Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/0/3EC842120C803D17C39A3075557753CD9F7A67F1.mft
File: 3EC842120C803D17C39A3075557753CD9F7A67F1.mft (raw, json)
Hash identifier: LqH3wqr/6Ib2mn/HWJcZIZ5P76YgexUHEOx/BZcJh7c=
Subject key identifier: A7:C4:44:DF:64:D9:52:C4:F6:08:EC:7B:65:B0:D3:78:86:01:4C:36
Authority key identifier: 3E:C8:42:12:0C:80:3D:17:C3:9A:30:75:55:77:53:CD:9F:7A:67:F1
Certificate issuer: /CN=3ec842120c803d17c39a3075557753cd9f7a67f1
Certificate serial: 1A5C34A64ADE25B45CB4C5FE8B2636264FED5FBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PshCEgyAPRfDmjB1VXdTzZ96Z_E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/0/3EC842120C803D17C39A3075557753CD9F7A67F1.mft
Manifest number: 71
Signing time: Sat 13 Jun 2026 00:52:59 +0000
Manifest this update: Sat 13 Jun 2026 00:47:59 +0000
Manifest next update: Sun 14 Jun 2026 13:06:59 +0000
Files and hashes: 1: AS214344.asa (hash: kwxQlmTi9TA80yKrfnXXBC0L7miRGwsPi3gjVzewLfA=)
2: 3EC842120C803D17C39A3075557753CD9F7A67F1.crl (hash: vf6ZUrVvUhhuKED7xQkKb1P0Q368S1HtpzeKNOjs828=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/0/3EC842120C803D17C39A3075557753CD9F7A67F1.crl
rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/0/3EC842120C803D17C39A3075557753CD9F7A67F1.mft
rsync://rpki.ripe.net/repository/DEFAULT/PshCEgyAPRfDmjB1VXdTzZ96Z_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:5c:34:a6:4a:de:25:b4:5c:b4:c5:fe:8b:26:36:26:4f:ed:5f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec842120c803d17c39a3075557753cd9f7a67f1
Validity
Not Before: Jun 13 00:47:59 2026 GMT
Not After : Jun 14 13:06:59 2026 GMT
Subject: CN=A7C444DF64D952C4F608EC7B65B0D37886014C36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:24:58:e0:53:3e:ce:91:b1:43:c1:f0:5c:fc:
54:60:aa:18:f3:d3:e2:7c:70:d5:08:c7:b4:85:13:
e9:46:62:a9:13:70:00:e4:28:6e:2c:b3:43:66:54:
8b:54:9c:28:2f:16:55:c1:fe:33:14:60:a9:09:ee:
df:7a:da:e1:34:90:fb:8e:c4:bd:83:80:4b:09:ea:
a3:46:07:bd:ac:e7:6e:da:d3:c9:84:80:cd:14:8c:
24:06:3c:10:40:a0:ea:f6:4e:90:3d:64:39:e0:04:
05:0d:07:cf:68:56:a3:c4:48:1c:5a:34:8b:13:ce:
1c:87:16:15:aa:68:ea:99:92:1e:69:6e:13:7e:56:
a1:f4:9e:59:cc:88:17:48:a7:48:ac:b2:80:ec:41:
0d:b2:63:f7:03:b6:f5:6e:72:c0:75:d8:a1:9b:47:
0a:35:ac:85:67:6f:b6:01:8c:78:d4:f9:54:67:24:
76:e1:fc:31:e0:18:97:7a:25:dc:07:dd:dc:45:d4:
60:58:b1:7e:b5:1d:22:c2:ae:04:58:f0:94:e8:52:
1a:09:da:02:f3:c7:56:9e:22:27:d8:b1:7d:3a:0d:
45:3a:62:24:b3:f1:95:7d:f4:99:4a:77:55:3a:8e:
06:6d:fd:91:04:f3:e6:92:57:ee:97:9a:9d:0f:b3:
33:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C4:44:DF:64:D9:52:C4:F6:08:EC:7B:65:B0:D3:78:86:01:4C:36
X509v3 Authority Key Identifier:
keyid:3E:C8:42:12:0C:80:3D:17:C3:9A:30:75:55:77:53:CD:9F:7A:67:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/0/3EC842120C803D17C39A3075557753CD9F7A67F1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PshCEgyAPRfDmjB1VXdTzZ96Z_E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/0/3EC842120C803D17C39A3075557753CD9F7A67F1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:f0:21:77:e8:8c:a4:b9:e0:83:ed:ff:59:28:4e:b2:ab:a6:
51:b2:1f:5f:f3:e4:0d:1e:90:82:61:32:2a:44:47:fa:97:72:
98:1f:19:cc:83:d6:1d:11:25:14:c9:f2:23:3e:cc:fb:08:c1:
74:01:a7:b8:9b:b9:cb:f3:8a:1c:55:b9:c0:be:53:97:96:13:
0f:bf:92:d2:9e:10:34:43:82:11:11:8e:e7:7e:95:a5:b4:32:
b7:55:8c:37:5b:20:64:58:bf:d3:32:64:2e:03:ff:b5:f3:21:
2d:58:4b:29:71:8c:ee:a0:d9:80:91:43:4b:7d:95:b9:9d:22:
df:87:d9:c4:78:84:8a:33:74:58:44:85:60:6b:c0:4d:de:7d:
65:fe:48:22:d7:a7:27:87:f5:b4:0c:21:8d:02:d7:1e:82:56:
e7:52:09:f6:b4:95:63:f6:14:55:0b:0e:4a:82:d2:47:98:10:
4a:43:b5:81:e8:90:11:ff:ba:66:be:6a:ec:93:8b:bd:58:45:
45:4a:ed:66:11:4e:3b:1c:2b:b8:f4:d7:75:32:61:97:23:1e:
79:2f:89:ee:b0:c4:c9:26:9c:47:7b:57:fb:08:a4:d0:33:a1:
f6:b0:c6:80:51:4a:b3:fe:bf:6d:a2:b1:c5:4b:3b:b7:94:da:
c7:ff:35:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:55:14 2026 by rpki-client