Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
File: 3nRxlsuMncZCM3r-vwSyBNzRlpY.mft (raw, json)
Hash identifier: APmlSc9y2I8458RVYpLE+ZRn2xXG+GhFU/esNaPje64=
Subject key identifier: 49:F4:53:67:34:88:3E:34:EF:DC:27:DE:2A:40:B3:84:5F:B0:55:DF
Authority key identifier: DE:74:71:96:CB:8C:9D:C6:42:33:7A:FE:BF:04:B2:04:DC:D1:96:96
Certificate issuer: /CN=de747196cb8c9dc642337afebf04b204dcd19696
Certificate serial: 01A1404C3BF505D79A66F84557B4BC924860
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
Manifest number: 098C
Signing time: Thu 15 Oct 2026 16:01:40 +0000
Manifest this update: Thu 15 Oct 2026 16:01:40 +0000
Manifest next update: Fri 16 Oct 2026 16:01:40 +0000
Files and hashes: 1: 3nRxlsuMncZCM3r-vwSyBNzRlpY.crl (hash: 4IYE1kvHKepWaKY4561cMT8tUUr5wRc+w56NtqSoqH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:4c:3b:f5:05:d7:9a:66:f8:45:57:b4:bc:92:48:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de747196cb8c9dc642337afebf04b204dcd19696
Validity
Not Before: Oct 15 16:01:40 2026 GMT
Not After : Oct 16 16:01:40 2026 GMT
Subject: CN=49f4536734883e34efdc27de2a40b3845fb055df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3a:a3:0f:ba:8d:5d:b4:8b:3e:b9:89:7a:e0:
39:21:20:ae:da:69:e7:14:37:0f:56:60:c3:68:a1:
0a:98:b9:4f:8c:76:ab:a3:e9:9f:fa:c9:d9:8b:e6:
10:55:af:2e:e0:8a:c8:fb:4d:1d:ce:61:37:39:41:
3f:62:b1:d3:98:58:80:44:75:73:c5:f1:a4:5e:71:
17:b9:90:31:22:ee:56:da:5a:b8:a3:29:71:32:9b:
43:3b:e3:3a:af:77:9d:f5:19:fc:93:6b:21:02:26:
6b:32:a9:38:a0:19:4d:cd:d2:cb:57:ce:8f:4a:65:
37:05:2f:d0:63:36:3b:0c:14:56:1d:8d:ca:3c:03:
ac:61:4d:21:20:f1:f6:f9:d9:b0:34:57:d3:a3:00:
7c:ee:4c:61:b4:2d:69:11:00:00:2b:37:17:03:51:
7f:ac:ae:43:1d:2b:25:88:cf:2e:31:1e:15:f0:b4:
30:3e:48:b1:91:a7:36:26:f3:6e:2f:64:2b:7a:da:
35:d0:a6:ee:d6:b0:f5:23:76:d6:ca:84:09:51:fe:
7d:30:67:21:1a:ad:46:41:bb:01:df:31:cd:0d:a1:
55:2b:8b:73:b0:0d:d9:c5:f9:7d:25:d9:29:ef:ce:
46:8b:4c:5a:da:63:a0:23:e7:74:54:b3:d4:4d:79:
91:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F4:53:67:34:88:3E:34:EF:DC:27:DE:2A:40:B3:84:5F:B0:55:DF
X509v3 Authority Key Identifier:
keyid:DE:74:71:96:CB:8C:9D:C6:42:33:7A:FE:BF:04:B2:04:DC:D1:96:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:04:70:a4:06:75:00:4d:b6:f7:24:3d:d3:e4:49:ff:ea:f1:
27:cb:fe:2b:47:f1:fd:6b:af:96:ad:f1:67:1e:b9:83:25:4e:
55:34:41:8e:2a:05:ce:66:99:78:84:db:6e:3b:92:bd:ec:6c:
fc:ef:42:d1:9b:53:df:36:02:a4:84:b9:c8:41:e5:ea:16:2c:
eb:37:77:7a:df:4b:99:48:3c:0d:92:3f:57:47:12:59:95:e0:
99:12:53:be:cc:a2:a5:fc:80:19:5c:60:3c:d5:40:b1:00:ba:
84:a9:e9:89:fc:71:91:cb:47:52:f3:d3:44:86:12:c1:14:36:
85:ab:2a:49:58:b3:41:09:40:e7:71:90:a2:fc:e1:54:5a:bf:
63:ea:2b:cc:32:c6:8a:ee:cb:19:fc:51:06:f6:58:9d:43:fe:
ba:5a:ed:01:d5:68:11:45:2f:90:2c:24:b1:89:ad:07:4b:82:
00:f0:32:b2:43:df:a2:c5:f6:f9:af:57:fa:e8:2f:28:6f:45:
02:1b:93:88:09:08:cc:23:f9:73:c6:58:86:4a:a0:84:43:20:
3f:fc:08:e3:b9:77:51:ce:a6:b1:74:75:3e:1b:00:9c:18:32:
50:8a:d0:dc:1f:0f:24:b3:7c:3d:a4:3e:8f:ca:bf:7d:42:fd:
e7:37:b4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 04:04:19 2026 by rpki-client