Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
File: 3nRxlsuMncZCM3r-vwSyBNzRlpY.mft (raw, json)
Hash identifier: Am9Bhhc/kfQg81HhPqCZGiu0LI8+MrydGyiwRG/hh9w=
Subject key identifier: DE:69:4F:B2:52:ED:95:28:31:0E:19:00:7F:5F:47:D1:CF:07:9B:94
Authority key identifier: DE:74:71:96:CB:8C:9D:C6:42:33:7A:FE:BF:04:B2:04:DC:D1:96:96
Certificate issuer: /CN=de747196cb8c9dc642337afebf04b204dcd19696
Certificate serial: 019EBF23B0B22124E942F09E589DBED7915A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
Manifest number: 0840
Signing time: Sat 13 Jun 2026 04:00:47 +0000
Manifest this update: Sat 13 Jun 2026 04:00:47 +0000
Manifest next update: Sun 14 Jun 2026 04:00:47 +0000
Files and hashes: 1: 3nRxlsuMncZCM3r-vwSyBNzRlpY.crl (hash: BwsFKPh5PJbXxcS+gwReAaRM6k2FnMFoKiN6HIb5Gso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:b0:b2:21:24:e9:42:f0:9e:58:9d:be:d7:91:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de747196cb8c9dc642337afebf04b204dcd19696
Validity
Not Before: Jun 13 04:00:47 2026 GMT
Not After : Jun 14 04:00:47 2026 GMT
Subject: CN=de694fb252ed9528310e19007f5f47d1cf079b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:89:10:ca:f3:be:86:80:99:79:cd:b6:46:0a:
d8:61:c2:60:f9:13:2e:f4:4a:e0:b1:29:2d:cc:f5:
f6:5d:6f:60:37:03:67:66:3e:65:b5:e3:73:7a:ff:
eb:7e:d9:c6:cc:39:92:66:71:9e:c1:c2:fb:6a:a3:
33:4f:5e:e2:68:b6:fe:78:55:db:3a:1c:59:b1:2b:
19:d4:1e:aa:ff:8d:ac:7d:e1:64:cc:b9:41:69:e7:
2d:ad:7d:83:b8:bf:49:66:2a:9c:fd:ac:68:40:6a:
8f:61:ee:21:12:76:0e:73:46:ad:2a:68:e8:c9:f5:
12:9c:b9:24:4a:e6:0c:c1:02:ad:de:0b:16:cf:d7:
f2:9d:8a:13:a4:01:dd:03:f3:19:da:01:c2:d5:b8:
d2:26:4b:d6:5f:2e:3e:ef:9a:89:fb:50:2b:b4:f8:
e0:c1:e8:61:e9:33:9d:48:dd:4a:1a:8b:d8:4c:7e:
6f:e2:37:33:6f:37:b4:f5:63:2e:69:63:e3:ce:4b:
74:23:69:c4:51:b9:e2:c3:27:d2:32:26:96:c6:e6:
08:1a:32:20:93:37:e2:cc:df:56:c4:52:a8:17:81:
94:11:61:ac:a3:0e:1d:32:a1:6e:68:9c:09:1a:43:
a9:4f:87:13:17:6e:0c:11:75:52:43:9e:08:9a:4a:
17:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:69:4F:B2:52:ED:95:28:31:0E:19:00:7F:5F:47:D1:CF:07:9B:94
X509v3 Authority Key Identifier:
keyid:DE:74:71:96:CB:8C:9D:C6:42:33:7A:FE:BF:04:B2:04:DC:D1:96:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:fc:a8:13:82:d9:5f:88:84:83:9d:a0:d7:34:24:12:d6:93:
25:6d:e6:97:7f:2c:62:db:41:1f:20:16:6a:96:d0:88:2f:d5:
0c:3b:56:92:63:b7:ad:b9:d3:65:7c:fc:ba:74:4e:8b:c4:81:
cf:ee:48:6d:8d:a3:c6:82:a1:60:3a:a2:e7:b3:21:c5:74:68:
49:c6:70:6a:c9:2b:6d:f1:52:e7:12:2c:db:61:3a:d9:85:e5:
70:ff:8b:9d:9d:c4:6d:fc:eb:10:32:4e:db:15:fc:7e:52:c4:
41:93:7e:bc:fb:94:5b:04:d7:8f:99:23:72:99:95:5a:f9:9b:
1b:89:1e:ba:71:ea:ff:72:7a:08:ac:e2:9a:d6:3f:64:e5:22:
1e:09:ea:dc:c1:c0:77:69:a2:10:32:8b:cf:2b:e8:07:39:09:
67:3b:c1:c2:c0:04:97:8a:40:af:f6:61:8f:54:30:2b:c8:fa:
fd:85:52:5a:f3:19:bc:eb:d7:7f:96:d1:d2:e5:bc:91:d0:37:
26:08:ce:15:07:3e:fa:f9:06:5a:7a:b1:22:19:d5:2a:9a:3c:
df:62:d6:91:65:47:f8:ca:06:29:ea:c0:0a:5e:0a:f8:52:5f:
46:61:47:3a:c2:44:26:a9:37:25:f0:d2:f7:ee:62:19:33:0e:
4c:ad:6a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:34:12 2026 by rpki-client