Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/1c90d7-f12b-4283-8a93-e61741b9f249/1/3sTrmin0tz2fTIT5dcheB1S1a3E.mft
File: 3sTrmin0tz2fTIT5dcheB1S1a3E.mft (raw, json)
Hash identifier: cbmSTENGfVvGIQHEnfxEGlil2E6xLjCLm92PxDnjV8M=
Subject key identifier: ED:0C:76:E5:86:03:0E:EF:2F:A7:A0:0F:72:91:BB:55:7E:43:0C:44
Authority key identifier: DE:C4:EB:9A:29:F4:B7:3D:9F:4C:84:F9:75:C8:5E:07:54:B5:6B:71
Certificate issuer: /CN=dec4eb9a29f4b73d9f4c84f975c85e0754b56b71
Certificate serial: 019D9BF593036E75CC4460B1BE16ED911CAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sTrmin0tz2fTIT5dcheB1S1a3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/1c90d7-f12b-4283-8a93-e61741b9f249/1/3sTrmin0tz2fTIT5dcheB1S1a3E.mft
Manifest number: 010F
Signing time: Fri 17 Apr 2026 15:00:55 +0000
Manifest this update: Fri 17 Apr 2026 15:00:55 +0000
Manifest next update: Sat 18 Apr 2026 15:00:55 +0000
Files and hashes: 1: 3sTrmin0tz2fTIT5dcheB1S1a3E.crl (hash: 0LmCq7Y5Z5Lt8OQ9LCTU7D42r40JEwATTnZkIOiHEF4=)
2: 8v-B4tBwt_nXsn0BNXUtzTao1xQ.asa (hash: c3eWcYcZ6AfSlXW2n8VDHUuk8WUaUZqoj+gBRxx0us0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/1c90d7-f12b-4283-8a93-e61741b9f249/1/3sTrmin0tz2fTIT5dcheB1S1a3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/1c90d7-f12b-4283-8a93-e61741b9f249/1/3sTrmin0tz2fTIT5dcheB1S1a3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3sTrmin0tz2fTIT5dcheB1S1a3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:93:03:6e:75:cc:44:60:b1:be:16:ed:91:1c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec4eb9a29f4b73d9f4c84f975c85e0754b56b71
Validity
Not Before: Apr 17 15:00:55 2026 GMT
Not After : Apr 18 15:00:55 2026 GMT
Subject: CN=ed0c76e586030eef2fa7a00f7291bb557e430c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:eb:45:b7:17:12:1d:43:57:e9:69:47:4c:a2:
80:58:2f:d5:04:17:8d:16:fe:b9:36:0e:b5:61:11:
5a:fb:79:d3:c5:5c:29:28:16:61:f5:76:e3:de:88:
70:fe:b0:55:65:bc:d7:e2:39:7c:17:a3:9c:1a:43:
81:10:e3:f2:94:96:d2:9c:d4:95:27:56:f5:63:01:
8e:36:b8:35:9a:6d:bf:85:0f:c6:36:17:35:aa:72:
01:5b:35:ea:40:df:65:21:29:68:c7:56:e0:ab:ea:
f5:41:19:93:81:90:f8:af:63:d4:38:2f:4b:56:96:
04:c8:59:3c:0b:02:7c:f7:7d:ce:d4:3d:a6:63:49:
78:19:e0:1f:86:7c:24:e8:55:db:64:10:99:9f:09:
59:6b:5f:cf:33:33:ef:01:65:d5:6b:47:c3:82:b9:
f6:94:4d:f6:a7:d2:fc:8a:17:7a:d0:9f:2c:0b:bc:
35:e9:15:62:88:68:38:cb:7c:fd:98:fa:ae:1b:2b:
0a:95:13:41:bb:8e:bc:34:00:8a:8b:b9:a7:e2:70:
2a:89:30:7b:cb:5b:52:28:d1:46:76:13:3b:d0:fd:
25:32:a3:fd:0b:ae:55:94:c3:18:f8:11:ef:e6:ae:
bc:80:51:a5:9b:48:b4:44:7f:37:43:94:db:9a:e2:
d4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:0C:76:E5:86:03:0E:EF:2F:A7:A0:0F:72:91:BB:55:7E:43:0C:44
X509v3 Authority Key Identifier:
keyid:DE:C4:EB:9A:29:F4:B7:3D:9F:4C:84:F9:75:C8:5E:07:54:B5:6B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sTrmin0tz2fTIT5dcheB1S1a3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/1c90d7-f12b-4283-8a93-e61741b9f249/1/3sTrmin0tz2fTIT5dcheB1S1a3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/1c90d7-f12b-4283-8a93-e61741b9f249/1/3sTrmin0tz2fTIT5dcheB1S1a3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:bd:68:41:42:be:68:96:7f:8e:fa:3b:6a:c0:d3:01:64:94:
ed:60:42:5e:ab:73:5f:6c:bc:cd:df:88:e9:8c:be:90:be:55:
ef:a4:66:f7:a2:cb:f9:42:a1:08:40:8a:e4:ed:28:65:a6:9d:
ee:d1:59:21:c4:1f:27:82:cb:c9:11:b5:8e:76:ad:9d:8a:1d:
55:81:b3:70:b2:63:f9:70:3c:60:26:e2:a8:04:a2:af:26:a6:
e7:af:39:a2:f8:dc:34:d8:a0:3a:2b:e1:5a:4a:70:9a:06:d1:
af:fc:d5:de:9f:76:28:b6:da:c1:c7:58:9a:58:91:a1:e5:26:
14:a1:82:98:b8:7d:31:7d:e3:58:26:1f:ee:9a:e9:74:7c:12:
11:14:41:27:6c:1e:6b:51:53:dc:7a:8c:5d:de:45:a1:49:75:
f9:5e:1f:1f:41:30:9b:0b:ad:19:b4:01:9b:05:2e:af:fe:97:
8d:14:ef:d6:08:04:ad:63:b9:51:c0:81:85:9b:67:1a:3b:41:
23:59:a4:f1:63:ec:7b:77:09:f6:95:94:96:67:06:ca:a4:3b:
15:0f:6f:5b:47:46:d7:f9:96:6a:aa:ff:00:df:75:1b:ed:b7:
d9:53:e5:c4:c4:f7:60:e2:64:6a:6b:5b:71:5c:4c:3f:7d:e7:
95:59:ac:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:12:03 2026 by rpki-client