Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
File: 3nRxlsuMncZCM3r-vwSyBNzRlpY.mft (raw, json)
Hash identifier: zX0iMs2RLcoZC4Q41XFHvuvZtDHXifJ+qk504Xc9Ppw=
Subject key identifier: A7:D3:BF:56:A2:B6:0A:6A:FE:95:7D:EE:A5:60:06:DF:21:10:4B:4C
Authority key identifier: DE:74:71:96:CB:8C:9D:C6:42:33:7A:FE:BF:04:B2:04:DC:D1:96:96
Certificate issuer: /CN=de747196cb8c9dc642337afebf04b204dcd19696
Certificate serial: 019DA52FE4B0E891C3A3D6D25A55C9C10886
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
Manifest number: 07AE
Signing time: Sun 19 Apr 2026 10:01:12 +0000
Manifest this update: Sun 19 Apr 2026 10:01:12 +0000
Manifest next update: Mon 20 Apr 2026 10:01:12 +0000
Files and hashes: 1: 3nRxlsuMncZCM3r-vwSyBNzRlpY.crl (hash: /j+RXcjhPcrTkOvvxCmX5A8CGrQSry1X4q+9MrG5t7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:2f:e4:b0:e8:91:c3:a3:d6:d2:5a:55:c9:c1:08:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de747196cb8c9dc642337afebf04b204dcd19696
Validity
Not Before: Apr 19 10:01:12 2026 GMT
Not After : Apr 20 10:01:12 2026 GMT
Subject: CN=a7d3bf56a2b60a6afe957deea56006df21104b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2a:b4:05:63:fa:f3:c4:3b:f7:ca:1d:48:d5:
09:7b:c0:08:bd:fa:b4:68:c4:cb:56:c9:73:60:84:
2a:f9:fb:d8:7f:92:b3:34:17:d5:72:77:ef:75:ee:
7a:b3:8b:32:d1:2e:0c:3f:09:b6:17:66:fc:42:f8:
c6:4d:2b:e1:d4:83:e5:9d:bc:c3:eb:31:fc:d0:f2:
e9:34:82:cf:7e:45:68:b7:5c:ca:5f:63:b5:f0:02:
12:32:e8:fe:50:a1:c2:56:ac:cd:ca:f5:aa:b5:b4:
63:0d:13:d6:50:31:f4:d4:1e:5f:6d:cd:97:b4:db:
5c:f2:b6:e0:89:ee:78:c1:bc:3d:20:8e:bd:99:b8:
b1:04:11:3d:29:4b:e8:19:c3:8a:f3:1b:6c:c0:13:
2f:58:b5:fc:1f:82:8b:8a:e1:50:5e:b1:94:82:f4:
a0:6b:d1:64:81:09:4f:3b:51:68:66:9c:39:18:a8:
0e:3a:c9:89:5b:7a:c4:b1:2d:d8:1c:2c:91:22:be:
eb:24:ce:ec:60:4a:4e:1c:0c:a7:9d:09:3b:5c:b8:
6f:64:93:7e:af:37:20:e3:e8:1c:13:2e:19:2f:82:
98:66:ed:5e:d7:79:85:2a:49:5e:41:56:37:2b:d7:
f0:48:2d:df:57:13:f3:5d:64:e4:8d:15:20:a8:e2:
1c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D3:BF:56:A2:B6:0A:6A:FE:95:7D:EE:A5:60:06:DF:21:10:4B:4C
X509v3 Authority Key Identifier:
keyid:DE:74:71:96:CB:8C:9D:C6:42:33:7A:FE:BF:04:B2:04:DC:D1:96:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:a3:c5:ef:8e:0a:8f:61:53:4f:ae:78:e9:56:63:4d:ac:3c:
0c:eb:1f:4a:25:ba:e8:0d:cb:67:c7:0c:91:e2:35:f5:a2:3e:
