Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
File: 3nRxlsuMncZCM3r-vwSyBNzRlpY.mft (raw, json)
Hash identifier: pdFvKFXgVmquaYNXGd/7GWjsVjG3YWbeMwOdr5vcthE=
Subject key identifier: 09:F5:15:EF:DD:2D:97:F1:ED:E5:BD:86:1E:0D:6A:52:3A:C6:35:14
Authority key identifier: DE:74:71:96:CB:8C:9D:C6:42:33:7A:FE:BF:04:B2:04:DC:D1:96:96
Certificate issuer: /CN=de747196cb8c9dc642337afebf04b204dcd19696
Certificate serial: 01A0D6154168837A0DC6F2ABB878C205B1EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
Manifest number: 0955
Signing time: Fri 25 Sep 2026 01:01:52 +0000
Manifest this update: Fri 25 Sep 2026 01:01:52 +0000
Manifest next update: Sat 26 Sep 2026 01:01:52 +0000
Files and hashes: 1: 3nRxlsuMncZCM3r-vwSyBNzRlpY.crl (hash: dXxBWq2oJJCNAp4USngSgnWnkIKQoIMlCtxnS+k3FrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:15:41:68:83:7a:0d:c6:f2:ab:b8:78:c2:05:b1:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de747196cb8c9dc642337afebf04b204dcd19696
Validity
Not Before: Sep 25 01:01:52 2026 GMT
Not After : Sep 26 01:01:52 2026 GMT
Subject: CN=09f515efdd2d97f1ede5bd861e0d6a523ac63514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bc:8e:55:1e:57:97:3e:fb:19:20:c2:79:9c:
73:89:06:8a:49:b0:b4:6b:37:ba:b9:d1:a6:d5:df:
2d:9e:bb:85:61:ed:e5:cf:4d:db:1f:11:3a:6b:e5:
54:29:c6:46:6f:c3:01:e6:8a:29:3f:05:cf:92:af:
af:72:77:c6:21:c2:d0:38:27:05:c8:3a:b0:ba:2b:
5c:cc:ac:b5:2b:cd:11:96:f8:a6:8e:14:f3:5e:4c:
5e:50:6c:8c:da:22:a7:b1:11:16:8b:32:91:cc:b5:
5c:e0:f2:ce:35:cc:7a:fa:75:53:43:ad:f7:e8:da:
25:cf:de:c2:47:4d:a8:59:fb:5a:f3:c7:41:42:32:
24:f1:65:d4:9e:a6:94:df:51:3e:26:1a:46:63:90:
5a:90:51:f2:84:d0:bf:bd:f5:55:81:3f:c9:b6:58:
df:ac:1f:5f:b1:03:0d:89:cc:df:14:9d:2d:ff:7e:
74:df:b6:40:71:7f:da:23:bb:92:a2:c3:a1:98:81:
0f:6c:00:50:74:93:e8:89:79:5c:ca:93:be:b5:ff:
dd:56:71:bf:a5:49:52:f8:67:b6:6a:e3:47:43:65:
c0:8b:fe:4d:81:ab:73:21:4b:d1:e8:c8:93:87:67:
1e:0f:31:13:42:cd:b1:d9:ba:42:41:bd:a5:4b:53:
27:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F5:15:EF:DD:2D:97:F1:ED:E5:BD:86:1E:0D:6A:52:3A:C6:35:14
X509v3 Authority Key Identifier:
keyid:DE:74:71:96:CB:8C:9D:C6:42:33:7A:FE:BF:04:B2:04:DC:D1:96:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:6b:bb:0e:2f:8e:e9:9b:53:c7:ab:04:9b:30:fb:2c:91:8a:
a5:56:d4:fa:10:ff:7b:4b:26:43:99:09:72:9a:7d:a6:fe:c9:
07:c7:12:1d:68:d3:06:33:1f:25:7f:51:6b:35:26:85:d4:7b:
a5:0d:cb:58:cb:5b:75:d6:17:c6:c2:c4:f8:9d:8d:bd:a4:fd:
18:2e:87:60:47:c9:3c:68:36:01:c0:56:e7:11:df:e8:9c:64:
ae:1b:58:01:2e:f3:aa:c9:64:33:b7:b5:f1:47:c0:a9:fb:27:
e3:4f:d7:83:e4:59:fb:7a:f5:57:8a:33:26:76:d7:6b:30:be:
07:bb:98:53:dc:63:50:c9:58:fb:c6:7f:17:d5:88:2e:8d:a5:
ed:13:60:17:75:62:32:87:02:ca:9c:dc:53:4c:87:e1:25:3e:
44:fc:a1:e7:1f:aa:d3:b5:e4:ed:80:ff:6d:6f:d2:e4:ee:f5:
bf:f5:99:31:1c:4a:90:44:90:67:76:fe:f7:54:20:f9:c6:33:
5d:05:e2:ea:de:01:7b:6d:b3:d0:15:ef:f1:96:ab:c1:1a:5e:
3f:b6:fc:75:36:88:bd:34:1a:63:7a:ae:46:89:fc:ad:35:ad:
8a:2b:a8:a4:84:c6:33:5a:e5:3e:04:2c:97:6b:6f:01:b2:73:
7e:90:6b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:45:16 2026 by rpki-client