Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/1c90d7-f12b-4283-8a93-e61741b9f249/1/3sTrmin0tz2fTIT5dcheB1S1a3E.mft
File: 3sTrmin0tz2fTIT5dcheB1S1a3E.mft (raw, json)
Hash identifier: fMGOcdnDgFWGkUnXXghsBJ/orLU6DPUkzuGInrlDfdo=
Subject key identifier: D2:9E:9D:79:26:A1:19:20:D2:25:D9:18:0F:E6:D0:46:49:15:4D:5B
Authority key identifier: DE:C4:EB:9A:29:F4:B7:3D:9F:4C:84:F9:75:C8:5E:07:54:B5:6B:71
Certificate issuer: /CN=dec4eb9a29f4b73d9f4c84f975c85e0754b56b71
Certificate serial: 019EC17FDA0E2D168F4A79C79B5F41700825
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sTrmin0tz2fTIT5dcheB1S1a3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/1c90d7-f12b-4283-8a93-e61741b9f249/1/3sTrmin0tz2fTIT5dcheB1S1a3E.mft
Manifest number: 01A7
Signing time: Sat 13 Jun 2026 15:00:42 +0000
Manifest this update: Sat 13 Jun 2026 15:00:42 +0000
Manifest next update: Sun 14 Jun 2026 15:00:42 +0000
Files and hashes: 1: 3sTrmin0tz2fTIT5dcheB1S1a3E.crl (hash: v9fW2/iRkgZKH7xdzrZFgAysKCh9O4x1dH1Dxz7t0Hg=)
2: 8v-B4tBwt_nXsn0BNXUtzTao1xQ.asa (hash: c3eWcYcZ6AfSlXW2n8VDHUuk8WUaUZqoj+gBRxx0us0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/1c90d7-f12b-4283-8a93-e61741b9f249/1/3sTrmin0tz2fTIT5dcheB1S1a3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/1c90d7-f12b-4283-8a93-e61741b9f249/1/3sTrmin0tz2fTIT5dcheB1S1a3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3sTrmin0tz2fTIT5dcheB1S1a3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:7f:da:0e:2d:16:8f:4a:79:c7:9b:5f:41:70:08:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec4eb9a29f4b73d9f4c84f975c85e0754b56b71
Validity
Not Before: Jun 13 15:00:42 2026 GMT
Not After : Jun 14 15:00:42 2026 GMT
Subject: CN=d29e9d7926a11920d225d9180fe6d04649154d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:40:98:86:cc:04:58:95:23:b2:41:75:eb:42:
01:8e:59:f0:9f:72:73:96:f7:53:9f:1c:3e:22:25:
72:d5:1f:60:4a:03:4e:70:9f:01:98:a0:46:dd:ad:
e9:4e:b1:61:77:d7:72:38:10:d8:e2:41:be:41:b3:
86:07:92:b1:5b:fa:87:1e:ca:5b:52:21:83:17:79:
29:9b:4b:77:fe:92:86:6b:67:7c:de:22:cd:67:2b:
bc:5f:7b:41:a7:6a:25:0a:5e:c6:f1:94:02:d1:28:
d6:aa:45:ca:7a:f6:07:6e:f7:4b:94:78:11:da:1c:
2d:d5:45:83:f6:39:22:7e:14:03:88:aa:f0:c6:34:
09:e5:d3:e7:ea:01:3a:c4:f5:10:f4:ac:5e:15:45:
b0:90:53:a1:1c:93:0d:3c:71:37:46:1a:df:b1:a2:
30:50:f3:4f:6c:f0:e6:1e:84:5f:f7:8b:63:9d:a5:
a6:69:41:cf:31:6f:ae:1d:27:ac:f7:b8:b6:0a:ad:
6c:9d:72:69:5b:13:fd:d5:84:33:0f:ff:00:ef:6a:
97:5d:7f:e1:ac:a9:d4:f9:97:31:34:01:7c:fc:86:
b7:7d:58:23:19:82:a5:33:8f:aa:88:2c:f8:be:23:
47:4e:12:fb:5f:9f:fb:2f:c0:0c:ff:ee:11:e4:01:
64:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:9E:9D:79:26:A1:19:20:D2:25:D9:18:0F:E6:D0:46:49:15:4D:5B
X509v3 Authority Key Identifier:
keyid:DE:C4:EB:9A:29:F4:B7:3D:9F:4C:84:F9:75:C8:5E:07:54:B5:6B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sTrmin0tz2fTIT5dcheB1S1a3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/1c90d7-f12b-4283-8a93-e61741b9f249/1/3sTrmin0tz2fTIT5dcheB1S1a3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/1c90d7-f12b-4283-8a93-e61741b9f249/1/3sTrmin0tz2fTIT5dcheB1S1a3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:b1:98:2b:97:ef:53:d5:08:8b:ff:52:c3:b0:ea:3c:bd:c8:
f6:86:d4:6b:a7:25:35:ed:7a:46:51:e3:15:a2:d3:b6:18:90:
b6:29:f1:b4:2b:bf:3a:77:5d:72:d3:bf:e2:09:eb:79:b3:4f:
35:7f:6b:48:88:2d:20:30:44:a8:87:dd:36:52:91:49:40:81:
36:15:93:93:23:2f:49:e8:ac:47:cb:b0:1e:1c:01:6d:a5:3c:
9f:42:df:a6:ed:b6:34:fe:df:03:4a:55:99:db:8b:f1:7b:75:
29:33:1f:b2:78:fa:23:8d:e6:23:be:d2:96:68:cb:93:c7:57:
44:dd:9c:f1:d7:d1:eb:5d:0f:f0:43:d5:88:8c:ac:9e:be:82:
ae:98:d3:ee:0d:97:d8:cc:19:23:ae:36:3a:af:b5:b7:3e:9c:
8c:4e:94:bc:d8:2a:83:bb:8d:c0:19:7b:b2:8e:02:0c:76:b1:
2f:37:5a:5e:d0:a3:7b:b1:6a:35:d5:62:46:27:ac:97:c4:fb:
0d:b7:2e:bc:f7:c4:7e:2d:69:6f:b5:9f:b0:74:a0:04:83:ef:
3f:2f:06:ef:71:84:41:8b:ae:66:b3:bf:ae:89:e8:7e:21:e2:
91:62:e6:d1:d4:a3:2f:b3:1a:d1:e2:ca:74:a7:ab:1f:10:69:
e9:8f:32:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:15:59 2026 by rpki-client