Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
File: 3virX3TckOn_uo1CmI7Vp3SMHQU.mft (raw, json)
Hash identifier: FyHG7A1nwsdwNStVd6Gje1CnM6NRKIUTR80MrS+V7Uo=
Subject key identifier: 31:BA:DB:C9:B0:2A:FE:5A:6B:11:4D:D1:DF:57:09:6A:91:EE:51:6A
Authority key identifier: DE:F8:AB:5F:74:DC:90:E9:FF:BA:8D:42:98:8E:D5:A7:74:8C:1D:05
Certificate issuer: /CN=def8ab5f74dc90e9ffba8d42988ed5a7748c1d05
Certificate serial: 01A00102010181D1A385A619B5C2BF39FF81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
Manifest number: 121B
Signing time: Fri 14 Aug 2026 16:01:43 +0000
Manifest this update: Fri 14 Aug 2026 16:01:43 +0000
Manifest next update: Sat 15 Aug 2026 16:01:43 +0000
Files and hashes: 1: 3virX3TckOn_uo1CmI7Vp3SMHQU.crl (hash: cFC3XZmeWfe89TdpnAtJ7aojbY9puIiUTM2V2Y1RLNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:02:01:01:81:d1:a3:85:a6:19:b5:c2:bf:39:ff:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=def8ab5f74dc90e9ffba8d42988ed5a7748c1d05
Validity
Not Before: Aug 14 16:01:43 2026 GMT
Not After : Aug 15 16:01:43 2026 GMT
Subject: CN=31badbc9b02afe5a6b114dd1df57096a91ee516a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:89:42:5a:64:19:64:bf:00:f0:b9:aa:54:ac:
7e:41:8b:2f:c4:52:07:d0:c7:7a:a6:86:90:b7:fe:
25:6f:0b:0e:15:b5:d1:b3:ac:92:51:23:89:3c:46:
d2:85:74:32:ca:25:c5:ee:10:a2:2d:20:f5:df:b4:
ea:88:46:92:42:ed:09:7f:1b:ce:f5:40:dc:31:8b:
aa:50:44:dc:c6:4a:79:83:5a:bf:c2:de:64:c5:d7:
b4:05:30:4d:0d:6d:5b:c1:ec:00:7f:50:ae:c3:d6:
ef:b8:77:4a:10:80:70:59:60:31:d1:af:6f:c8:2f:
92:d7:d6:5d:4e:58:0a:8c:0e:b3:58:3a:37:07:a1:
25:0a:26:c7:1a:9a:65:f0:7d:68:66:a5:aa:e8:d6:
5d:92:40:d7:91:8c:d4:b2:9d:3d:a5:46:54:8b:60:
9d:8b:a3:d2:5a:0f:c8:cc:77:32:27:57:9b:62:df:
15:96:e7:4b:3e:ce:d0:81:84:ed:38:e2:29:09:bc:
c9:4c:2b:bf:f4:0d:5b:ba:1e:4a:08:a1:ea:5b:a6:
b2:81:a7:8f:5b:33:ba:0b:d0:89:e3:66:03:30:03:
c6:8b:57:11:a8:b5:02:b6:ca:fb:ea:29:86:45:53:
4e:f1:08:03:ed:27:61:5b:70:04:19:c0:28:9a:c8:
ba:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:BA:DB:C9:B0:2A:FE:5A:6B:11:4D:D1:DF:57:09:6A:91:EE:51:6A
X509v3 Authority Key Identifier:
keyid:DE:F8:AB:5F:74:DC:90:E9:FF:BA:8D:42:98:8E:D5:A7:74:8C:1D:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:c3:68:dd:9a:5e:0c:d7:a3:4b:ec:59:c2:c0:c9:56:1f:6b:
e0:b0:e1:41:c8:8b:51:20:ce:ec:e2:be:dc:aa:85:dd:fd:50:
