Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
File: 3virX3TckOn_uo1CmI7Vp3SMHQU.mft (raw, json)
Hash identifier: HuuMwUgus6pcS8+dVmyVo1ThoQvnHZgN93pEeRaM1e0=
Subject key identifier: FD:4D:A4:CE:8E:F3:8C:38:B7:72:C7:74:B7:01:04:B7:A0:CB:98:D8
Authority key identifier: DE:F8:AB:5F:74:DC:90:E9:FF:BA:8D:42:98:8E:D5:A7:74:8C:1D:05
Certificate issuer: /CN=def8ab5f74dc90e9ffba8d42988ed5a7748c1d05
Certificate serial: 019D2703E2CC2E6B095B53A68D42C50EAB08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
Manifest number: 10A1
Signing time: Wed 25 Mar 2026 22:00:59 +0000
Manifest this update: Wed 25 Mar 2026 22:00:59 +0000
Manifest next update: Thu 26 Mar 2026 22:00:59 +0000
Files and hashes: 1: 3virX3TckOn_uo1CmI7Vp3SMHQU.crl (hash: Huw+MAIvaKMgFjAh1glTUzOT0lLnuY286AIX6BW0Qk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:e2:cc:2e:6b:09:5b:53:a6:8d:42:c5:0e:ab:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=def8ab5f74dc90e9ffba8d42988ed5a7748c1d05
Validity
Not Before: Mar 25 22:00:59 2026 GMT
Not After : Mar 26 22:00:59 2026 GMT
Subject: CN=fd4da4ce8ef38c38b772c774b70104b7a0cb98d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4d:1f:95:a2:e0:14:f7:2d:d1:53:b7:25:b0:
3b:fc:d6:39:1a:02:5c:4d:85:09:74:fc:6f:94:a0:
86:e5:93:6a:12:99:90:d8:4e:53:f9:1d:bb:0e:93:
d9:3b:fc:bd:69:6c:0f:4b:6c:e5:f3:4f:37:73:64:
2d:15:48:a5:85:d5:d8:49:ad:54:ec:06:fe:10:53:
98:3a:4b:6f:6f:c0:9d:23:92:e6:b9:19:3d:36:d4:
ee:88:1f:bd:9f:65:47:14:3b:d0:db:33:28:aa:a8:
92:c6:49:3c:4a:2e:f9:85:cf:1c:3c:c4:de:3e:52:
39:c4:c6:f8:d4:c8:f2:db:0f:f2:87:60:f3:1d:f5:
92:14:1f:d7:89:a4:94:29:aa:3f:2f:21:6c:fb:d5:
fd:4c:0a:26:c3:f6:0b:50:66:de:88:cb:cc:56:b2:
8c:8a:ae:88:de:fb:22:9f:85:84:59:25:6e:93:31:
b1:a0:ef:68:a4:1e:0d:e6:7e:b2:b1:cf:d3:94:da:
f5:b3:c8:7e:2f:ab:0e:e2:1a:99:59:a9:0b:59:31:
fd:7a:48:2e:2d:80:d1:19:82:02:53:bc:c1:e2:28:
4e:3c:47:9e:34:f7:2f:79:47:36:48:1b:db:8c:9f:
36:b5:85:23:26:38:d9:3c:05:ed:00:55:8a:00:b6:
8f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:4D:A4:CE:8E:F3:8C:38:B7:72:C7:74:B7:01:04:B7:A0:CB:98:D8
X509v3 Authority Key Identifier:
keyid:DE:F8:AB:5F:74:DC:90:E9:FF:BA:8D:42:98:8E:D5:A7:74:8C:1D:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a4:42:62:21:7a:fb:0f:7a:11:be:b4:8f:9a:0a:48:04:3f:
83:2b:93:a5:40:0e:90:92:50:52:02:18:d0:83:82:62:8c:15:
cd:76:0b:b4:09:9e:55:52:25:47:51:de:d4:da:92:cf:17:c8:
8c:79:15:da:e7:69:dd:cf:4f:c7:2c:75:1c:35:da:1b:f9:ce:
6d:14:d3:3b:f6:eb:6c:f7:a8:81:41:0f:e2:ff:fe:d9:4a:74:
26:50:18:b8:b1:9b:11:0e:f7:9f:d9:a2:64:cc:fc:4c:d9:58:
40:ac:90:4f:36:98:50:67:ea:24:aa:bf:f6:58:a1:08:d1:56:
c7:7d:e6:fe:87:46:a7:cd:43:bb:40:e7:cd:9f:45:63:a8:85:
46:39:d5:e3:1a:f9:93:be:12:b8:48:6f:39:85:9e:56:75:a8:
e0:6c:58:10:9a:56:85:4b:d6:24:22:94:19:9f:bf:7c:21:47:
79:e2:4c:27:b9:72:4c:38:8e:ba:b6:cd:3d:29:7f:6a:73:09:
25:dc:85:a6:4d:65:68:02:ed:7c:98:2b:20:5e:13:bc:29:5e:
90:41:59:c8:20:5f:23:9c:f3:7a:73:fb:d2:91:d7:e7:be:cb:
c8:da:de:c6:6b:f4:82:8e:30:21:a2:1a:44:57:49:18:e4:b8:
62:6e:15:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:02 2026 by rpki-client