Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
File: 3nRxlsuMncZCM3r-vwSyBNzRlpY.mft (raw, json)
Hash identifier: vubbl0fiiLiMDFL8hrjvrRPNOZpJo8m/p1BRycRemug=
Subject key identifier: 62:14:FE:CF:36:5C:9B:C0:38:CC:83:C5:1F:0B:1B:38:AE:24:8B:F1
Authority key identifier: DE:74:71:96:CB:8C:9D:C6:42:33:7A:FE:BF:04:B2:04:DC:D1:96:96
Certificate issuer: /CN=de747196cb8c9dc642337afebf04b204dcd19696
Certificate serial: 019D371BAF8DA72C6567F0B72C315FC7D9CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
Manifest number: 0775
Signing time: Sun 29 Mar 2026 01:00:54 +0000
Manifest this update: Sun 29 Mar 2026 01:00:54 +0000
Manifest next update: Mon 30 Mar 2026 01:00:54 +0000
Files and hashes: 1: 3nRxlsuMncZCM3r-vwSyBNzRlpY.crl (hash: ULJjP/y7Zjx10rAaB1iAh2WFgz0Ff7Jr+EVobqJPN4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:af:8d:a7:2c:65:67:f0:b7:2c:31:5f:c7:d9:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de747196cb8c9dc642337afebf04b204dcd19696
Validity
Not Before: Mar 29 01:00:54 2026 GMT
Not After : Mar 30 01:00:54 2026 GMT
Subject: CN=6214fecf365c9bc038cc83c51f0b1b38ae248bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5e:2e:0a:b4:36:c6:16:19:44:1a:69:ce:7c:
13:6c:3d:e8:7a:2c:ec:ca:48:d7:49:cb:e2:2e:76:
43:c7:20:ca:5b:18:9b:0a:03:ae:6d:fe:dd:8c:f8:
d2:e6:28:cf:99:7a:9f:ef:b2:ca:3f:20:68:74:07:
ba:e8:08:71:28:ac:d5:c8:78:72:34:d9:13:b3:a9:
69:a3:be:0b:83:03:85:31:9e:d6:65:8c:f8:50:d2:
5c:9a:76:8c:b3:c7:87:ce:87:d4:9d:e2:d0:80:bf:
4d:b1:c2:2a:1c:35:cc:b1:43:e7:a1:ca:0e:d4:79:
db:ff:27:19:bf:b7:1b:13:d6:d0:f5:92:a3:51:5b:
8d:15:ac:93:91:4c:69:7f:19:c0:1a:97:e5:f0:77:
2b:5b:cf:21:ee:13:6b:cc:88:ef:bf:03:70:ed:d5:
84:80:3f:c9:58:30:d0:57:ee:db:e0:4f:fa:8a:29:
46:4f:aa:ee:1e:29:8d:26:7c:a0:1e:d6:64:d5:04:
cf:22:31:99:d7:e2:0d:89:25:6d:8a:cb:ef:ef:8d:
74:5c:71:94:21:46:99:58:d8:99:0e:05:0c:cd:49:
55:ca:c4:1b:01:a6:b6:c3:f7:88:5a:10:14:be:3a:
72:29:81:e1:bf:a3:53:af:5a:3a:a9:12:58:0d:30:
d0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:14:FE:CF:36:5C:9B:C0:38:CC:83:C5:1F:0B:1B:38:AE:24:8B:F1
X509v3 Authority Key Identifier:
keyid:DE:74:71:96:CB:8C:9D:C6:42:33:7A:FE:BF:04:B2:04:DC:D1:96:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:ef:64:ea:13:32:d3:3f:70:41:c7:a6:ff:75:e4:e1:1d:fb:
4f:1d:d4:cd:73:a1:16:c5:3e:98:a3:2f:ea:77:09:91:fe:96:
75:08:1c:e8:ab:c2:d5:7a:d9:e4:44:7a:0e:3c:d8:20:dd:27:
b9:ba:00:b3:2a:72:f1:5f:22:1e:63:fb:9f:01:79:20:91:cf:
b8:69:c7:fd:f6:d2:ee:c0:b5:78:f9:79:55:44:bf:40:2e:0c:
a2:33:51:c9:c6:bd:b2:c0:5d:22:14:81:82:7a:21:34:4b:4c:
f3:a9:e4:20:fc:ba:b3:80:3d:b3:2a:2e:02:fe:5f:c8:af:56:
ec:2b:6d:0c:f4:9d:0f:a5:99:47:2d:1c:6d:cb:d0:9a:89:92:
8c:11:b6:13:1d:fa:0d:b0:a4:ac:dd:97:ae:7a:4f:2f:2c:12:
8d:28:e1:d3:a0:c2:36:b5:fc:fe:e1:84:f5:6a:00:76:a1:2a:
f4:cd:a7:a9:5b:23:7b:a0:96:15:21:e0:b5:5c:d8:27:4f:f6:
98:2d:77:af:e1:55:0f:04:ad:30:37:40:5b:c7:bb:3d:74:ec:
69:67:1a:ca:16:c2:8b:ab:21:1f:99:38:d9:93:af:9d:8d:01:
30:53:19:34:06:06:69:b0:a9:ca:38:52:b0:cc:94:88:f2:03:
c5:36:32:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:00 2026 by rpki-client