Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
File: 3nRxlsuMncZCM3r-vwSyBNzRlpY.mft (raw, json)
Hash identifier: YAmSFgNyLLaHF+h2yenlVe+GNiUeRfdQL2QS+IzZLno=
Subject key identifier: 36:92:7B:C2:FD:44:73:68:40:25:91:89:17:E3:31:AD:EF:7A:96:78
Authority key identifier: DE:74:71:96:CB:8C:9D:C6:42:33:7A:FE:BF:04:B2:04:DC:D1:96:96
Certificate issuer: /CN=de747196cb8c9dc642337afebf04b204dcd19696
Certificate serial: 019CAC1001DB884441BE16361DBA1EBF29A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
Manifest number: 072D
Signing time: Mon 02 Mar 2026 01:00:55 +0000
Manifest this update: Mon 02 Mar 2026 01:00:55 +0000
Manifest next update: Tue 03 Mar 2026 01:00:55 +0000
Files and hashes: 1: 3nRxlsuMncZCM3r-vwSyBNzRlpY.crl (hash: 962S6xrzIkzbr2j1Sw6Ze0sxSqbAzZqvfVjq9WZN2wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:01:db:88:44:41:be:16:36:1d:ba:1e:bf:29:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de747196cb8c9dc642337afebf04b204dcd19696
Validity
Not Before: Mar 2 01:00:55 2026 GMT
Not After : Mar 3 01:00:55 2026 GMT
Subject: CN=36927bc2fd4473684025918917e331adef7a9678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c5:11:4a:23:f0:f3:68:89:06:d4:76:81:03:
5e:37:0e:b3:c3:e4:ad:04:8a:23:25:ba:28:b6:0d:
30:cf:d6:4e:b6:c2:1c:1c:b9:ff:bf:12:38:9a:37:
33:cf:8c:08:34:3b:ae:e1:c0:17:02:4d:aa:f7:57:
5f:d8:15:3b:ab:10:08:8f:89:ad:c3:fd:94:16:d8:
75:91:02:ed:c0:e8:0f:8d:33:bf:b0:c8:3f:8a:1c:
ff:37:41:c8:7e:da:7c:6d:c9:14:1e:51:46:38:92:
4b:ad:ac:60:7f:b5:73:52:e0:6a:1e:91:43:32:06:
01:f8:3d:f6:87:bb:71:65:13:00:dd:ce:46:08:c4:
d2:a2:9f:14:85:42:67:d8:aa:46:e4:a0:7c:ec:38:
03:4b:88:3c:b9:ae:09:5e:87:8b:23:1d:d9:a2:b9:
e7:57:0d:f2:4e:93:51:bc:bd:64:4f:d9:92:69:6a:
30:56:98:0c:c3:f6:fd:95:30:79:0b:73:76:5a:57:
0f:cb:05:6f:1d:ca:21:51:ea:e5:4f:56:7a:c3:ce:
1a:2d:b3:34:e5:03:52:5d:a7:7b:6f:92:3f:37:f1:
56:5c:f4:7e:0d:c7:14:7a:b6:94:91:0a:68:7c:d3:
24:39:6b:f6:3e:19:d2:07:e4:17:0d:33:e2:ee:1f:
78:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:92:7B:C2:FD:44:73:68:40:25:91:89:17:E3:31:AD:EF:7A:96:78
X509v3 Authority Key Identifier:
keyid:DE:74:71:96:CB:8C:9D:C6:42:33:7A:FE:BF:04:B2:04:DC:D1:96:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:4f:50:bd:b5:ea:e7:e8:09:32:50:99:7d:95:25:34:0e:85:
ad:9e:48:7b:13:96:e8:8c:3a:7f:74:6d:38:c1:42:aa:68:dd:
71:f5:78:67:d2:e6:36:d7:96:33:c9:76:9b:e7:ae:b7:a2:e9:
d6:c6:2c:34:dd:62:1c:b9:fa:a8:47:dd:ad:78:93:1c:ba:41:
d7:de:1b:25:01:a0:9d:79:d7:b6:df:53:94:15:81:12:52:59:
52:1a:e9:c0:2c:1b:1e:6b:4b:a9:e5:45:41:96:92:fb:e8:f1:
62:d5:57:88:1d:12:c4:fb:5b:af:7f:df:2a:04:79:7c:ac:87:
67:a9:3a:3d:d3:3d:bc:2e:7a:25:a7:95:ba:a1:33:b6:8b:99:
3e:1e:9d:d5:4c:af:3d:e5:33:36:eb:a1:b7:ad:9d:ef:1b:39:
d2:31:a5:64:ea:28:75:26:34:a6:b0:9b:68:f7:d8:2a:db:2a:
e6:4b:21:75:d9:28:a3:9b:38:7a:57:4e:96:cd:be:50:ba:8b:
4f:b7:b7:64:8d:0f:32:a1:09:60:d2:48:c4:5e:4a:27:c6:e6:
59:f4:d8:05:51:dd:8d:52:99:45:56:53:00:03:bb:28:12:84:
b4:c1:d8:df:c1:2e:e5:2e:48:c2:5f:43:a1:24:bb:fb:47:ea:
15:73:4d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:05:18 2026 by rpki-client