Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.mft
File: _aZpttXiJAUBetNZh8xXrJYjnJo.mft (raw, json)
Hash identifier: PCnr4tsv/JZs7hBKwKBN4lo3V3iEeeEAvD7fKMrV3Lc=
Subject key identifier: 61:4A:EB:DF:FB:58:C2:F0:C8:0A:C4:9E:BF:43:6B:C0:9C:0B:D2:CB
Authority key identifier: FD:A6:69:B6:D5:E2:24:05:01:7A:D3:59:87:CC:57:AC:96:23:9C:9A
Certificate issuer: /CN=fda669b6d5e22405017ad35987cc57ac96239c9a
Certificate serial: 019D37C00E233DD3236527A5D65B6A7B89C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_aZpttXiJAUBetNZh8xXrJYjnJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 04:00:26 +0000
Manifest this update: Sun 29 Mar 2026 04:00:26 +0000
Manifest next update: Mon 30 Mar 2026 04:00:26 +0000
Files and hashes: 1: _aZpttXiJAUBetNZh8xXrJYjnJo.crl (hash: +BAjxz+X/glQGdHIdLPV907Kn9CzURIJyKHVUawNKlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_aZpttXiJAUBetNZh8xXrJYjnJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:0e:23:3d:d3:23:65:27:a5:d6:5b:6a:7b:89:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fda669b6d5e22405017ad35987cc57ac96239c9a
Validity
Not Before: Mar 29 04:00:26 2026 GMT
Not After : Mar 30 04:00:26 2026 GMT
Subject: CN=614aebdffb58c2f0c80ac49ebf436bc09c0bd2cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:07:7f:f6:da:7e:dd:f7:d3:b7:a6:20:5a:95:
93:80:38:bc:89:2c:eb:5d:ec:fe:e1:b3:ab:1e:28:
87:79:0b:6f:43:0d:70:fa:b8:8f:b7:1f:68:7a:c8:
df:0f:3a:67:fb:51:63:99:d5:09:81:7d:26:0f:07:
16:90:86:59:fb:96:ca:eb:c1:67:70:6b:de:64:55:
9a:86:35:b5:ba:e5:64:36:52:68:03:dc:16:25:30:
cb:22:2d:6d:5f:b7:c6:2e:ad:53:86:84:b1:b4:12:
f1:d1:f8:21:8b:62:de:cf:2a:61:7c:77:03:dd:3a:
39:97:24:a7:60:ba:af:4b:69:ba:0d:4a:24:ae:e0:
9c:18:e1:6e:ac:92:e3:70:23:a9:bc:01:c0:f6:b8:
2d:3b:ec:fe:1b:87:ed:c2:35:3f:0b:e1:51:ed:a5:
83:26:fd:e3:80:c4:f1:48:4a:d2:70:86:eb:e6:4e:
b2:43:46:18:e8:7d:ec:af:0f:62:e6:59:26:bd:62:
2d:bb:16:72:22:30:5d:5f:af:6e:8c:3b:fd:02:0d:
89:87:92:df:e0:ec:75:33:de:6e:f7:da:e6:1d:5f:
68:3e:1d:ea:71:ac:bb:c4:80:14:e0:fd:a6:66:b4:
2a:c9:41:60:9f:3b:d1:dc:b7:34:22:43:65:10:b7:
e7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:4A:EB:DF:FB:58:C2:F0:C8:0A:C4:9E:BF:43:6B:C0:9C:0B:D2:CB
X509v3 Authority Key Identifier:
keyid:FD:A6:69:B6:D5:E2:24:05:01:7A:D3:59:87:CC:57:AC:96:23:9C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_aZpttXiJAUBetNZh8xXrJYjnJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:7c:8a:88:a0:c4:41:51:f4:04:f3:23:74:48:ab:f2:6e:35:
ee:54:46:c4:df:37:63:8f:96:e9:47:8a:06:8c:e2:c6:26:1b:
d0:5b:9c:bd:2c:93:69:f1:c9:24:67:ec:49:1a:cd:3d:6a:be:
f3:51:e4:01:2b:bc:a4:fd:78:2a:fa:01:da:e2:a4:f3:ea:7a:
0c:d3:ce:c7:27:4d:10:37:29:cc:f9:9c:50:d6:63:58:03:23:
c3:08:94:10:95:5d:08:6b:95:be:f2:19:52:59:c2:df:5d:a7:
71:49:51:ed:eb:22:37:bd:27:9f:29:92:c4:33:4d:d3:a1:32:
cf:db:4d:b8:58:80:b6:c2:f5:25:9d:30:ed:a5:14:63:6f:89:
13:c2:8f:7c:11:0a:24:ae:2c:94:34:1b:2c:43:65:d7:fa:25:
5c:cf:72:db:3d:6f:88:8b:8d:d1:0f:f6:47:d7:3c:97:00:c0:
05:b5:b7:42:f4:f3:c4:b5:bd:c1:08:1d:f3:f0:5e:07:e9:2b:
f3:df:e3:14:fd:b2:e4:ba:e2:35:7d:5a:a3:59:f7:19:40:f5:
be:a8:30:fd:f6:28:79:b0:16:4f:07:30:51:9d:b7:70:af:3b:
73:91:e0:50:07:8f:4b:70:03:a7:8c:f2:71:7a:60:63:c2:4b:
a1:86:43:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:09 2026 by rpki-client