Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
File: 3virX3TckOn_uo1CmI7Vp3SMHQU.mft (raw, json)
Hash identifier: mt0BI5pL8etSKkXEn0IShiDbUBDtQW5DhT/nmFQ+mgY=
Subject key identifier: E5:17:D9:74:A2:05:5C:CB:31:61:84:59:CF:49:9E:F5:12:5F:4F:09
Authority key identifier: DE:F8:AB:5F:74:DC:90:E9:FF:BA:8D:42:98:8E:D5:A7:74:8C:1D:05
Certificate issuer: /CN=def8ab5f74dc90e9ffba8d42988ed5a7748c1d05
Certificate serial: 019E1E3613B5660D1B0EFA3772D2490F80E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
Manifest number: 1121
Signing time: Tue 12 May 2026 22:02:00 +0000
Manifest this update: Tue 12 May 2026 22:02:00 +0000
Manifest next update: Wed 13 May 2026 22:02:00 +0000
Files and hashes: 1: 3virX3TckOn_uo1CmI7Vp3SMHQU.crl (hash: 6uppK91gSERi2nenytRlTD82nEmSlvJBK15xSFGWpYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:36:13:b5:66:0d:1b:0e:fa:37:72:d2:49:0f:80:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=def8ab5f74dc90e9ffba8d42988ed5a7748c1d05
Validity
Not Before: May 12 22:02:00 2026 GMT
Not After : May 13 22:02:00 2026 GMT
Subject: CN=e517d974a2055ccb31618459cf499ef5125f4f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:11:40:3f:04:af:2f:bf:ba:40:b4:d8:51:ef:
b0:25:55:40:5b:04:c2:44:aa:b8:d9:98:6e:a0:57:
3a:d0:ed:99:09:a8:ca:e8:20:a1:5a:fe:b6:3b:25:
9e:2d:a0:19:00:01:70:7a:2c:1e:00:45:81:a3:e5:
16:25:88:c3:41:11:0d:96:2d:2e:1f:1d:cd:af:d5:
3a:2d:6e:9c:8d:48:30:a1:d1:0c:5d:73:ce:c3:10:
dd:62:22:e1:37:b2:29:13:59:f1:0f:8d:7a:9f:20:
17:bd:e0:ec:2b:22:49:1d:2d:ed:9d:02:6e:9b:fe:
d9:53:07:5d:ca:64:af:ab:7c:54:8b:0e:ff:36:5b:
b5:da:a2:d6:bb:3f:a3:ae:24:41:99:eb:cd:32:34:
b3:e7:aa:73:20:a3:44:17:50:ba:d9:e5:6a:79:8d:
02:c5:a8:61:64:a3:a2:5d:ad:8c:6f:a4:ed:61:ff:
26:f2:c5:34:48:63:88:d1:d8:04:27:3f:cb:14:7d:
15:6e:fe:a8:a2:19:58:8c:7c:46:78:95:f6:b4:d9:
6a:59:46:c6:73:b7:36:b2:5f:99:e4:9c:c8:06:3c:
c8:67:27:6f:33:bd:70:11:a0:36:76:53:e4:19:8b:
92:93:18:43:4c:bc:e6:e6:72:42:64:04:90:7e:41:
16:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:17:D9:74:A2:05:5C:CB:31:61:84:59:CF:49:9E:F5:12:5F:4F:09
X509v3 Authority Key Identifier:
keyid:DE:F8:AB:5F:74:DC:90:E9:FF:BA:8D:42:98:8E:D5:A7:74:8C:1D:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:67:5e:68:e2:1a:b0:0e:2e:d0:63:71:e9:db:8e:b9:6f:c7:
45:07:10:ac:ae:c7:55:e3:7b:b9:72:63:fd:b6:d8:bb:47:52:
e0:08:d0:85:bb:66:91:47:f0:b6:ef:70:59:71:53:6f:00:ba:
84:df:6b:f2:48:d5:63:11:55:be:ad:db:e3:e5:ed:47:04:35:
9d:e4:43:bf:1e:d4:fa:43:7d:ea:88:db:83:48:e7:0f:99:66:
27:b8:46:20:db:49:0f:2b:e5:1b:c9:e5:2c:7e:de:96:4b:fd:
71:22:f5:00:bb:e7:86:d1:74:4d:3b:fa:34:b7:10:bf:f3:e5:
96:1b:76:a5:dc:ee:ee:fc:f9:75:4e:eb:59:7c:dc:8b:d6:9e:
52:ef:97:fe:e0:48:b7:b6:8f:5a:c5:81:7b:c5:6a:93:09:32:
ab:dd:22:08:83:9a:d7:e3:88:1e:cc:93:a9:e0:02:a5:82:49:
3f:76:22:fe:59:31:f5:57:08:92:8b:19:55:5d:d6:72:46:f5:
e0:d5:f3:e6:d9:5a:bf:8b:97:3c:f1:91:e7:09:54:31:76:b6:
38:24:db:f9:9e:22:d9:84:94:90:d5:67:7d:eb:ff:21:16:5c:
b9:6f:70:24:92:71:c1:0c:3d:33:0a:42:72:3f:f9:7b:3a:3c:
13:83:c8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:40:04 2026 by rpki-client