Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
File: x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft (raw, json)
Hash identifier: rfUmggFDPdSVu1gIXkOq6eavJm+/U5Q3o2ijoA+hzZ4=
Subject key identifier: 80:51:EE:46:84:28:56:9C:F9:9A:70:F9:AB:73:F9:B4:0F:09:6D:51
Authority key identifier: C7:7B:19:69:D9:AD:DF:19:96:32:B4:DE:05:E8:A2:0E:3D:E7:B6:C4
Certificate issuer: /CN=c77b1969d9addf199632b4de05e8a20e3de7b6c4
Certificate serial: 019D38D35DAACA5A73942B3943845C3AFAB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3sZadmt3xmWMrTeBeiiDj3ntsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
Manifest number: 08C7
Signing time: Sun 29 Mar 2026 09:01:09 +0000
Manifest this update: Sun 29 Mar 2026 09:01:09 +0000
Manifest next update: Mon 30 Mar 2026 09:01:09 +0000
Files and hashes: 1: x3sZadmt3xmWMrTeBeiiDj3ntsQ.crl (hash: 0xPpy2ExvYs3ElrDjC/3uCKZrd06IGHm3w9EmIf6Bnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3sZadmt3xmWMrTeBeiiDj3ntsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 09:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:5d:aa:ca:5a:73:94:2b:39:43:84:5c:3a:fa:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77b1969d9addf199632b4de05e8a20e3de7b6c4
Validity
Not Before: Mar 29 09:01:09 2026 GMT
Not After : Mar 30 09:01:09 2026 GMT
Subject: CN=8051ee468428569cf99a70f9ab73f9b40f096d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:55:ff:05:22:11:80:70:b0:9f:e4:b0:cb:a5:
dd:67:f3:10:98:59:4b:e5:26:ff:b0:4c:68:35:07:
26:cd:f3:2a:39:55:e7:17:71:89:f6:c6:78:fa:e8:
e6:18:44:fd:18:35:a0:5b:a6:dc:7c:bd:41:3d:53:
d1:ba:86:8f:60:31:81:05:a5:be:fd:8e:ed:12:bf:
49:dc:24:31:68:b4:6d:c5:9f:de:4f:23:03:0b:92:
a5:23:d8:7b:79:38:14:0c:1d:64:6f:a1:cc:d4:74:
e3:70:af:5d:bf:15:d7:7e:2b:3f:31:37:4d:05:c2:
20:da:19:20:bf:96:7c:b5:e3:d4:2a:26:ec:ec:97:
3d:93:63:02:41:90:07:7e:e7:28:a5:b7:60:af:6f:
10:a0:ff:bb:c1:ac:4f:93:b0:9a:41:0a:47:d1:75:
67:fa:b6:40:78:62:4a:6d:b0:e1:55:8d:4f:f0:43:
be:e8:70:3d:75:eb:74:4c:da:9e:aa:c6:b6:6e:7d:
86:ea:e3:92:49:c3:e4:03:58:36:af:5b:4f:6d:12:
b6:d0:01:00:6e:7a:72:77:38:53:e2:c8:58:fb:16:
d5:de:82:19:4f:35:b8:50:38:f5:07:04:7b:0d:06:
19:73:0d:dc:be:49:02:82:33:d6:d4:ea:ff:68:59:
d5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:51:EE:46:84:28:56:9C:F9:9A:70:F9:AB:73:F9:B4:0F:09:6D:51
X509v3 Authority Key Identifier:
keyid:C7:7B:19:69:D9:AD:DF:19:96:32:B4:DE:05:E8:A2:0E:3D:E7:B6:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3sZadmt3xmWMrTeBeiiDj3ntsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:b9:78:3c:c3:01:e3:50:18:0f:a4:2c:c2:70:60:d1:96:c1:
ae:7f:11:5d:1e:43:b1:27:89:0f:37:cb:f8:e7:d1:2c:06:18:
2d:65:7a:00:76:c3:7a:e2:9c:6a:55:11:ff:7d:67:ab:f5:9e:
cf:00:ab:a1:6a:80:a8:7c:9d:34:ec:1a:fb:87:97:ad:75:88:
ed:87:ef:40:87:7e:3f:d1:04:f9:14:0c:45:31:62:d4:e2:54:
25:fb:8e:6c:94:66:97:a9:13:7a:42:70:2a:aa:35:dd:3c:ed:
de:d6:c8:bd:7c:0b:27:f0:62:ef:b6:3a:c9:9f:6a:de:72:94:
46:a9:a7:2e:bf:8a:d7:4a:8b:d3:89:e5:b3:da:75:bc:64:be:
d4:6a:6a:84:19:85:aa:58:5c:88:26:11:bb:12:00:7f:7d:ba:
6c:18:07:9e:b7:0b:49:36:ad:58:44:3a:7a:74:83:1f:69:fb:
49:5d:2b:2e:17:af:bb:48:85:8f:7d:ca:11:d1:5f:ae:3d:32:
d0:35:cd:a9:0d:04:57:6b:c3:ef:3b:43:67:7d:50:af:06:07:
20:b3:53:3d:39:03:17:ef:1b:24:09:2f:dc:55:ed:7c:dc:83:
f5:5b:db:77:43:4a:af:0c:f8:ee:29:c7:a7:d5:1c:f2:a9:bb:
49:19:9d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:50:46 2026 by rpki-client