Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
File: x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft (raw, json)
Hash identifier: jnVPdtZbXGgs/uvHVgvUzNX9KT+Z3ADJ1CHM3SFnJKQ=
Subject key identifier: F4:BF:1F:51:44:BB:0B:E5:61:CB:4E:F6:8D:5C:A5:DB:99:B3:C4:1E
Authority key identifier: C7:7B:19:69:D9:AD:DF:19:96:32:B4:DE:05:E8:A2:0E:3D:E7:B6:C4
Certificate issuer: /CN=c77b1969d9addf199632b4de05e8a20e3de7b6c4
Certificate serial: 019D996228AB82E478A9387E682DD82C67DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3sZadmt3xmWMrTeBeiiDj3ntsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
Manifest number: 08F9
Signing time: Fri 17 Apr 2026 03:00:40 +0000
Manifest this update: Fri 17 Apr 2026 03:00:40 +0000
Manifest next update: Sat 18 Apr 2026 03:00:40 +0000
Files and hashes: 1: x3sZadmt3xmWMrTeBeiiDj3ntsQ.crl (hash: wUEgzvu567Uyom/vLTH88TvhIUP+r7Ys1UiGC/JMrGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3sZadmt3xmWMrTeBeiiDj3ntsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:28:ab:82:e4:78:a9:38:7e:68:2d:d8:2c:67:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77b1969d9addf199632b4de05e8a20e3de7b6c4
Validity
Not Before: Apr 17 03:00:40 2026 GMT
Not After : Apr 18 03:00:40 2026 GMT
Subject: CN=f4bf1f5144bb0be561cb4ef68d5ca5db99b3c41e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9d:5e:6a:27:f1:ac:0f:99:44:2e:09:f6:1a:
ed:06:3d:3a:74:e6:7a:0c:7d:d9:53:ec:22:41:f7:
a0:80:24:34:ae:a2:ab:70:8c:91:2e:c2:01:5b:fc:
41:d3:83:75:2c:d1:f9:d4:d8:b6:ec:7f:7c:03:e2:
95:71:79:57:13:7c:36:97:f5:a1:c4:31:8b:3c:cf:
e9:9f:d5:8b:5c:c3:16:86:31:b2:1b:f9:75:f8:72:
cd:0d:d4:8c:f0:3d:ec:dc:33:58:8f:2a:21:fd:5c:
83:75:a0:ac:8c:0e:8f:75:bc:2a:71:c7:9c:00:09:
98:92:8d:d5:f2:3a:7b:34:a0:96:22:39:5c:e1:3a:
7a:9f:2e:21:fd:4d:d6:67:de:c8:64:51:af:3f:b1:
88:c5:34:80:27:b0:0c:09:40:5c:41:0b:45:95:10:
c9:d1:ce:c6:95:0f:c9:e6:4a:5f:53:56:ee:8d:66:
fa:00:83:12:01:f8:f4:62:d0:bd:b5:08:a0:7d:9d:
65:33:df:76:cd:96:e2:f0:c7:50:37:56:30:4c:0d:
8f:c3:91:dc:a2:4c:9e:39:01:07:da:af:bb:cb:44:
63:06:72:63:7d:ca:a4:27:af:e7:55:0d:9f:b1:02:
ac:de:b9:d8:74:c1:6c:59:db:d3:29:ce:4f:a5:8a:
73:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:BF:1F:51:44:BB:0B:E5:61:CB:4E:F6:8D:5C:A5:DB:99:B3:C4:1E
X509v3 Authority Key Identifier:
keyid:C7:7B:19:69:D9:AD:DF:19:96:32:B4:DE:05:E8:A2:0E:3D:E7:B6:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3sZadmt3xmWMrTeBeiiDj3ntsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:01:5a:b8:02:65:17:4a:54:f5:0b:1c:68:8a:b5:d3:9e:06:
f6:0b:94:7d:64:9c:37:67:c2:d4:09:e1:37:a3:98:05:0a:9b:
0d:c7:7b:43:a2:cd:ba:b1:5f:8e:96:02:07:9d:dc:fd:87:9b:
3e:0e:18:09:d9:5c:ef:68:0b:4f:dc:be:c4:7f:45:0a:e3:8c:
13:99:4b:14:05:93:41:fd:43:86:c5:55:8c:7b:12:2d:e2:e8:
5e:17:99:24:07:47:3c:a0:18:ab:47:a1:0b:9d:ef:40:16:a3:
17:23:5b:ba:b2:be:86:82:ad:9a:c6:a0:6d:9f:85:6f:cc:3e:
79:e4:4a:70:2d:33:83:57:c7:60:1a:cd:83:44:c9:6c:10:b7:
50:41:5c:40:6d:25:76:db:10:39:c3:53:de:66:45:7b:ef:40:
6d:d3:ba:6e:c2:93:7a:13:02:6b:26:bc:e0:ef:35:f1:47:83:
ae:a1:14:ea:6a:1d:7b:2d:61:95:d3:fc:af:35:03:74:ee:fd:
ce:f4:e2:8d:b6:14:66:3c:f7:9a:29:62:9d:bf:54:3f:98:5a:
b8:70:f5:3b:f5:4a:75:1b:ef:a6:e3:c1:c6:a1:d6:e0:7c:ce:
b4:d4:62:68:0d:d7:0c:1b:da:07:97:c6:f4:ee:26:75:b5:4f:
7a:57:dd:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:04:57 2026 by rpki-client