Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
File: 3virX3TckOn_uo1CmI7Vp3SMHQU.mft (raw, json)
Hash identifier: t+fCHt4FOw0Cjj17rnn27zNCjNbmSb/TJIh8VEGjqrM=
Subject key identifier: C3:33:EE:EF:3B:C3:14:7C:47:32:E9:AD:85:30:0D:C9:10:C6:25:CE
Authority key identifier: DE:F8:AB:5F:74:DC:90:E9:FF:BA:8D:42:98:8E:D5:A7:74:8C:1D:05
Certificate issuer: /CN=def8ab5f74dc90e9ffba8d42988ed5a7748c1d05
Certificate serial: 019D98F4268ECA2E01F4C7BC53B6CD2ADF70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
Manifest number: 10DC
Signing time: Fri 17 Apr 2026 01:00:30 +0000
Manifest this update: Fri 17 Apr 2026 01:00:30 +0000
Manifest next update: Sat 18 Apr 2026 01:00:30 +0000
Files and hashes: 1: 3virX3TckOn_uo1CmI7Vp3SMHQU.crl (hash: yrpHb9IQfs+wScWqOZ5D7J5eOZnUfS6DqarD+qcoh4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:26:8e:ca:2e:01:f4:c7:bc:53:b6:cd:2a:df:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=def8ab5f74dc90e9ffba8d42988ed5a7748c1d05
Validity
Not Before: Apr 17 01:00:30 2026 GMT
Not After : Apr 18 01:00:30 2026 GMT
Subject: CN=c333eeef3bc3147c4732e9ad85300dc910c625ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5b:06:e7:12:8d:2a:c2:b5:17:cc:4f:49:2a:
b0:25:a1:fc:48:70:9c:d3:43:d7:28:ec:33:b8:42:
95:6a:8c:c9:de:a5:d7:1f:95:48:db:43:03:d6:7e:
45:a1:02:0d:e6:a7:ac:e8:9e:0a:7f:cc:73:ca:67:
29:2e:a2:b4:9c:c2:9e:17:d6:2b:c6:69:bd:db:3a:
f2:1e:3e:57:04:8b:b2:ce:9e:47:c3:fe:6c:ae:35:
43:ed:66:55:0f:b6:74:82:db:2b:e7:93:1b:d0:3a:
d4:35:a9:e1:61:e7:27:75:71:3c:39:4a:9d:1e:42:
0b:c3:20:52:81:9f:7a:9d:23:9e:69:61:2b:fe:e3:
b9:ef:2c:90:75:e7:7c:57:f3:2c:6c:2a:78:46:51:
a3:a0:b5:14:3d:92:02:f8:d0:2c:93:c0:13:a7:bd:
ec:79:bc:9c:31:3b:a8:92:24:cb:ff:6d:b2:90:d7:
f5:0a:48:73:87:0f:4d:e0:a6:94:55:91:13:ff:eb:
7e:a9:1d:1f:36:7f:54:e9:6b:f1:2e:3f:60:61:65:
0f:1e:57:98:13:0d:6a:a3:82:da:c8:d5:cf:a0:8a:
d8:70:38:85:c0:e5:1b:59:7f:e2:45:5b:1c:6e:a5:
e6:a3:6a:21:19:df:c3:6c:00:8e:86:76:08:9a:fc:
0e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:33:EE:EF:3B:C3:14:7C:47:32:E9:AD:85:30:0D:C9:10:C6:25:CE
X509v3 Authority Key Identifier:
keyid:DE:F8:AB:5F:74:DC:90:E9:FF:BA:8D:42:98:8E:D5:A7:74:8C:1D:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:b9:21:25:46:bf:48:ab:75:a0:81:55:2f:26:4e:d7:9e:25:
2f:8c:8b:b5:63:61:b5:0c:e7:e8:c5:2e:2b:ee:f1:13:8e:a4:
cf:97:24:51:7e:90:8b:d4:dd:4b:2d:09:2a:9c:8b:70:9d:8a:
16:e9:0d:40:eb:69:90:79:84:92:e3:5d:b6:5e:52:d2:65:10:
aa:11:d7:6b:7d:d9:09:60:aa:85:8a:9b:ca:07:15:d3:68:64:
5f:13:31:fb:0b:5d:b9:71:4c:30:23:c5:de:28:84:bf:5b:0c:
79:67:3d:d2:96:42:71:81:a9:91:8c:15:de:b8:f4:ac:6f:35:
97:f8:16:8d:c9:8d:24:eb:c3:02:6f:38:f1:f3:93:43:04:66:
7d:ef:7b:a5:6e:66:64:cb:ef:33:09:29:40:a1:17:f2:8f:94:
57:0d:69:08:f9:fb:28:63:24:2e:3e:7b:7e:a6:c3:88:3b:ef:
eb:f8:c5:32:3b:f3:36:4c:99:6c:53:b4:fe:9c:3c:fd:de:68:
96:57:fd:0f:a0:ff:55:d0:f4:a8:32:7d:db:b9:bb:bb:1a:8d:
48:fe:70:17:60:f8:2d:99:2a:c6:57:35:aa:f9:32:0c:8f:cc:
37:b6:bd:57:84:98:26:d8:db:7c:9e:ea:1e:a2:13:e0:b0:0f:
c8:14:ee:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:48:56 2026 by rpki-client