Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
File: 3virX3TckOn_uo1CmI7Vp3SMHQU.mft (raw, json)
Hash identifier: WDMLqb9h79SdemEBsRX4oS4YUVYh5Xy//3D0h1cdYa8=
Subject key identifier: 4D:0E:EE:28:8D:ED:7A:F4:E0:50:39:20:72:1B:28:7D:38:3C:14:6A
Authority key identifier: DE:F8:AB:5F:74:DC:90:E9:FF:BA:8D:42:98:8E:D5:A7:74:8C:1D:05
Certificate issuer: /CN=def8ab5f74dc90e9ffba8d42988ed5a7748c1d05
Certificate serial: 019D3A5466D69A003EBFE45B9BFAB7DA219E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
Manifest number: 10AB
Signing time: Sun 29 Mar 2026 16:01:43 +0000
Manifest this update: Sun 29 Mar 2026 16:01:43 +0000
Manifest next update: Mon 30 Mar 2026 16:01:43 +0000
Files and hashes: 1: 3virX3TckOn_uo1CmI7Vp3SMHQU.crl (hash: qDsDBO68lQetxQE/eae3/JwbA1vrrPIwylaD/LCiWRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:66:d6:9a:00:3e:bf:e4:5b:9b:fa:b7:da:21:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=def8ab5f74dc90e9ffba8d42988ed5a7748c1d05
Validity
Not Before: Mar 29 16:01:43 2026 GMT
Not After : Mar 30 16:01:43 2026 GMT
Subject: CN=4d0eee288ded7af4e0503920721b287d383c146a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:df:45:e0:0d:88:4c:69:37:22:df:24:45:ad:
29:7a:ea:4b:38:17:cd:94:6c:b4:6d:3b:0e:94:fd:
dd:0d:1e:4a:a2:29:ba:49:1a:9d:0d:80:ab:ef:0a:
ae:04:94:4e:a3:0d:9c:d5:16:b2:d8:df:b1:1b:f0:
4f:2f:eb:aa:21:90:a1:d5:b2:26:a8:c3:df:83:ff:
66:73:f0:de:04:75:f8:99:51:be:9d:e8:fe:db:a2:
01:8e:48:e1:5d:b7:f2:f0:20:a9:ab:5c:17:3c:e4:
31:67:64:49:fd:4e:c0:c6:06:12:75:a0:37:94:f0:
7d:1f:6f:32:bd:30:15:6b:47:77:09:9e:c2:a0:20:
7b:61:35:09:ac:4d:aa:d4:84:62:39:02:54:78:a2:
77:ab:e8:03:19:75:c8:ca:e8:5d:23:0f:70:5f:18:
c1:0f:e0:f0:df:10:07:19:df:66:48:45:a1:46:53:
21:a9:40:55:b6:56:36:8d:08:5a:31:1a:e1:34:32:
9b:98:97:29:2c:51:32:a2:07:98:e6:fd:14:93:f1:
c5:c4:4a:7b:f6:57:28:2b:99:2b:4f:dc:d1:dd:68:
60:21:44:df:13:76:b4:5b:10:4e:21:ec:02:79:98:
9b:d6:75:29:cd:12:de:ef:2e:4d:96:5b:ff:3c:d3:
62:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:0E:EE:28:8D:ED:7A:F4:E0:50:39:20:72:1B:28:7D:38:3C:14:6A
X509v3 Authority Key Identifier:
keyid:DE:F8:AB:5F:74:DC:90:E9:FF:BA:8D:42:98:8E:D5:A7:74:8C:1D:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:e3:0b:94:35:53:20:32:80:c9:14:c4:83:77:71:b0:de:29:
63:b2:e8:70:7b:96:24:8f:7c:4b:85:be:b6:4a:93:d0:02:74:
90:e6:70:90:e1:fb:ea:61:63:a7:81:c9:41:99:47:3b:81:ca:
ae:75:ca:83:b5:91:0f:7d:28:c2:8c:80:80:18:a5:a0:f3:f1:
99:e1:a2:66:d5:5c:bf:2c:61:50:b1:42:33:99:2d:72:ab:b6:
85:d8:d8:07:7e:8c:1f:2f:fa:78:9c:f2:b6:35:e8:d8:4b:e1:
3a:0c:68:19:67:53:a8:10:1d:b5:a0:9f:28:47:eb:ca:ac:10:
42:54:75:9b:1e:d8:a1:af:d2:69:e8:5a:77:8f:fc:7e:4b:9f:
e1:da:18:5d:af:98:55:ef:92:8c:24:2f:15:1e:94:9f:12:34:
fa:e8:78:28:00:b5:9a:d3:de:2b:06:d9:f5:31:e8:a0:f8:4d:
71:ce:df:c4:3c:e5:31:a1:74:4e:7d:b8:fb:2e:b3:73:2c:38:
45:e0:6a:d1:f4:6d:e6:84:e5:f4:ae:af:96:c2:7b:19:6a:e6:
2b:11:0d:8f:be:d5:76:d9:d4:2a:76:3a:57:9f:dd:e1:4a:c8:
da:bd:12:fe:92:26:28:b1:78:18:f2:36:5a:c7:eb:2f:72:9b:
b7:c4:f0:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:37:47 2026 by rpki-client