Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
File: 3nRxlsuMncZCM3r-vwSyBNzRlpY.mft (raw, json)
Hash identifier: JqZ4iGSftlxC9wdI7ZM5bbY3iOWVPz2lhw4Z1M3MvQg=
Subject key identifier: 53:D8:B9:86:E8:9B:89:C5:E2:19:73:82:0C:02:B8:6A:88:5B:EE:07
Authority key identifier: DE:74:71:96:CB:8C:9D:C6:42:33:7A:FE:BF:04:B2:04:DC:D1:96:96
Certificate issuer: /CN=de747196cb8c9dc642337afebf04b204dcd19696
Certificate serial: 01A001A61BCBE92559F7EFD7EEFF21CE52A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
Manifest number: 08E7
Signing time: Fri 14 Aug 2026 19:00:58 +0000
Manifest this update: Fri 14 Aug 2026 19:00:58 +0000
Manifest next update: Sat 15 Aug 2026 19:00:58 +0000
Files and hashes: 1: 3nRxlsuMncZCM3r-vwSyBNzRlpY.crl (hash: mEu3OkL5PqghjWch1aWobg2dwK54/n9pjDljmJb79iM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:1b:cb:e9:25:59:f7:ef:d7:ee:ff:21:ce:52:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de747196cb8c9dc642337afebf04b204dcd19696
Validity
Not Before: Aug 14 19:00:58 2026 GMT
Not After : Aug 15 19:00:58 2026 GMT
Subject: CN=53d8b986e89b89c5e21973820c02b86a885bee07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3c:72:c2:da:18:70:91:10:68:a1:e0:90:ab:
98:f8:1f:09:7e:a4:b1:00:75:b0:63:8f:1a:9f:8d:
e5:50:c4:59:2c:86:0f:d8:ee:27:23:df:83:0a:9a:
ef:44:f8:b8:b2:74:6b:97:1e:a6:0f:73:31:04:f3:
a8:a9:36:20:d4:bd:4f:1f:53:6b:2b:8a:1a:97:fd:
dc:4a:64:cc:79:04:b9:e0:49:a9:df:47:58:7c:c3:
05:fe:00:b9:9a:df:6c:fd:c1:a5:58:ff:f9:8d:ee:
41:17:b4:09:87:07:3f:40:dd:16:c7:a1:29:83:b6:
97:a1:e8:17:14:22:5b:27:fb:fb:0d:43:28:af:a3:
bb:a1:12:f1:f8:f9:b2:7c:42:8c:2f:74:ea:39:62:
56:e9:57:de:59:dc:6a:49:ec:0c:f8:2f:15:36:58:
df:41:66:7f:0e:f3:61:7d:e4:cf:20:39:ca:48:67:
13:6b:e9:02:05:09:f2:10:88:19:9f:42:88:93:26:
c6:39:13:7e:6e:1f:3b:8f:e6:00:f6:65:f5:55:8d:
a0:be:b2:9b:b3:9e:9c:11:b4:93:42:72:21:fe:21:
cc:c6:c9:e6:3c:fb:f1:84:f3:14:49:d3:19:ea:52:
b5:73:ad:58:a5:aa:1d:f7:bd:15:e2:a4:bf:4e:56:
2a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D8:B9:86:E8:9B:89:C5:E2:19:73:82:0C:02:B8:6A:88:5B:EE:07
X509v3 Authority Key Identifier:
keyid:DE:74:71:96:CB:8C:9D:C6:42:33:7A:FE:BF:04:B2:04:DC:D1:96:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:92:12:c1:14:09:c6:93:27:24:fd:4c:0f:38:f9:a6:30:47:
6a:63:dd:ef:7d:c0:6a:0f:0d:28:01:80:f7:8e:64:0c:22:b6:
39:75:4c:f8:2c:9e:4d:05:16:a2:60:39:09:fd:e0:78:88:46:
f7:cf:c5:99:8e:ca:60:99:87:ac:9e:56:1c:b5:d4:82:1f:3a:
37:76:14:9b:09:08:6f:4f:1c:05:b8:9c:38:d6:a8:1a:c7:1d:
0b:20:b2:a7:ca:62:79:0b:2a:14:95:d8:6f:c3:ab:f7:de:4d:
55:ab:37:38:2f:10:19:ec:e8:f1:00:6f:57:0c:ee:3a:d0:ba:
fc:f3:50:ab:e0:e3:24:fd:7d:f1:ca:82:c3:84:83:40:ae:3b:
61:88:b4:b9:fe:8c:6b:a5:0e:28:89:e9:15:db:93:5e:93:80:
30:16:b2:1a:15:3f:93:be:29:00:19:2a:1f:c6:84:f3:91:b0:
7c:ab:6d:53:d2:5c:27:11:58:52:df:45:0a:6b:a8:d4:88:d8:
fe:39:8a:b3:29:19:2c:99:00:3e:93:5a:ad:1a:45:da:1b:8d:
a5:dc:cd:c7:d2:36:81:80:89:24:c0:db:93:d0:9b:f6:09:fd:
ea:7a:9d:3b:66:31:d1:70:fe:bb:6a:06:74:dd:66:57:e5:50:
59:99:12:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:28:29 2026 by rpki-client