Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
File: 3virX3TckOn_uo1CmI7Vp3SMHQU.mft (raw, json)
Hash identifier: Fn3618Q2BBy72EmShKXgdiqjWf3jjxRNCTcg3c50Qg8=
Subject key identifier: EB:55:2F:57:75:74:21:DE:35:35:60:57:AE:12:B7:B9:F9:C3:91:89
Authority key identifier: DE:F8:AB:5F:74:DC:90:E9:FF:BA:8D:42:98:8E:D5:A7:74:8C:1D:05
Certificate issuer: /CN=def8ab5f74dc90e9ffba8d42988ed5a7748c1d05
Certificate serial: 01A1DFF1031897235182E9A463290270A958
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
Manifest number: 1313
Signing time: Sun 15 Nov 2026 16:01:16 +0000
Manifest this update: Sun 15 Nov 2026 16:01:16 +0000
Manifest next update: Mon 16 Nov 2026 16:01:16 +0000
Files and hashes: 1: 3virX3TckOn_uo1CmI7Vp3SMHQU.crl (hash: 5mz/ARyx2iOMu0cleo14wrZ5NOrgzzLeVKIf8jikS20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:f1:03:18:97:23:51:82:e9:a4:63:29:02:70:a9:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=def8ab5f74dc90e9ffba8d42988ed5a7748c1d05
Validity
Not Before: Nov 15 16:01:16 2026 GMT
Not After : Nov 16 16:01:16 2026 GMT
Subject: CN=eb552f57757421de35356057ae12b7b9f9c39189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:21:8e:f3:0b:4e:7e:16:d0:cb:cd:94:fe:93:
46:b4:05:69:9c:b4:ab:40:24:66:e5:68:bc:a9:08:
bf:97:c5:59:31:48:11:f6:0f:35:be:5c:ec:5c:32:
13:90:05:90:0c:9a:f9:59:e8:9a:02:07:e7:46:ab:
7a:58:f8:3c:6b:d5:ff:48:f8:45:8d:cb:42:be:6f:
2b:01:1e:ce:ad:73:c3:d1:22:92:28:d2:b3:71:13:
f0:2f:c9:a3:18:bb:b3:c8:d7:40:a0:11:14:55:29:
11:c6:c2:4c:66:09:86:18:58:30:ec:c4:c2:0c:83:
12:41:9f:c0:39:1c:7b:84:85:5d:cc:3f:ca:e6:73:
82:d2:9a:2b:d1:d6:24:20:c3:81:b5:85:d6:fb:2a:
78:9e:e2:c7:d9:0d:97:d4:3d:55:36:e9:6f:42:92:
14:13:c8:13:bf:cf:93:6f:9f:f0:41:4e:7c:f5:98:
23:ac:84:eb:7f:24:4b:08:83:0b:e3:d8:ea:c5:62:
ff:cd:37:67:7c:fd:d1:ff:fb:10:f0:ce:5e:7b:00:
c6:fe:ee:d5:c6:ea:6c:6c:60:b1:f8:ea:64:5a:da:
55:75:64:28:87:99:33:13:39:f2:a7:d4:d7:a5:30:
15:ea:d0:8b:15:8c:d9:e3:c9:9d:01:10:88:d7:de:
f2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:55:2F:57:75:74:21:DE:35:35:60:57:AE:12:B7:B9:F9:C3:91:89
X509v3 Authority Key Identifier:
keyid:DE:F8:AB:5F:74:DC:90:E9:FF:BA:8D:42:98:8E:D5:A7:74:8C:1D:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:af:8c:fb:34:3c:aa:76:d9:a8:ab:ba:dd:9a:15:17:6a:ff:
d0:94:8d:7f:ad:37:d6:01:5c:14:d5:f7:da:a3:04:53:0c:0f:
c6:f4:ea:1a:e6:f4:0d:44:8f:5a:79:51:6f:50:36:d4:09:a4:
8a:d1:23:c4:91:f7:0d:9f:67:dd:cc:7a:40:e1:78:01:96:a7:
5b:34:2e:1c:ff:27:44:c3:dc:f1:72:fd:d4:87:72:10:5c:ba:
3d:e2:fa:1d:9c:79:89:da:64:b2:12:18:c1:7a:73:35:38:4d:
bc:51:06:fa:cb:58:2f:7a:c1:d3:80:30:f5:ba:ea:bf:77:da:
fe:59:05:11:1a:98:9d:0b:25:81:fc:2e:15:d1:8a:ec:8e:7b:
70:cd:78:ce:4a:4a:e3:43:d0:05:8f:f0:f8:91:6c:d5:e6:5c:
65:eb:7b:ad:3f:dc:ca:0d:2f:c9:b1:02:f6:9c:d1:87:58:f7:
d1:9e:19:96:8a:e5:08:88:2b:37:2b:70:db:28:35:4c:5b:7c:
8e:78:9f:aa:84:c9:a7:d7:b4:11:1a:13:6a:5e:0d:2f:c2:79:
5f:b5:a7:19:81:1e:ee:41:56:56:df:f8:91:e5:25:47:a9:71:
dd:75:e3:15:78:36:4c:66:ce:be:55:98:ef:a6:10:02:9f:8c:
9a:82:f4:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:32:08 2026 by rpki-client