Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/1c90d7-f12b-4283-8a93-e61741b9f249/1/3sTrmin0tz2fTIT5dcheB1S1a3E.mft
File: 3sTrmin0tz2fTIT5dcheB1S1a3E.mft (raw, json)
Hash identifier: u+ck5VZKoKR8dUpJMqUxIBMJvEOXpgkv2+PPWl8zal8=
Subject key identifier: 60:0B:6F:E0:98:F8:02:AE:BD:9F:2B:60:FF:D2:E1:CF:E1:D0:91:40
Authority key identifier: DE:C4:EB:9A:29:F4:B7:3D:9F:4C:84:F9:75:C8:5E:07:54:B5:6B:71
Certificate issuer: /CN=dec4eb9a29f4b73d9f4c84f975c85e0754b56b71
Certificate serial: 019E1D59A451AD04A9BF207CCDAA44E3222B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sTrmin0tz2fTIT5dcheB1S1a3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/1c90d7-f12b-4283-8a93-e61741b9f249/1/3sTrmin0tz2fTIT5dcheB1S1a3E.mft
Manifest number: 0152
Signing time: Tue 12 May 2026 18:01:14 +0000
Manifest this update: Tue 12 May 2026 18:01:14 +0000
Manifest next update: Wed 13 May 2026 18:01:14 +0000
Files and hashes: 1: 3sTrmin0tz2fTIT5dcheB1S1a3E.crl (hash: 21xD5BunrksL0qy3z5CT8Eg3ecwBb5Mp/6TUTTjANXo=)
2: 8v-B4tBwt_nXsn0BNXUtzTao1xQ.asa (hash: c3eWcYcZ6AfSlXW2n8VDHUuk8WUaUZqoj+gBRxx0us0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/1c90d7-f12b-4283-8a93-e61741b9f249/1/3sTrmin0tz2fTIT5dcheB1S1a3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/1c90d7-f12b-4283-8a93-e61741b9f249/1/3sTrmin0tz2fTIT5dcheB1S1a3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3sTrmin0tz2fTIT5dcheB1S1a3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:a4:51:ad:04:a9:bf:20:7c:cd:aa:44:e3:22:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec4eb9a29f4b73d9f4c84f975c85e0754b56b71
Validity
Not Before: May 12 18:01:14 2026 GMT
Not After : May 13 18:01:14 2026 GMT
Subject: CN=600b6fe098f802aebd9f2b60ffd2e1cfe1d09140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e2:de:cd:dd:ac:51:c6:83:23:2f:2a:68:60:
51:d0:db:f4:93:8a:fb:86:ef:63:aa:2b:0c:a3:18:
5f:ea:c8:da:7e:d9:2d:3d:09:ba:da:15:c0:83:3f:
ec:36:94:33:83:e1:cf:d6:20:0b:d7:a3:62:68:71:
2e:42:65:5c:89:3b:69:28:57:2e:44:88:f4:b6:eb:
58:0d:bd:bb:43:c1:24:34:a7:e1:55:b5:cb:6a:8e:
44:d2:3a:cb:27:d1:b3:4f:cc:3a:8c:3f:35:41:ba:
54:ad:5c:80:d2:b7:16:f2:62:35:87:b1:b1:b3:62:
19:8b:ff:26:31:d5:af:67:56:f6:98:38:58:c7:2f:
a3:70:0c:ab:6c:df:5f:f6:9e:e2:c4:c9:5f:87:70:
c5:ab:ac:97:5c:70:e4:e1:bd:63:fa:0f:af:ca:ed:
5f:ae:02:13:91:61:de:0a:02:27:85:b9:68:b3:21:
12:71:8f:87:71:02:b3:c2:7e:87:38:54:d7:ce:23:
c6:2c:71:0f:6b:d9:17:de:d8:68:7c:2a:6c:48:41:
bd:71:f6:48:fd:09:36:ce:61:c0:df:7f:8b:2d:c0:
5f:12:09:5e:92:90:ec:05:53:bf:1f:24:01:c9:c3:
c8:3b:02:17:df:12:7e:d4:3a:b5:98:b5:da:45:d3:
1e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:0B:6F:E0:98:F8:02:AE:BD:9F:2B:60:FF:D2:E1:CF:E1:D0:91:40
X509v3 Authority Key Identifier:
keyid:DE:C4:EB:9A:29:F4:B7:3D:9F:4C:84:F9:75:C8:5E:07:54:B5:6B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sTrmin0tz2fTIT5dcheB1S1a3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/1c90d7-f12b-4283-8a93-e61741b9f249/1/3sTrmin0tz2fTIT5dcheB1S1a3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/1c90d7-f12b-4283-8a93-e61741b9f249/1/3sTrmin0tz2fTIT5dcheB1S1a3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e3:ec:1f:79:a5:f2:b0:cb:f1:8e:ab:6e:2e:5f:38:fe:4e:76:
e4:dc:97:27:5c:a1:70:6e:19:3c:1e:43:f9:ad:b2:e5:bb:66:
08:6b:01:c3:60:9a:c5:f2:20:fd:50:8b:a9:36:1b:c2:7b:36:
df:99:5b:18:b2:93:8c:27:06:2f:5c:64:07:a2:83:e2:7c:ef:
2f:6a:73:67:7c:b6:b8:dc:8f:49:95:95:c1:be:21:45:21:dd:
a5:8e:3b:fd:6f:64:93:58:a0:3e:5e:40:7f:f6:0d:78:64:76:
5a:c3:0e:65:ab:42:39:f8:3d:67:72:e7:b9:bc:5e:de:93:7e:
ff:3a:c7:fb:f7:5d:1f:cb:7e:6d:b2:fa:77:fa:12:7d:f6:56:
f3:15:3f:52:73:da:31:a7:80:a3:91:69:f7:07:98:ec:c3:c9:
f8:09:d8:80:bd:be:33:7c:67:a1:3e:89:29:50:91:3e:1b:a3:
2e:2a:5b:a6:75:6a:f7:de:df:b5:01:23:bd:a6:42:4e:34:c1:
cd:10:e5:5e:30:b8:dc:10:32:55:4d:e2:be:25:4c:96:d0:1a:
29:70:7f:55:9e:c1:ae:10:a5:b6:5d:69:8e:9f:3e:89:07:90:
7f:be:b3:b5:a4:8a:2b:9b:79:f0:6f:0f:87:2e:db:05:3c:b4:
af:0a:c6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:52:25 2026 by rpki-client