Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
File: 3nRxlsuMncZCM3r-vwSyBNzRlpY.mft (raw, json)
Hash identifier: 8OU1JYv1/pCsuMtwpnuDFB8KHMM1gXp9TXrA45r3UBo=
Subject key identifier: C3:79:F5:16:51:11:75:72:C4:18:F2:FF:61:86:A7:49:71:6A:83:82
Authority key identifier: DE:74:71:96:CB:8C:9D:C6:42:33:7A:FE:BF:04:B2:04:DC:D1:96:96
Certificate issuer: /CN=de747196cb8c9dc642337afebf04b204dcd19696
Certificate serial: 019E1CEB406FE167A128260A01E31939C8EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
Manifest number: 07EC
Signing time: Tue 12 May 2026 16:00:39 +0000
Manifest this update: Tue 12 May 2026 16:00:39 +0000
Manifest next update: Wed 13 May 2026 16:00:39 +0000
Files and hashes: 1: 3nRxlsuMncZCM3r-vwSyBNzRlpY.crl (hash: q3/ebOxLbUVawIjX/ALqUcSegGRBFPvMmBF2BEHsKoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 16:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:40:6f:e1:67:a1:28:26:0a:01:e3:19:39:c8:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de747196cb8c9dc642337afebf04b204dcd19696
Validity
Not Before: May 12 16:00:39 2026 GMT
Not After : May 13 16:00:39 2026 GMT
Subject: CN=c379f51651117572c418f2ff6186a749716a8382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a0:9a:91:a7:f3:34:3a:4f:bc:03:90:86:66:
e5:b3:e7:3c:65:6f:d0:f9:3a:4b:e9:a7:b0:81:8b:
90:b4:88:1e:83:fe:8d:f0:1d:94:a4:88:9f:42:af:
fe:cc:ba:94:c2:f3:e1:d2:b2:a5:bd:a6:70:a9:95:
12:a6:0f:3e:1b:c2:34:33:a9:44:36:d8:ef:2c:3f:
e1:f9:50:d7:b7:9d:fe:6a:00:e0:f7:5d:df:80:46:
c0:55:ec:2d:28:fe:00:f0:b9:ef:00:aa:ba:65:4b:
17:29:60:d4:f0:8b:14:07:90:fb:f2:60:d2:3b:c2:
5a:ff:7e:b6:03:95:a7:d9:63:88:53:ab:be:ea:e6:
cd:5c:ba:fe:45:89:84:6a:44:48:52:bc:a8:9b:08:
2a:3b:29:5a:8e:75:ed:cb:32:fd:ae:8b:d9:fc:b0:
bf:e0:bc:66:a2:c7:3d:20:dc:e9:54:57:0f:8a:4e:
b8:74:c1:b5:f0:40:ff:7f:21:9c:40:1b:9b:c5:eb:
d3:7e:fd:7c:7a:3a:13:63:17:b5:71:01:b7:65:b5:
aa:0f:97:ad:89:cc:de:28:94:ee:28:02:e0:9a:af:
bb:fa:20:94:a7:85:b4:f1:ed:72:c0:8a:1a:90:c4:
7a:a7:b1:c9:24:96:b1:a5:f3:8c:12:c8:78:ce:a9:
c1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:79:F5:16:51:11:75:72:C4:18:F2:FF:61:86:A7:49:71:6A:83:82
X509v3 Authority Key Identifier:
keyid:DE:74:71:96:CB:8C:9D:C6:42:33:7A:FE:BF:04:B2:04:DC:D1:96:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:61:73:2c:23:38:43:7a:f6:41:29:d3:8e:31:35:71:0e:59:
cb:f3:5e:80:8f:6c:23:63:31:ab:b0:5e:2f:fc:a1:72:b9:8f:
2f:bf:80:ef:bc:ed:d4:e1:f2:e7:a4:1f:c6:86:8e:ad:ea:83:
17:da:a2:de:f5:e9:b2:a2:c6:22:ab:9c:25:40:a6:1f:4b:c2:
a9:95:db:e5:fc:b9:cd:b0:e8:34:43:ca:c0:29:36:5b:27:e4:
d7:e4:2a:67:88:c5:22:e0:d1:71:d7:7c:66:3e:8b:8c:83:91:
2f:a2:73:58:c6:94:d7:d0:67:15:ae:23:31:43:f7:7b:35:13:
57:51:ac:e7:2a:0e:60:53:b5:ac:d6:c6:9b:da:f9:1f:b3:c4:
79:bf:57:8c:53:75:bc:12:b5:38:48:5e:0d:70:9d:f1:41:b0:
7b:8f:1c:97:47:1e:49:cd:96:de:52:d0:0d:9b:36:8a:d4:aa:
32:7b:e2:b2:0f:fb:bf:8e:f5:ef:3c:27:da:f0:79:54:48:23:
da:21:9c:6f:e2:38:24:bb:f5:22:c7:36:28:80:0c:4b:fc:96:
02:10:48:cd:c7:0f:ae:0c:30:0d:61:80:af:1f:e6:8d:2e:55:
8b:1c:0c:fb:ab:89:3e:0b:79:52:b8:2b:c8:07:bf:f2:3b:58:
7b:ec:70:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:44:01 2026 by rpki-client