Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
File: 3virX3TckOn_uo1CmI7Vp3SMHQU.mft (raw, json)
Hash identifier: 0lc4CZhMAtF6T3P4vnZXkP5He3tb9cG/AVXO2c38gxg=
Subject key identifier: 84:FF:13:12:9C:19:EE:92:25:B9:46:EB:2D:BC:B3:6B:2B:DE:AD:37
Authority key identifier: DE:F8:AB:5F:74:DC:90:E9:FF:BA:8D:42:98:8E:D5:A7:74:8C:1D:05
Certificate issuer: /CN=def8ab5f74dc90e9ffba8d42988ed5a7748c1d05
Certificate serial: 019FAA1A0E5E30B42B6497AEFE6421232CAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
Manifest number: 11EE
Signing time: Tue 28 Jul 2026 19:01:02 +0000
Manifest this update: Tue 28 Jul 2026 19:01:02 +0000
Manifest next update: Wed 29 Jul 2026 19:01:02 +0000
Files and hashes: 1: 3virX3TckOn_uo1CmI7Vp3SMHQU.crl (hash: IfL+jurwzFhS16LgnuaPffN5wESMWNMJdzsVXuLPtZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:0e:5e:30:b4:2b:64:97:ae:fe:64:21:23:2c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=def8ab5f74dc90e9ffba8d42988ed5a7748c1d05
Validity
Not Before: Jul 28 19:01:02 2026 GMT
Not After : Jul 29 19:01:02 2026 GMT
Subject: CN=84ff13129c19ee9225b946eb2dbcb36b2bdead37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1f:79:41:a4:82:dd:b4:79:46:b4:b1:d3:ee:
7d:a0:50:97:29:5c:20:99:77:7d:d5:bd:62:a5:46:
fe:2a:3a:f1:d0:e2:e2:1f:7a:7f:02:d8:2c:8d:96:
40:35:fe:5b:3c:61:ee:11:31:7f:64:11:c5:d9:e6:
39:f6:11:4c:b9:2f:6d:63:06:3c:85:9b:95:ce:f5:
13:a4:e5:57:7b:33:c8:6e:c8:e0:33:70:e7:57:4b:
93:33:2a:cc:ff:48:b4:67:bf:2b:e7:c4:48:be:1f:
54:1c:3e:5a:33:56:c0:57:63:f7:4a:02:5f:87:03:
c2:13:52:b3:d5:89:af:7b:b1:1d:b3:93:96:63:d6:
98:2f:b3:47:99:c8:6f:19:03:dd:df:cd:1d:48:d7:
c3:d9:95:be:c0:7a:cc:89:03:3e:58:0a:23:b3:01:
5d:01:88:6a:70:01:ff:0a:1f:38:36:a9:4d:a1:e0:
6f:6d:2b:61:68:e8:ae:0e:6f:e2:55:ac:dd:9c:7d:
1e:95:ca:43:81:87:fb:8f:4f:83:85:39:7a:89:80:
5a:6f:3f:f8:23:22:1e:a1:c6:d4:4a:07:b3:ac:ed:
94:ad:4e:aa:5e:e1:9e:1a:e8:aa:4a:ce:df:03:ec:
f4:d5:12:2e:22:7b:ff:5d:0e:16:b0:2e:fd:ea:2e:
16:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:FF:13:12:9C:19:EE:92:25:B9:46:EB:2D:BC:B3:6B:2B:DE:AD:37
X509v3 Authority Key Identifier:
keyid:DE:F8:AB:5F:74:DC:90:E9:FF:BA:8D:42:98:8E:D5:A7:74:8C:1D:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:c6:f0:f0:33:b3:8b:c7:08:0e:f2:ce:ce:9e:a4:24:39:0b:
2f:cd:71:4a:73:6d:17:53:e3:12:e1:d6:50:08:77:9c:e5:ea:
cb:b5:31:4a:38:56:b3:fd:0c:59:a5:ec:4e:86:52:52:c2:29:
91:94:1f:af:42:a2:f9:f2:b3:ba:14:42:07:e2:bf:ad:41:39:
1f:5d:1e:8d:e4:e1:43:cd:80:52:a1:f5:34:6c:9a:4a:89:91:
07:55:2b:3d:00:46:9a:06:27:eb:ed:3b:ba:66:1d:90:fe:16:
4d:81:0b:4d:b9:7c:53:08:5f:0d:6e:a5:55:dd:26:a8:e1:50:
87:7e:af:e8:d7:5d:e6:de:24:59:d0:46:d4:39:88:5d:c2:37:
ad:b1:9e:8d:0b:b0:4e:58:ba:11:1b:d3:83:27:c4:b7:c7:a2:
8d:b2:84:c3:38:68:78:8b:1a:db:bf:61:26:bc:2c:35:7a:94:
74:83:8a:d1:56:5a:18:af:f5:b7:9b:0c:fc:b4:c3:bc:b6:fd:
8b:1b:17:4e:cb:6d:b7:b4:71:01:01:b8:cc:04:d4:c5:61:2c:
37:5b:54:b1:57:64:51:24:62:da:dc:5c:59:0c:5d:cf:ec:72:
86:8d:3d:e0:79:28:0a:96:80:a9:e0:58:4c:2b:70:a9:db:62:
9f:0a:56:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:04:10 2026 by rpki-client