Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
File: 3virX3TckOn_uo1CmI7Vp3SMHQU.mft (raw, json)
Hash identifier: +tYFbJdKsbfu3t9Jm+HWfiYgqfmInR6tozS/5ehjJyg=
Subject key identifier: A1:37:2B:C0:04:92:C4:BA:76:63:EF:BF:2F:1B:48:FA:0E:CF:A4:23
Authority key identifier: DE:F8:AB:5F:74:DC:90:E9:FF:BA:8D:42:98:8E:D5:A7:74:8C:1D:05
Certificate issuer: /CN=def8ab5f74dc90e9ffba8d42988ed5a7748c1d05
Certificate serial: 019CAB6B89C45C6FC568090717CBBCAF0598
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
Manifest number: 1061
Signing time: Sun 01 Mar 2026 22:01:17 +0000
Manifest this update: Sun 01 Mar 2026 22:01:17 +0000
Manifest next update: Mon 02 Mar 2026 22:01:17 +0000
Files and hashes: 1: 3virX3TckOn_uo1CmI7Vp3SMHQU.crl (hash: 5mj7pDwsCehAgMvkp7orM+fNiqFMSQPGvJpDH5nzAXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:89:c4:5c:6f:c5:68:09:07:17:cb:bc:af:05:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=def8ab5f74dc90e9ffba8d42988ed5a7748c1d05
Validity
Not Before: Mar 1 22:01:17 2026 GMT
Not After : Mar 2 22:01:17 2026 GMT
Subject: CN=a1372bc00492c4ba7663efbf2f1b48fa0ecfa423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:52:71:55:a6:d2:cd:bd:72:71:6d:3e:99:bf:
40:05:cc:36:46:2f:d0:c0:3d:6c:0e:71:25:b3:b2:
1f:0b:10:9f:8e:26:c1:28:de:59:9d:7d:71:a9:a9:
4e:24:c7:89:2a:09:b8:05:ab:ab:4c:4c:56:28:77:
87:8d:64:b7:58:27:6a:2f:ef:b6:e9:f1:26:f1:bd:
cf:2b:2c:20:1b:e3:7c:2e:02:4c:38:bc:d7:0f:f9:
73:08:df:cd:09:e1:97:1a:ab:36:ce:a8:45:db:f9:
06:1c:48:94:4c:69:9f:8d:e6:14:24:83:82:c7:96:
3f:71:17:19:a0:d7:f8:9d:9c:46:c2:c8:0a:e1:f6:
04:91:fa:dc:46:8a:5e:5f:c0:45:55:c7:76:f7:a9:
05:9d:b8:23:0e:a7:57:49:04:81:fd:16:13:07:db:
13:28:fd:aa:41:c1:81:b1:24:ad:67:e8:77:ac:75:
9f:28:80:c1:85:22:f5:31:38:49:25:6d:c1:c7:cd:
c0:d9:a6:22:5f:9c:5d:f7:29:2d:3c:17:54:84:91:
56:34:56:26:77:4f:f7:6f:07:7f:e9:25:f6:6d:af:
56:08:7a:3d:e9:7f:84:c0:17:63:e3:3f:3a:5c:74:
1f:0d:2c:7a:a2:ab:a9:22:6b:b4:c6:a9:9e:2d:dc:
31:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:37:2B:C0:04:92:C4:BA:76:63:EF:BF:2F:1B:48:FA:0E:CF:A4:23
X509v3 Authority Key Identifier:
keyid:DE:F8:AB:5F:74:DC:90:E9:FF:BA:8D:42:98:8E:D5:A7:74:8C:1D:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:cc:d3:04:85:43:a0:56:f9:cf:64:bb:ed:2f:e6:e6:e3:8e:
3f:37:1e:e6:91:7e:9f:76:b1:f1:42:00:5d:c3:e7:57:27:d0:
ef:10:e6:5a:9b:72:b7:45:7b:e7:4c:6d:f7:61:6c:1f:3a:71:
11:8e:16:3e:a7:be:52:20:6e:fa:a6:58:78:cb:a8:45:3b:d6:
3f:20:2c:59:df:90:49:3b:4c:c8:81:94:0e:d7:25:88:f1:db:
b0:f6:e4:c7:60:0b:55:6b:7d:9f:3d:93:e7:4c:7c:0e:00:67:
0d:85:72:ec:17:63:ef:ae:62:ac:10:29:31:d1:27:71:40:4f:
27:3f:17:8f:0b:23:63:03:90:aa:4c:06:77:07:4b:e0:b5:68:
d3:4c:79:03:2e:31:f4:eb:a1:27:3c:a2:3b:e2:87:a2:1d:47:
af:b5:14:8b:41:39:af:df:d0:fb:93:aa:c0:82:1c:f2:9a:de:
f0:17:51:66:3f:2e:02:cd:47:99:fe:67:a4:6e:24:4f:8a:c5:
89:2b:c8:45:c3:46:b0:8e:44:c0:cd:00:7b:fc:fa:84:b9:71:
71:6d:2d:99:04:60:10:4f:1c:68:48:28:d5:5c:41:01:d0:9c:
f4:aa:b0:d1:1b:37:16:79:04:cc:8d:69:0d:19:c2:1a:8c:60:
4f:c4:47:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:27 2026 by rpki-client