Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
File: x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft (raw, json)
Hash identifier: hprUQJsyXJnUoNmj1mtcOWzyx2AMeavLRTMShUaejT8=
Subject key identifier: D4:2F:CB:32:9B:7B:0A:4D:C0:EF:FE:43:DD:0C:84:DE:54:91:44:63
Authority key identifier: C7:7B:19:69:D9:AD:DF:19:96:32:B4:DE:05:E8:A2:0E:3D:E7:B6:C4
Certificate issuer: /CN=c77b1969d9addf199632b4de05e8a20e3de7b6c4
Certificate serial: 019CABD972C2E3224E118053C669AE5582E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3sZadmt3xmWMrTeBeiiDj3ntsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
Manifest number: 087E
Signing time: Mon 02 Mar 2026 00:01:20 +0000
Manifest this update: Mon 02 Mar 2026 00:01:20 +0000
Manifest next update: Tue 03 Mar 2026 00:01:20 +0000
Files and hashes: 1: x3sZadmt3xmWMrTeBeiiDj3ntsQ.crl (hash: oNe3eGt6DTjCt99bvxnSewvpGI1cFafuxgNV0PBvOlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3sZadmt3xmWMrTeBeiiDj3ntsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:72:c2:e3:22:4e:11:80:53:c6:69:ae:55:82:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77b1969d9addf199632b4de05e8a20e3de7b6c4
Validity
Not Before: Mar 2 00:01:20 2026 GMT
Not After : Mar 3 00:01:20 2026 GMT
Subject: CN=d42fcb329b7b0a4dc0effe43dd0c84de54914463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c7:87:ab:5c:75:13:e5:7c:15:01:a7:e7:84:
7f:87:75:45:6c:42:b1:dd:e4:6d:98:ea:32:50:e7:
8e:c8:86:03:c9:57:2e:df:50:75:1c:b3:94:47:bb:
27:24:a9:f7:38:d1:f8:3a:79:6f:25:22:46:f2:31:
1f:54:96:ff:83:29:02:cd:f8:fe:01:d0:ef:89:cc:
e9:07:1f:6a:fa:43:23:78:5c:59:33:8e:83:71:ec:
14:34:85:5c:b6:07:ec:b6:9a:74:bc:c8:fd:d7:20:
b6:ee:54:fd:2d:c6:07:67:e9:8a:34:bd:9b:8b:8a:
c0:50:e4:f8:6d:1a:84:36:6f:cc:f7:4d:8c:f8:4a:
66:b6:30:55:d6:28:e0:d3:a1:19:ce:c0:f2:8f:34:
32:4c:66:3a:b8:e6:cd:1e:fb:60:02:75:9d:e2:7c:
3f:36:93:53:34:b9:48:32:33:bc:97:f3:c7:d6:f1:
c8:b7:cf:7a:af:44:19:8d:3d:6d:5b:68:bc:8b:08:
cc:e4:49:4e:48:e8:3c:a4:e3:9b:0f:19:4d:43:e9:
41:e3:8c:88:74:6b:72:f3:35:6e:d8:88:5f:bd:22:
e4:c2:c6:0c:af:ab:1f:45:60:37:21:7b:9c:6a:c7:
a5:42:46:d6:f9:cd:b2:12:5a:80:02:4f:7f:58:dc:
32:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:2F:CB:32:9B:7B:0A:4D:C0:EF:FE:43:DD:0C:84:DE:54:91:44:63
X509v3 Authority Key Identifier:
keyid:C7:7B:19:69:D9:AD:DF:19:96:32:B4:DE:05:E8:A2:0E:3D:E7:B6:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3sZadmt3xmWMrTeBeiiDj3ntsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:8f:d4:e3:de:f3:d9:0e:fe:47:e8:eb:98:c5:17:5d:fe:cc:
e0:56:28:56:64:95:54:33:63:d3:e7:c4:dd:3a:61:d4:86:c1:
34:3a:bc:a7:39:c6:7b:86:5e:7b:69:32:00:b8:57:2f:1d:9a:
cf:c1:9c:91:51:24:c8:40:c3:9d:9d:c0:55:39:e3:8a:0f:34:
5f:d4:c2:bc:bb:70:71:4e:91:f0:b2:61:00:d9:7f:64:42:a4:
3c:c8:96:ba:e2:35:ff:b4:b7:c2:27:33:de:15:a4:15:7c:5f:
bf:a2:7a:7f:40:d3:c0:34:a6:39:eb:66:1d:46:7e:08:8d:85:
b0:d9:75:df:3e:b4:f2:c4:32:55:05:c7:07:9a:d1:87:ff:0f:
13:9a:c1:f6:ce:58:00:19:c3:4d:ae:57:bc:4a:a2:e7:6a:61:
a0:a6:87:45:5d:53:8e:d4:e5:55:38:47:cf:f0:21:90:0b:cb:
97:47:16:c2:26:34:ff:83:3a:84:d2:38:68:b6:2c:7f:d3:f3:
b7:c0:e6:81:c5:19:e2:ba:0b:13:ce:66:d9:ba:e2:47:54:f6:
eb:11:a0:8a:bf:a0:9b:6b:3a:63:3b:86:6d:61:41:04:03:4b:
87:aa:42:38:14:fd:55:b2:a1:0b:a8:84:bf:e9:d3:7e:57:27:
93:9c:87:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:55:22 2026 by rpki-client