Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/0/3EC842120C803D17C39A3075557753CD9F7A67F1.mft
File: 3EC842120C803D17C39A3075557753CD9F7A67F1.mft (raw, json)
Hash identifier: HR95iERNJTKl/X7UNAjeovvLZtndwiG7B29vQxCKsHQ=
Subject key identifier: 46:5C:5C:A9:3E:69:7A:35:EC:E6:6A:3F:66:51:F9:C1:42:DD:E2:E5
Authority key identifier: 3E:C8:42:12:0C:80:3D:17:C3:9A:30:75:55:77:53:CD:9F:7A:67:F1
Certificate issuer: /CN=3ec842120c803d17c39a3075557753cd9f7a67f1
Certificate serial: 607B73867D18CC9EF10AA266B34C399DAF3048FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PshCEgyAPRfDmjB1VXdTzZ96Z_E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/0/3EC842120C803D17C39A3075557753CD9F7A67F1.mft
Manifest number: BF
Signing time: Tue 28 Jul 2026 03:53:12 +0000
Manifest this update: Tue 28 Jul 2026 03:48:12 +0000
Manifest next update: Wed 29 Jul 2026 17:25:12 +0000
Files and hashes: 1: 3EC842120C803D17C39A3075557753CD9F7A67F1.crl (hash: vr2ZeLslrRxEt6QXkvKyHIvO2Ld5scQgoVVivQFyQlU=)
2: AS214344.asa (hash: uYGSkYWuw6t30fZ1s2NADMDDtXgosgQODcTNPIgjjkI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/0/3EC842120C803D17C39A3075557753CD9F7A67F1.crl
rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/0/3EC842120C803D17C39A3075557753CD9F7A67F1.mft
rsync://rpki.ripe.net/repository/DEFAULT/PshCEgyAPRfDmjB1VXdTzZ96Z_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:7b:73:86:7d:18:cc:9e:f1:0a:a2:66:b3:4c:39:9d:af:30:48:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec842120c803d17c39a3075557753cd9f7a67f1
Validity
Not Before: Jul 28 03:48:12 2026 GMT
Not After : Jul 29 17:25:12 2026 GMT
Subject: CN=465C5CA93E697A35ECE66A3F6651F9C142DDE2E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:bb:58:c1:2e:11:a4:5c:28:7b:97:54:85:37:
d4:60:82:b0:87:e9:a1:e3:89:3a:77:91:56:6e:9e:
bb:3d:1b:53:72:d5:d8:64:32:48:a3:65:59:c8:2a:
ff:a5:3e:07:26:93:25:50:66:4a:73:cf:34:71:6f:
8a:48:26:25:8e:c0:99:e3:c4:ae:09:7a:d5:61:e4:
a8:b2:67:8a:5d:55:f1:78:2b:d9:c6:77:0c:c4:09:
3c:af:b5:33:96:9c:16:0d:78:3c:5c:71:22:78:cb:
79:62:38:ce:c7:bd:ae:f4:1e:ad:2f:e9:2f:4f:41:
78:fb:bc:05:ce:14:bb:a3:dc:bd:77:53:60:5f:8c:
e0:f6:31:0c:54:49:10:20:f9:81:49:ac:cc:ee:63:
ba:6f:f6:f9:f2:c1:23:3b:8d:5c:95:81:e3:b3:b2:
e3:54:eb:a9:f0:e9:91:37:1c:28:b5:e4:4d:e0:7d:
a0:47:70:dc:0a:59:eb:17:b9:6b:5e:41:1a:fe:82:
53:86:1b:38:ee:02:75:a1:c7:dd:8c:7c:62:ba:53:
87:03:0a:ea:10:8c:b9:c7:a4:4f:c4:38:af:93:fb:
2f:e3:69:03:1c:b0:26:e4:41:15:5a:7f:8c:32:68:
56:c5:3e:c8:48:69:c7:0a:44:e5:f1:0f:e1:8e:7f:
c4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:5C:5C:A9:3E:69:7A:35:EC:E6:6A:3F:66:51:F9:C1:42:DD:E2:E5
X509v3 Authority Key Identifier:
keyid:3E:C8:42:12:0C:80:3D:17:C3:9A:30:75:55:77:53:CD:9F:7A:67:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/0/3EC842120C803D17C39A3075557753CD9F7A67F1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PshCEgyAPRfDmjB1VXdTzZ96Z_E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/0/3EC842120C803D17C39A3075557753CD9F7A67F1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:de:3c:02:6d:93:46:4a:ea:84:77:0f:bf:0c:1b:65:06:e6:
e1:86:46:b7:cc:f5:f4:f8:7b:57:ce:6e:9b:8f:f2:fe:ff:e9:
00:79:d8:99:9a:ae:4e:89:23:da:39:9e:0a:22:27:a3:e0:e6:
bb:ed:b7:1b:e8:bb:7e:70:16:50:aa:c8:e7:3d:6d:fa:3a:f6:
eb:80:fd:3a:9c:44:20:ce:0a:01:b5:30:57:fb:34:e4:71:f3:
18:df:3a:ad:0d:bd:ae:2b:6b:e7:fc:b4:8b:1c:be:e0:0f:6b:
81:3f:6d:7f:97:70:d0:34:1c:93:74:4c:95:09:2a:c6:26:ed:
3e:f6:c3:f7:8f:7a:d5:ee:46:7e:96:b0:76:48:ba:d1:2e:a5:
29:2b:95:f2:3b:70:8c:c6:df:2e:ca:50:3b:23:3c:ef:dc:40:
80:26:af:ad:b3:05:53:df:0a:47:7a:7c:5e:bb:0f:e7:ff:a2:
de:06:d7:88:ba:31:c2:53:d9:f5:04:cd:6f:a0:a1:e2:0b:3f:
2c:dc:e9:76:e6:d0:7c:6e:9f:e8:43:40:34:bf:a2:a7:82:59:
de:85:a5:0f:93:c5:13:5f:b8:c2:6d:7c:da:72:50:48:00:3c:
e3:dd:2b:e7:e0:75:21:b9:63:67:ea:74:25:d3:fd:03:e0:1e:
df:00:80:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:11:45 2026 by rpki-client