d4:53:8c:54:a8:55:47:3f:a9:f2:2a:fc:68:b8:fe:73:ba:da:
a7:8a:b5:5d:fe:b0:95:c6:08:3f:08:44:40:87:0f:56:b3:0e:
ae:03:56:77:73:fc:ed:63:e1:52:06:a9:e6:6a:f9:b4:e4:11:
fd:b5:01:e4:09:c9:6c:c2:5f:41:ec:cf:5b:73:73:4f:3c:32:
33:e6:53:be:07:50:47:19:6e:35:01:b2:fe:ad:2c:d2:61:4f:
27:80:6a:b2:70:5a:e6:38:68:f0:2e:9c:1e:8c:90:8a:97:6a:
fe:47:94:91:ce:41:a4:7a:f2:50:78:22:e8:f3:77:4f:27:d7:
a2:f2:36:ac:8a:f7:97:ac:4c:b7:3b:eb:9c:18:1d:1e:c5:f0:
1d:02:34:aa:97:3f:15:ea:72:d4:36:0a:8e:56:99:98:5f:4f:
24:09:98:e1:41:84:54:3d:37:e4:15:4d:c2:a9:92:49:6f:95:
1c:29:2d:15:c2:0a:a6:11:eb:a9:50:ab:eb:1e:05:9e:b6:25:
62:ae:f9:1d:1c:76:84:1a:6c:9f:40:30:8b:b3:6a:bb:5a:83:
37:20:af:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2lL+Sw6JHDo9bSWlXJwQiGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNzQ3MTk2Y2I4YzlkYzY0MjMzN2FmZWJmMDRiMjA0ZGNk
MTk2OTYwHhcNMjYwNDE5MTAwMTEyWhcNMjYwNDIwMTAwMTEyWjAzMTEwLwYDVQQD
EyhhN2QzYmY1NmEyYjYwYTZhZmU5NTdkZWVhNTYwMDZkZjIxMTA0YjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiq0BWP688Q798odSNUJe8AIvfq0
aMTLVslzYIQq+fvYf5KzNBfVcnfvde56s4sy0S4MPwm2F2b8QvjGTSvh1IPlnbzD
6zH80PLpNILPfkVot1zKX2O18AISMuj+UKHCVqzNyvWqtbRjDRPWUDH01B5fbc2X
tNtc8rbgie54wbw9II69mbixBBE9KUvoGcOK8xtswBMvWLX8H4KLiuFQXrGUgvSg
a9FkgQlPO1FoZpw5GKgOOsmJW3rEsS3YHCyRIr7rJM7sYEpOHAynnQk7XLhvZJN+
rzcg4+gcEy4ZL4KYZu1e13mFKkleQVY3K9fwSC3fVxPzXWTkjRUgqOIcAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKfTv1aitgpq/pV97qVgBt8hEEtMMB8GA1UdIwQY
MBaAFN50cZbLjJ3GQjN6/r8EsgTc0ZaWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM25SeGxzdU1uY1pDTTNyLXZ3U3lCTnpSbHBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS85NzFjMjQtNmIyYi00NmE1LWE3NTEt
ZDNlOGE4Njg5ZGMzLzEvM25SeGxzdU1uY1pDTTNyLXZ3U3lCTnpSbHBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS85NzFjMjQtNmIyYi00NmE1LWE3NTEtZDNlOGE4Njg5ZGMz
LzEvM25SeGxzdU1uY1pDTTNyLXZ3U3lCTnpSbHBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi6PF744K
j2FTT6546VZjTaw8DOsfSiW66A3LZ8cMkeI19aI+1FOMVKhVRz+p8ir8aLj+c7ra
p4q1Xf6wlcYIPwhEQIcPVrMOrgNWd3P87WPhUgap5mr5tOQR/bUB5AnJbMJfQezP
W3NzTzwyM+ZTvgdQRxluNQGy/q0s0mFPJ4BqsnBa5jho8C6cHoyQipdq/keUkc5B
pHryUHgi6PN3TyfXovI2rIr3l6xMtzvrnBgdHsXwHQI0qpc/Fepy1DYKjlaZmF9P
JAmY4UGEVD035BVNwqmSSW+VHCktFcIKphHrqVCr6x4FnrYlYq75HRx2hBpsn0Aw
i7Nqu1qDNyCvlQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 13:00:34 2026 by rpki-client