Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
File: 3nRxlsuMncZCM3r-vwSyBNzRlpY.mft (raw, json)
Hash identifier: 4wINbJe4i/OJgc7QO2SFKKevsHPlTW4CyJnJztIB0MA=
Subject key identifier: 30:5E:2F:33:8A:EA:AD:EF:74:60:0F:2B:0F:A9:8F:B5:CA:06:0A:B8
Authority key identifier: DE:74:71:96:CB:8C:9D:C6:42:33:7A:FE:BF:04:B2:04:DC:D1:96:96
Certificate issuer: /CN=de747196cb8c9dc642337afebf04b204dcd19696
Certificate serial: 019FA8D06B101B3D32EF668C10BB6F88A977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
Manifest number: 08B9
Signing time: Tue 28 Jul 2026 13:00:58 +0000
Manifest this update: Tue 28 Jul 2026 13:00:58 +0000
Manifest next update: Wed 29 Jul 2026 13:00:58 +0000
Files and hashes: 1: 3nRxlsuMncZCM3r-vwSyBNzRlpY.crl (hash: BJg0xtouwWUCEOY6pAe7dQqbYT9TwA+QEp56vA/e6cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:6b:10:1b:3d:32:ef:66:8c:10:bb:6f:88:a9:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de747196cb8c9dc642337afebf04b204dcd19696
Validity
Not Before: Jul 28 13:00:58 2026 GMT
Not After : Jul 29 13:00:58 2026 GMT
Subject: CN=305e2f338aeaadef74600f2b0fa98fb5ca060ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0c:da:7c:0b:6e:57:e1:e6:82:c7:2c:e3:58:
4a:58:32:da:6e:f1:4f:14:df:6e:46:84:ed:e2:e7:
ca:b0:83:b8:50:71:a2:d0:e3:fa:9c:9f:a6:47:45:
70:aa:03:2c:c2:50:00:44:ca:d7:b0:ec:fc:b4:d7:
d6:85:90:57:eb:cf:66:eb:2f:13:62:63:43:c4:e6:
94:21:3a:6f:62:94:11:72:39:3d:42:4f:61:47:3c:
cb:90:68:93:91:60:8a:f1:c7:5f:c6:81:b2:f0:1c:
b4:92:27:a2:7b:32:32:e7:00:67:d1:3a:a8:f4:f5:
d2:16:0c:23:7e:e8:e5:49:2f:fd:2c:32:19:08:78:
61:08:17:c4:15:dc:21:92:79:63:c0:f4:a2:a0:39:
cf:22:74:29:b5:49:21:dc:03:2c:3d:17:d1:bf:5e:
a3:df:ec:a3:30:ca:67:8c:f0:61:3f:ce:db:13:24:
49:a3:a6:d5:9d:a3:8f:9f:7b:62:a8:9f:30:ff:30:
93:74:23:a5:f1:6e:c5:7e:39:c1:e3:85:aa:f7:01:
09:38:ba:3a:0a:b3:57:92:80:d7:f4:78:3c:46:1c:
4d:cb:7d:19:b4:6e:05:93:88:49:1b:54:92:14:bb:
bb:63:a0:04:86:2e:e3:dd:54:fe:dc:9d:12:6d:8f:
92:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:5E:2F:33:8A:EA:AD:EF:74:60:0F:2B:0F:A9:8F:B5:CA:06:0A:B8
X509v3 Authority Key Identifier:
keyid:DE:74:71:96:CB:8C:9D:C6:42:33:7A:FE:BF:04:B2:04:DC:D1:96:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:0c:77:a4:d8:8f:03:a1:59:0c:3d:73:67:c3:fb:90:af:ac:
db:fb:6d:92:34:72:53:6c:d6:b2:ed:76:7b:47:fc:19:6d:72:
10:14:e3:28:e4:49:7e:44:1a:de:2f:9d:d5:f5:3d:b6:8a:98:
54:cd:9c:84:06:d8:97:03:91:c0:c2:f0:af:2b:10:6c:41:96:
69:95:ba:7a:44:ea:58:79:32:e9:1c:ee:a6:9b:e6:90:6d:d1:
3b:9a:b9:bc:5e:3e:cd:cf:06:fa:09:e6:a4:25:43:a1:33:56:
8e:f7:92:6e:fe:9c:1c:72:eb:48:59:11:f6:20:34:99:87:7b:
5e:a5:ee:a9:4d:be:82:32:cb:be:43:10:a8:33:91:54:fb:3c:
2f:e2:5e:2b:a4:e6:01:7e:a4:d7:7a:2d:7b:6d:5a:38:e8:f7:
09:5e:44:bf:eb:aa:98:d7:51:40:2a:94:11:3b:e6:51:f4:3b:
3d:60:4c:9c:da:bc:ba:36:64:72:d8:25:cd:c9:db:c8:d0:63:
0e:1f:99:c7:4a:44:52:ee:08:15:98:fe:a6:91:83:c5:21:be:
35:fd:04:c3:16:74:14:34:4d:91:57:5d:76:b6:f6:e5:d1:03:
7b:2e:9e:ad:b1:92:83:92:07:43:0f:b2:e3:b1:6d:8d:4c:01:
54:d4:2b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:01:53 2026 by rpki-client