Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
File: 3nRxlsuMncZCM3r-vwSyBNzRlpY.mft (raw, json)
Hash identifier: p9wj7v1xJfZev5k40STG7OYogdmEF2+7UVAgYcokCao=
Subject key identifier: 3D:6B:E1:A0:39:D4:B7:9E:8C:66:BD:21:3B:51:6F:C5:F7:9A:1E:88
Authority key identifier: DE:74:71:96:CB:8C:9D:C6:42:33:7A:FE:BF:04:B2:04:DC:D1:96:96
Certificate issuer: /CN=de747196cb8c9dc642337afebf04b204dcd19696
Certificate serial: 01A0C88F4192C4D064B8DB916C5732C7B345
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
Manifest number: 094E
Signing time: Tue 22 Sep 2026 10:00:26 +0000
Manifest this update: Tue 22 Sep 2026 10:00:26 +0000
Manifest next update: Wed 23 Sep 2026 10:00:26 +0000
Files and hashes: 1: 3nRxlsuMncZCM3r-vwSyBNzRlpY.crl (hash: mYQWe3EnbQ/93oaMviElUgB4uexRfodbIKB6nwR88TY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:8f:41:92:c4:d0:64:b8:db:91:6c:57:32:c7:b3:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de747196cb8c9dc642337afebf04b204dcd19696
Validity
Not Before: Sep 22 10:00:26 2026 GMT
Not After : Sep 23 10:00:26 2026 GMT
Subject: CN=3d6be1a039d4b79e8c66bd213b516fc5f79a1e88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ce:e7:dc:c4:87:10:c9:f3:df:5c:7b:b9:76:
71:e3:8b:79:3c:84:e2:d4:dd:41:59:b7:56:18:84:
a3:a0:67:f0:d0:46:35:9e:ad:b2:70:63:c8:72:0a:
08:c3:a2:40:4d:4c:4d:34:65:c6:85:3c:ad:09:09:
8e:01:66:d4:4f:4f:e1:60:02:73:22:ad:15:c6:ea:
e5:ae:e9:d4:41:a6:f2:ed:f5:bc:2c:be:23:52:66:
91:7b:c8:ca:15:a2:89:67:85:bb:47:83:be:ab:53:
52:95:0a:e5:de:91:6a:15:5f:7c:5c:1b:80:3a:40:
4c:a7:c6:30:81:17:66:da:16:2c:79:0d:5c:b9:f1:
05:3b:e0:36:4f:b8:8c:5c:cb:69:5c:cc:68:95:6a:
e7:56:be:b9:a6:e4:8a:e0:d2:75:4c:d1:ed:7c:5d:
97:00:9a:4c:0c:a9:55:c5:9d:41:08:41:4b:81:69:
03:9e:a7:ba:4e:4c:27:72:f0:c0:83:9f:b8:af:14:
e5:e6:af:1f:92:1d:37:84:d7:5b:f6:e3:ff:6d:04:
ec:c0:1a:72:1b:05:7a:9f:d9:86:08:c8:4a:a7:9e:
6e:33:65:d9:36:9d:c2:71:04:09:60:3f:71:c2:ee:
fa:7b:33:30:9f:09:fa:39:05:58:ed:0f:78:69:4e:
45:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:6B:E1:A0:39:D4:B7:9E:8C:66:BD:21:3B:51:6F:C5:F7:9A:1E:88
X509v3 Authority Key Identifier:
keyid:DE:74:71:96:CB:8C:9D:C6:42:33:7A:FE:BF:04:B2:04:DC:D1:96:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:24:57:73:0d:bf:b4:93:4a:a6:51:6f:f9:b1:b2:da:97:b3:
d7:f0:f3:6e:ff:b1:0f:c7:6e:e5:65:46:a4:e3:e4:13:e3:fd:
6b:a9:da:f9:23:3f:fb:ff:b6:26:76:94:54:54:84:32:d9:a2:
bf:35:a5:4f:88:96:22:b4:10:a4:70:e0:22:a8:10:1c:55:63:
29:c7:29:10:a2:ed:db:99:bd:69:cd:65:27:30:26:7b:ab:e8:
45:60:67:8d:26:24:36:9c:39:91:10:8d:c9:f3:92:c2:bf:6a:
71:44:5d:f6:93:76:90:ce:1b:31:35:02:3b:af:45:80:e0:2b:
ac:1b:c3:c7:db:f1:c7:f7:1c:59:9b:cb:8d:87:d7:88:bb:a4:
e9:74:b6:4b:4b:08:e9:2f:93:ac:32:c5:50:8f:f0:b3:d6:c0:
31:de:0b:63:fe:2d:3a:f6:c7:a4:58:fe:73:46:0c:f5:ff:84:
17:13:ca:9e:d3:be:bd:e9:09:dd:4d:b0:9a:e2:e8:34:3b:a1:
30:b6:76:86:0c:c2:f1:5b:09:30:82:b1:68:9f:85:e4:19:92:
db:cc:14:c9:ac:22:af:cb:12:73:64:73:21:63:b1:a8:fe:2f:
92:6e:f8:79:d7:a7:03:b5:7e:cb:41:b8:b8:92:ec:05:4a:13:
b3:88:a5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:54:47 2026 by rpki-client