Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
File: 3virX3TckOn_uo1CmI7Vp3SMHQU.mft (raw, json)
Hash identifier: 3tqAjIeu26JRpT9M0pxQ8Qnydd1Aiit4s9gOSy1WXKg=
Subject key identifier: 72:42:5C:49:6C:27:C1:CC:67:5C:15:97:23:CF:BE:97:59:DA:2E:7F
Authority key identifier: DE:F8:AB:5F:74:DC:90:E9:FF:BA:8D:42:98:8E:D5:A7:74:8C:1D:05
Certificate issuer: /CN=def8ab5f74dc90e9ffba8d42988ed5a7748c1d05
Certificate serial: 01A0CDB60A3EC1EFC1A79963249A8D70C08E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
Manifest number: 1285
Signing time: Wed 23 Sep 2026 10:00:54 +0000
Manifest this update: Wed 23 Sep 2026 10:00:54 +0000
Manifest next update: Thu 24 Sep 2026 10:00:54 +0000
Files and hashes: 1: 3virX3TckOn_uo1CmI7Vp3SMHQU.crl (hash: PzqpKNvOU6cm9qUkwggB971eMaWSLBaIwbwBi4OmAt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 10:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:b6:0a:3e:c1:ef:c1:a7:99:63:24:9a:8d:70:c0:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=def8ab5f74dc90e9ffba8d42988ed5a7748c1d05
Validity
Not Before: Sep 23 10:00:54 2026 GMT
Not After : Sep 24 10:00:54 2026 GMT
Subject: CN=72425c496c27c1cc675c159723cfbe9759da2e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f2:ef:7b:e7:16:b5:97:0a:85:df:dd:02:87:
df:ad:12:0a:dc:db:88:44:4f:01:a6:49:eb:c7:44:
b7:f1:ab:67:6f:fc:4d:52:c2:1d:ba:e9:4c:4f:52:
6e:c9:25:ab:5a:3e:c5:18:12:7b:1f:bf:b9:64:f1:
f4:5d:bf:83:83:aa:ad:3b:83:f8:91:be:11:ea:78:
1e:6d:2b:ba:f3:23:4c:f8:c2:d9:96:41:92:9d:2a:
83:07:b8:f2:3f:35:b7:22:83:da:88:37:30:b6:e9:
6e:0c:6a:6c:05:01:03:d7:1b:c8:81:3c:c0:73:7f:
5e:4f:e7:c0:39:a7:2e:f7:70:49:fd:aa:b9:33:aa:
f8:44:fb:57:e2:e0:e7:cc:e5:3a:f1:7c:6e:a2:36:
e5:78:ba:94:80:78:5c:d4:fb:93:44:91:08:57:38:
fe:81:05:77:95:30:ae:c4:8b:bf:b5:b3:ee:1f:bc:
c4:bd:a1:c5:76:cc:bc:bc:ca:fd:5e:99:d1:5a:ad:
16:f8:87:99:52:0f:75:e1:46:2e:00:17:a5:4c:d3:
54:e9:4b:ad:79:1f:a0:6d:62:c7:12:9d:75:d3:9e:
3a:92:d3:67:ab:ff:74:a9:9f:4b:d6:a0:8c:3a:bb:
8d:f0:a5:ff:6a:99:fe:3e:dc:7d:6e:c2:b6:3d:b0:
06:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:42:5C:49:6C:27:C1:CC:67:5C:15:97:23:CF:BE:97:59:DA:2E:7F
X509v3 Authority Key Identifier:
keyid:DE:F8:AB:5F:74:DC:90:E9:FF:BA:8D:42:98:8E:D5:A7:74:8C:1D:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:78:9a:f1:96:f0:ea:af:47:97:2b:46:28:4a:c7:5b:ba:78:
98:3f:3c:97:0c:c2:c4:68:9b:ff:f9:63:04:d2:88:0d:31:30:
