Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft
File: aZlc4YW2DnhgSd9V8VydLsBdT2s.mft (raw, json)
Hash identifier: UXkaEC62hRO1kw6MpF9FSBRH1tBHW96HxXD3k4my+gM=
Subject key identifier: CF:1E:5F:33:E8:91:50:CE:5C:CD:73:94:6D:BD:A6:91:FD:14:CE:6F
Authority key identifier: 69:99:5C:E1:85:B6:0E:78:60:49:DF:55:F1:5C:9D:2E:C0:5D:4F:6B
Certificate issuer: /CN=69995ce185b60e786049df55f15c9d2ec05d4f6b
Certificate serial: 019D38669B32F0A1F350917B9456E3716FC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZlc4YW2DnhgSd9V8VydLsBdT2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 07:02:21 +0000
Manifest this update: Sun 29 Mar 2026 07:02:21 +0000
Manifest next update: Mon 30 Mar 2026 07:02:21 +0000
Files and hashes: 1: aZlc4YW2DnhgSd9V8VydLsBdT2s.crl (hash: gbsPGfWeQ/uTcuZGWxod+3eFQWgGCmlLLnVFWSMycwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZlc4YW2DnhgSd9V8VydLsBdT2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:9b:32:f0:a1:f3:50:91:7b:94:56:e3:71:6f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69995ce185b60e786049df55f15c9d2ec05d4f6b
Validity
Not Before: Mar 29 07:02:21 2026 GMT
Not After : Mar 30 07:02:21 2026 GMT
Subject: CN=cf1e5f33e89150ce5ccd73946dbda691fd14ce6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b1:c7:16:fd:48:03:14:16:1f:7f:84:93:0f:
ab:af:05:e1:b4:14:b5:82:df:e7:ec:ba:2e:a2:74:
64:90:7a:45:7c:c5:49:7d:05:e6:d7:ca:fc:d5:5c:
93:d4:09:62:e5:b7:17:c4:26:49:a3:76:53:ac:e7:
c1:60:2a:ef:d5:34:83:47:a1:d9:45:96:78:19:27:
5f:a6:06:ea:fe:af:1a:01:0c:55:99:8c:1b:f8:90:
2b:89:e4:92:e0:e3:a8:ec:cb:d3:5a:82:5c:83:a3:
d8:35:ff:2f:0b:71:46:a4:bf:ca:63:5c:1a:b2:20:
fa:fb:5a:7d:2a:e3:f7:92:a8:62:9f:c3:55:d2:45:
c9:7b:94:dc:8f:09:3c:7c:09:38:43:4a:f4:ef:ff:
66:4e:d4:45:87:f5:08:b2:c7:af:16:14:f5:06:af:
5b:bd:bc:78:57:d2:f4:eb:93:76:52:b5:7e:cb:f0:
9e:8a:93:dd:c9:9b:c0:2b:59:b3:bb:66:3f:8f:c8:
da:84:6d:ba:50:f1:f7:bc:4a:d8:81:18:c3:bb:6b:
88:c2:33:28:ca:65:b0:8e:97:bd:22:05:cd:da:21:
96:4e:0f:73:aa:c5:f5:21:2e:9d:28:44:dc:04:83:
cc:68:b1:a3:d3:8d:68:b8:9d:23:e0:39:64:08:9b:
b4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1E:5F:33:E8:91:50:CE:5C:CD:73:94:6D:BD:A6:91:FD:14:CE:6F
X509v3 Authority Key Identifier:
keyid:69:99:5C:E1:85:B6:0E:78:60:49:DF:55:F1:5C:9D:2E:C0:5D:4F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZlc4YW2DnhgSd9V8VydLsBdT2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:3f:a0:dc:95:3d:89:72:bd:1f:5c:48:7d:89:0e:2e:3f:fe:
2d:c3:c5:68:d5:f9:50:e8:9f:be:e2:83:b3:58:23:e1:42:89:
5b:1e:96:3b:92:51:13:26:9d:7b:55:60:91:17:51:26:63:07:
cc:a6:db:3b:c4:f7:d7:50:5c:03:6c:03:3b:52:9e:dc:49:3c:
59:ed:fb:33:b2:6c:cb:1f:7d:ce:95:c7:b3:2e:a8:62:25:e3:
40:08:7e:2e:e0:2c:12:ea:97:bc:bf:17:11:6e:df:76:81:4e:
87:cb:43:e6:86:a1:d4:be:c8:98:2b:60:ea:c0:e4:b8:df:a9:
dd:2c:af:93:bf:e3:55:2f:ab:7f:a2:41:4d:6e:c0:97:5d:95:
57:8b:ca:b4:1c:8c:58:6a:b1:ca:fb:a2:ad:2c:a6:bb:30:80:
9a:5c:0a:a1:96:32:b6:45:a0:b7:b2:a2:4e:5e:d5:e5:61:04:
f7:60:94:f1:39:94:dd:6d:3d:3d:a2:76:76:8b:d2:58:0d:e7:
ae:4a:18:95:80:c1:58:f9:a4:4e:2f:4b:33:c7:85:12:22:c1:
e0:a3:a8:40:e3:38:88:12:a3:c8:06:c8:bb:7d:c2:d6:49:f0:
b2:08:10:b0:15:32:62:e5:73:71:21:2a:a5:dc:f1:eb:9e:0d:
2d:58:58:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:05 2026 by rpki-client