Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
File: 3nRxlsuMncZCM3r-vwSyBNzRlpY.mft (raw, json)
Hash identifier: nSbGbPO+JI3YkdVYGnvO1pMpzfuNAs6p1hTJYqMhDlI=
Subject key identifier: 9B:B1:18:D6:57:2D:A1:D5:04:37:AF:5A:61:00:69:0E:9A:8A:E1:09
Authority key identifier: DE:74:71:96:CB:8C:9D:C6:42:33:7A:FE:BF:04:B2:04:DC:D1:96:96
Certificate issuer: /CN=de747196cb8c9dc642337afebf04b204dcd19696
Certificate serial: 019D27A8B8C93B03DE1ABE07701C2B4FB7F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
Manifest number: 076D
Signing time: Thu 26 Mar 2026 01:01:01 +0000
Manifest this update: Thu 26 Mar 2026 01:01:01 +0000
Manifest next update: Fri 27 Mar 2026 01:01:01 +0000
Files and hashes: 1: 3nRxlsuMncZCM3r-vwSyBNzRlpY.crl (hash: dLQCrYoJhZRqalbbxe4HmKtOebaw3UDEEoTtVyKL+pA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:b8:c9:3b:03:de:1a:be:07:70:1c:2b:4f:b7:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de747196cb8c9dc642337afebf04b204dcd19696
Validity
Not Before: Mar 26 01:01:01 2026 GMT
Not After : Mar 27 01:01:01 2026 GMT
Subject: CN=9bb118d6572da1d50437af5a6100690e9a8ae109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:46:96:25:31:fe:c2:8a:e4:f1:82:e6:97:17:
4f:d6:c9:ce:56:93:2d:a7:60:39:c4:64:d2:cc:1d:
c8:b0:54:93:ea:a0:b0:9b:fe:a6:08:4c:ae:ab:17:
d9:54:92:77:7e:46:be:44:4d:91:9a:a5:44:d2:f3:
38:01:50:d9:06:a5:79:bd:dd:19:98:ed:b2:08:a9:
9a:15:f5:a3:9e:f0:34:b1:7c:64:29:f3:79:b9:98:
49:a9:a2:d3:5c:97:ce:27:c7:59:5a:eb:fd:d5:88:
ff:e7:10:fc:72:26:95:9a:fa:65:db:51:28:72:0d:
c2:51:ce:35:1a:6b:05:e5:22:67:4d:0d:06:35:28:
f2:a5:a3:3f:66:8e:c1:2f:7d:eb:b8:d6:70:2e:78:
2e:ad:64:29:e0:42:56:3f:f6:2d:ac:54:e0:df:0f:
66:d4:6b:99:99:ad:32:59:f6:25:be:ea:76:65:f3:
29:a7:1e:d7:4b:e8:8f:47:1a:b6:dd:04:55:99:b1:
4a:76:61:67:0d:ad:11:19:98:63:7e:24:c5:31:35:
3f:fb:e8:60:a3:a8:c1:05:71:fb:48:91:b8:4d:21:
a9:80:99:cf:02:3e:1d:07:e9:c8:70:cd:fa:84:45:
21:6e:90:2e:da:db:bb:92:36:51:6a:92:62:49:12:
99:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B1:18:D6:57:2D:A1:D5:04:37:AF:5A:61:00:69:0E:9A:8A:E1:09
X509v3 Authority Key Identifier:
keyid:DE:74:71:96:CB:8C:9D:C6:42:33:7A:FE:BF:04:B2:04:DC:D1:96:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:9d:6c:86:86:0e:9d:51:29:d3:44:8c:79:40:74:bd:f6:b3:
b1:b9:75:71:4f:d5:30:c4:dc:26:56:27:f4:77:e1:03:94:89:
53:02:9c:0e:50:50:80:9a:c5:40:02:3c:63:00:1a:e5:72:37:
0d:cc:fd:5f:75:ad:d9:97:49:84:45:98:56:c4:c2:37:cf:2a:
f9:9e:97:bd:2f:aa:eb:70:59:d5:7a:ea:c8:cc:01:0e:63:4c:
b4:e4:19:e5:66:4a:6d:e8:87:9a:20:6c:86:55:e5:7b:6f:ab:
68:79:2b:ce:a4:2d:9f:f6:a7:63:f3:de:da:e2:a8:ff:7e:0b:
e2:20:46:b3:be:48:f5:81:70:74:96:f4:37:e0:1a:5e:b0:1a:
44:94:e3:fe:ff:f4:1d:30:a6:9e:df:82:0f:3b:f8:4f:bf:74:
7e:6c:3b:a6:5b:37:68:80:7b:53:c0:18:c0:18:6b:9a:14:cc:
e3:cd:bf:5a:a0:df:65:a3:1a:df:ab:92:89:6d:ca:05:29:25:
2f:f0:59:4d:dd:59:47:43:93:22:52:dc:cf:f4:e9:b1:1b:be:
96:5d:7d:64:e1:35:22:c0:5b:ed:71:e0:d3:0f:eb:d8:00:d3:
90:de:70:44:b2:1b:b8:17:87:6b:1f:65:69:03:69:2b:39:a6:
95:0e:da:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:04 2026 by rpki-client