5a:aa:39:db:3b:29:d5:44:a6:df:b0:e6:e9:a0:7f:13:fe:e4:
e8:34:d1:f0:d3:0e:67:52:56:d4:00:7a:40:d5:0d:d5:f1:7d:
da:88:e3:c0:4b:a6:29:4c:90:26:e1:96:ae:14:0f:be:4e:4f:
a6:5e:5e:94:19:2e:bf:a5:a5:4a:fc:d9:1b:2f:cd:67:98:3e:
bb:8c:4a:fb:e3:a2:40:96:92:e4:2a:16:8d:3a:de:4c:42:59:
49:d7:ee:4f:98:7f:ad:ab:a1:5c:80:c8:09:03:d2:7a:a0:19:
76:1e:6b:a0:18:cb:16:05:77:fe:49:c8:f2:14:84:8f:3b:e1:
44:69:f2:08:08:70:02:7d:be:eb:c2:74:18:2b:93:2d:2c:99:
53:7b:d4:88:ed:a7:9d:46:fb:be:d2:90:b1:ae:da:88:e8:31:
9c:42:be:d1:cf:87:56:52:50:48:dc:df:8d:c5:8d:d3:58:4b:
94:c4:3f:fa:79:91:95:65:90:27:94:4e:bb:31:51:62:8b:a0:
75:24:90:ab:c0:c5:73:69:2c:04:ce:67:2e:2a:76:4e:6b:b9:
3e:24:c4:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDNtgo+we/Bp5ljJJqNcMCOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlZjhhYjVmNzRkYzkwZTlmZmJhOGQ0Mjk4OGVkNWE3NzQ4
YzFkMDUwHhcNMjYwOTIzMTAwMDU0WhcNMjYwOTI0MTAwMDU0WjAzMTEwLwYDVQQD
Eyg3MjQyNWM0OTZjMjdjMWNjNjc1YzE1OTcyM2NmYmU5NzU5ZGEyZTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfLve+cWtZcKhd/dAoffrRIK3NuI
RE8Bpknrx0S38atnb/xNUsIduulMT1JuySWrWj7FGBJ7H7+5ZPH0Xb+Dg6qtO4P4
kb4R6ngebSu68yNM+MLZlkGSnSqDB7jyPzW3IoPaiDcwtuluDGpsBQED1xvIgTzA
c39eT+fAOacu93BJ/aq5M6r4RPtX4uDnzOU68XxuojbleLqUgHhc1PuTRJEIVzj+
gQV3lTCuxIu/tbPuH7zEvaHFdsy8vMr9XpnRWq0W+IeZUg914UYuABelTNNU6Uut
eR+gbWLHEp110546ktNnq/90qZ9L1qCMOruN8KX/apn+Ptx9bsK2PbAG3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHJCXElsJ8HMZ1wVlyPPvpdZ2i5/MB8GA1UdIwQY
MBaAFN74q1903JDp/7qNQpiO1ad0jB0FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3ZpclgzVGNrT25fdW8xQ21JN1ZwM1NNSFFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS82YTcyNWEtNDJlNC00MjcwLWI1YWYt
NDUzZmMxYmNiY2Q1LzEvM3ZpclgzVGNrT25fdW8xQ21JN1ZwM1NNSFFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS82YTcyNWEtNDJlNC00MjcwLWI1YWYtNDUzZmMxYmNiY2Q1
LzEvM3ZpclgzVGNrT25fdW8xQ21JN1ZwM1NNSFFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtnia8Zbw
6q9HlytGKErHW7p4mD88lwzCxGib//ljBNKIDTEwWqo52zsp1USm37Dm6aB/E/7k
6DTR8NMOZ1JW1AB6QNUN1fF92ojjwEumKUyQJuGWrhQPvk5Ppl5elBkuv6WlSvzZ
Gy/NZ5g+u4xK++OiQJaS5CoWjTreTEJZSdfuT5h/rauhXIDICQPSeqAZdh5roBjL
FgV3/knI8hSEjzvhRGnyCAhwAn2+68J0GCuTLSyZU3vUiO2nnUb7vtKQsa7aiOgx
nEK+0c+HVlJQSNzfjcWN01hLlMQ/+nmRlWWQJ5ROuzFRYougdSSQq8DFc2ksBM5n
Lip2Tmu5PiTE1Q==
-----END CERTIFICATE-----
Generated at Wed Sep 23 19:10:06 2026 by rpki-client