f3:9a:73:96:85:f5:91:ca:97:b1:ff:5e:0b:40:59:d0:8e:ff:
9d:78:8f:16:ed:e4:37:2b:37:5e:93:96:4d:1c:b3:4b:68:18:
de:e4:37:63:52:e6:49:82:2b:aa:7a:1f:8e:39:a9:39:44:db:
5f:73:56:e3:87:3b:e0:39:8a:53:0f:8d:30:8c:21:f6:68:e4:
0a:0f:63:c4:3c:bc:3e:85:94:5d:68:ab:bb:27:53:cc:ff:6b:
5b:c3:80:7c:d0:c1:5e:9e:4f:44:f0:2f:87:f0:f0:d4:ca:db:
22:20:fd:b3:cb:3b:50:5a:3d:ff:94:f2:97:c2:38:6b:de:c2:
c2:2b:73:f8:26:3c:9d:14:5c:8e:05:5b:f6:96:6c:3b:af:24:
1c:b9:42:4b:35:2d:03:b6:e4:5e:06:db:26:74:02:e7:37:21:
ae:90:78:f3:75:c6:6b:2f:1a:1d:e4:cc:c3:83:c4:b9:a9:fd:
07:6b:61:a2:e8:ef:4b:8d:d6:1c:3b:11:06:4b:04:80:88:a2:
1e:7c:0b:a2:d7:2f:a8:8f:f7:31:4b:ba:68:53:0e:06:4b:da:
14:d3:7b:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABAgEBgdGjhaYZtcK/Of+BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlZjhhYjVmNzRkYzkwZTlmZmJhOGQ0Mjk4OGVkNWE3NzQ4
YzFkMDUwHhcNMjYwODE0MTYwMTQzWhcNMjYwODE1MTYwMTQzWjAzMTEwLwYDVQQD
EygzMWJhZGJjOWIwMmFmZTVhNmIxMTRkZDFkZjU3MDk2YTkxZWU1MTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YlCWmQZZL8A8LmqVKx+QYsvxFIH
0Md6poaQt/4lbwsOFbXRs6ySUSOJPEbShXQyyiXF7hCiLSD137TqiEaSQu0JfxvO
9UDcMYuqUETcxkp5g1q/wt5kxde0BTBNDW1bwewAf1Cuw9bvuHdKEIBwWWAx0a9v
yC+S19ZdTlgKjA6zWDo3B6ElCibHGppl8H1oZqWq6NZdkkDXkYzUsp09pUZUi2Cd
i6PSWg/IzHcyJ1ebYt8VludLPs7QgYTtOOIpCbzJTCu/9A1buh5KCKHqW6aygaeP
WzO6C9CJ42YDMAPGi1cRqLUCtsr76imGRVNO8QgD7SdhW3AEGcAomsi6oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDG628mwKv5aaxFN0d9XCWqR7lFqMB8GA1UdIwQY
MBaAFN74q1903JDp/7qNQpiO1ad0jB0FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3ZpclgzVGNrT25fdW8xQ21JN1ZwM1NNSFFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS82YTcyNWEtNDJlNC00MjcwLWI1YWYt
NDUzZmMxYmNiY2Q1LzEvM3ZpclgzVGNrT25fdW8xQ21JN1ZwM1NNSFFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS82YTcyNWEtNDJlNC00MjcwLWI1YWYtNDUzZmMxYmNiY2Q1
LzEvM3ZpclgzVGNrT25fdW8xQ21JN1ZwM1NNSFFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEcNo3Zpe
DNejS+xZwsDJVh9r4LDhQciLUSDO7OK+3KqF3f1Q85pzloX1kcqXsf9eC0BZ0I7/
nXiPFu3kNys3XpOWTRyzS2gY3uQ3Y1LmSYIrqnofjjmpOUTbX3NW44c74DmKUw+N
MIwh9mjkCg9jxDy8PoWUXWiruydTzP9rW8OAfNDBXp5PRPAvh/Dw1MrbIiD9s8s7
UFo9/5Tyl8I4a97Cwitz+CY8nRRcjgVb9pZsO68kHLlCSzUtA7bkXgbbJnQC5zch
rpB483XGay8aHeTMw4PEuan9B2thoujvS43WHDsRBksEgIiiHnwLotcvqI/3MUu6
aFMOBkvaFNN7XA==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:00 2026 by rpki-client