:7f:03:e0:
ed:b2:9c:5f:78:a7:04:1a:a7:5e:3f:a6:a7:83:11:
fe:a0:32:fb:cd:3a:08:e4:33:83:00:6b:4b:35:d4:
ab:8d:85:7c:34:52:f2:0d:cf:2d:bf:93:19:fc:0f:
a7:72:bc:ff:c3:a5:72:0d:da:6a:ff:58:cd:0e:2b:
a3:c9:98:a8:60:1f:13:04:f5:50:f5:23:b3:66:b0:
5f:af:92:47:97:83:7b:20:b3:a4:f2:37:4c:f0:61:
f5:95:b0:ba:27:48:71:a4:be:90:5f:19:1d:de:5e:
f2:39:a5:19:ab:01:d7:c0:47:3c:f6:dd:5b:f9:d8:
b7:13:f7:59:7f:fd:77:e8:04:06:c0:52:a2:35:61:
e2:91:fb:07:b7:eb:21:7b:04:9e:a9:80:02:da:c8:
e4:9a:49:a8:eb:3a:db:5a:9c:57:a7:19:45:65:5a:
dc:9b:2c:0e:84:54:f8:64:74:e5:f5:d2:e6:5c:f5:
2e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:39:48:44:F8:45:F7:53:CB:B0:C4:8E:DA:8B:8A:9E:D3:F4:8D:05
X509v3 Authority Key Identifier:
keyid:69:99:5C:E1:85:B6:0E:78:60:49:DF:55:F1:5C:9D:2E:C0:5D:4F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZlc4YW2DnhgSd9V8VydLsBdT2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:b4:56:fa:23:bf:c1:53:e1:c5:67:3a:cb:a9:07:04:af:bc:
1b:eb:b5:20:c3:f2:c8:9d:b2:08:58:5d:24:ac:a5:74:41:ea:
ef:02:5d:09:9b:94:87:c6:8d:e8:38:36:d2:c2:13:9e:03:a5:
f2:7d:54:87:41:a2:14:4f:29:7f:75:42:11:af:d8:8d:31:50:
a9:16:c0:81:33:62:40:49:3e:10:63:32:32:e4:4f:e1:c4:76:
ae:3d:16:3d:24:9c:fa:0e:da:a9:55:ef:87:45:50:42:49:29:
a7:69:f0:68:cd:7d:0d:c9:5b:e6:e0:5d:cd:31:23:00:b9:45:
2e:f6:4e:1a:bb:84:a2:c0:e6:9d:93:b4:ae:9b:b0:0a:4f:65:
f2:22:ec:53:e2:cc:ca:c1:f2:da:fe:23:66:b0:b9:0c:79:ae:
e3:41:a1:dc:88:be:06:9f:bd:d4:30:26:2a:90:d1:83:ad:7c:
2f:b4:1a:be:66:27:32:7d:43:6d:31:05:3d:d4:0e:4f:e6:dc:
8c:37:70:91:28:68:9f:55:08:11:79:c9:a7:8f:cf:9f:12:42:
e8:63:43:4b:ab:39:21:70:59:e0:36:18:e6:9c:3c:9f:ee:a1:
7a:9e:2b:41:38:4a:39:48:b8:28:86:a3:e2:f0:ed:ef:73:ab:
77:88:1f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:28:12 2026 by rpki-client