Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
File: 3nRxlsuMncZCM3r-vwSyBNzRlpY.mft (raw, json)
Hash identifier: ytybu81uji4flcJBGNdF9Cv4Fa8NtvIDRbSHZpsVSwQ=
Subject key identifier: D3:1B:8D:CB:47:2C:57:15:32:CE:51:78:E1:31:D5:41:58:6B:25:6D
Authority key identifier: DE:74:71:96:CB:8C:9D:C6:42:33:7A:FE:BF:04:B2:04:DC:D1:96:96
Certificate issuer: /CN=de747196cb8c9dc642337afebf04b204dcd19696
Certificate serial: 019E303B1AF58B110F30E659CC774ADB6FD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
Manifest number: 07F6
Signing time: Sat 16 May 2026 10:00:40 +0000
Manifest this update: Sat 16 May 2026 10:00:40 +0000
Manifest next update: Sun 17 May 2026 10:00:40 +0000
Files and hashes: 1: 3nRxlsuMncZCM3r-vwSyBNzRlpY.crl (hash: UsEApP5cVhfCJA8Q0sEJ3/lSjwMQRqDRkJ7tF/YERYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:1a:f5:8b:11:0f:30:e6:59:cc:77:4a:db:6f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de747196cb8c9dc642337afebf04b204dcd19696
Validity
Not Before: May 16 10:00:40 2026 GMT
Not After : May 17 10:00:40 2026 GMT
Subject: CN=d31b8dcb472c571532ce5178e131d541586b256d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6d:93:8e:bf:06:31:23:95:db:3d:95:79:4d:
e9:f4:58:d5:6c:db:ee:35:2e:fe:44:57:56:39:77:
48:19:d0:5f:f1:12:09:08:16:14:87:95:e6:e0:89:
b3:5b:af:aa:a4:1d:14:e5:55:82:24:1a:64:5a:dd:
61:5b:09:0f:91:ce:6b:4f:60:a9:57:b4:a9:dd:e2:
30:80:2f:6a:e6:ba:3d:6b:b8:f5:3d:df:fc:26:31:
f9:2b:56:1a:e0:4a:5e:72:04:bb:6c:79:d8:fb:08:
7f:cc:60:c5:68:12:72:0b:d9:94:d8:c9:cb:e3:15:
55:79:16:8b:93:65:a2:e8:0a:9a:48:e4:1b:31:60:
4e:be:8c:6d:ff:02:51:7d:03:b9:41:a3:56:38:ff:
e8:a4:c3:49:70:2f:36:71:42:de:2d:60:5d:e1:87:
d1:5f:45:61:b3:99:bb:59:0f:e2:7a:ff:c6:64:2c:
d5:a2:67:e4:0f:58:79:e4:f2:0b:8d:a3:3a:a5:16:
fe:62:4a:06:23:3f:c3:3f:ae:e0:bd:ac:74:6a:2e:
2c:9a:ac:71:c4:ac:c4:cf:db:00:a1:68:a9:e5:0a:
d8:a0:17:17:41:32:e4:59:b6:57:ae:15:66:ba:32:
1e:51:b7:0a:a8:34:ee:84:42:ba:50:ef:3b:90:d1:
dc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:1B:8D:CB:47:2C:57:15:32:CE:51:78:E1:31:D5:41:58:6B:25:6D
X509v3 Authority Key Identifier:
keyid:DE:74:71:96:CB:8C:9D:C6:42:33:7A:FE:BF:04:B2:04:DC:D1:96:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:62:82:8f:41:18:9e:3d:be:4f:c8:07:d6:7f:8b:34:39:8c:
bd:c6:b4:dd:8e:5f:d6:27:22:d4:6b:f3:10:53:24:3b:f9:45:
24:6b:c3:b9:c9:2e:bf:c0:dd:75:59:35:95:e2:79:03:29:a2:
76:b2:ad:71:c3:ec:c0:e4:1d:7b:cd:d8:82:cd:7f:64:83:97:
89:c4:81:46:ba:36:ab:4e:7e:f0:67:c1:73:45:1e:1e:1f:1b:
0a:d1:9b:f3:23:45:b3:5e:8f:cc:24:4b:63:e9:94:41:d1:96:
61:fd:39:b8:56:4b:7f:fb:a3:f4:45:5d:95:8f:f6:17:92:57:
39:d5:72:a2:09:19:be:54:2d:10:4c:fc:62:a4:46:11:c5:25:
65:4a:06:09:cc:8e:de:42:3e:bf:d8:ba:39:d3:35:4e:28:63:
eb:d9:38:03:0a:49:c4:20:5b:4d:86:a8:a2:aa:7d:7f:c9:43:
4d:f2:3b:e9:bd:ea:39:4b:5f:7d:09:d1:ce:93:29:be:48:3f:
db:63:e0:a4:46:70:35:3c:57:95:fd:59:68:e3:88:ac:60:48:
40:fe:4f:cf:e8:53:1f:0c:07:17:ae:d0:a1:e0:12:05:f5:e0:
14:87:b6:41:c2:b7:c3:f5:0c:df:f3:9d:07:3d:69:0b:b5:47:
eb:61:4f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:39:11 2026 by rpki-client