Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/1c90d7-f12b-4283-8a93-e61741b9f249/1/3sTrmin0tz2fTIT5dcheB1S1a3E.mft
File: 3sTrmin0tz2fTIT5dcheB1S1a3E.mft (raw, json)
Hash identifier: JlSq8M2rdJ6U9YLefhAHFqI9JzBR/E7E765RzuN/07s=
Subject key identifier: B6:45:10:86:7F:C8:F1:18:CE:3F:92:15:13:D3:95:94:FE:CF:FB:97
Authority key identifier: DE:C4:EB:9A:29:F4:B7:3D:9F:4C:84:F9:75:C8:5E:07:54:B5:6B:71
Certificate issuer: /CN=dec4eb9a29f4b73d9f4c84f975c85e0754b56b71
Certificate serial: 019F9210FBEEC8A182F001532AE9C8938A96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sTrmin0tz2fTIT5dcheB1S1a3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/1c90d7-f12b-4283-8a93-e61741b9f249/1/3sTrmin0tz2fTIT5dcheB1S1a3E.mft
Manifest number: 0213
Signing time: Fri 24 Jul 2026 03:00:14 +0000
Manifest this update: Fri 24 Jul 2026 03:00:14 +0000
Manifest next update: Sat 25 Jul 2026 03:00:14 +0000
Files and hashes: 1: 3sTrmin0tz2fTIT5dcheB1S1a3E.crl (hash: emq6fsI8LI4NVEdBnrXoXIR6bRL9S/uH/nuBwou4Bn0=)
2: 8v-B4tBwt_nXsn0BNXUtzTao1xQ.asa (hash: c3eWcYcZ6AfSlXW2n8VDHUuk8WUaUZqoj+gBRxx0us0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/1c90d7-f12b-4283-8a93-e61741b9f249/1/3sTrmin0tz2fTIT5dcheB1S1a3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/1c90d7-f12b-4283-8a93-e61741b9f249/1/3sTrmin0tz2fTIT5dcheB1S1a3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3sTrmin0tz2fTIT5dcheB1S1a3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:10:fb:ee:c8:a1:82:f0:01:53:2a:e9:c8:93:8a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec4eb9a29f4b73d9f4c84f975c85e0754b56b71
Validity
Not Before: Jul 24 03:00:14 2026 GMT
Not After : Jul 25 03:00:14 2026 GMT
Subject: CN=b64510867fc8f118ce3f921513d39594fecffb97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:15:11:a9:e3:97:c0:2d:27:85:f8:69:8a:89:
8a:06:6f:a7:19:3d:e3:ea:ce:d5:6e:4e:a2:32:b6:
9c:b8:16:11:6f:76:9c:0b:5b:81:3d:ee:26:38:bb:
ae:08:02:bb:81:66:f6:08:4f:ec:e9:ba:1e:80:b6:
fa:b2:ce:50:69:62:6b:a7:5d:69:2e:ad:d1:c1:99:
a2:59:c7:58:fc:b2:17:b7:92:35:08:b6:e2:5d:35:
51:a2:12:bb:35:08:94:e4:11:18:7f:a1:eb:79:67:
c4:98:5d:6f:82:19:a0:53:66:e1:da:30:6a:b3:50:
10:51:cc:18:81:80:c7:0f:40:2a:5c:d5:72:46:19:
a8:26:6f:0b:77:f9:db:3d:d6:07:49:9e:e7:4d:c8:
b4:da:f1:bc:f5:4d:df:02:f6:17:24:f6:4e:71:9d:
4e:69:a3:3c:62:8a:88:2d:51:3a:a7:51:96:19:6d:
cd:a0:92:9d:fa:b1:d5:98:68:de:af:68:ea:74:04:
68:96:f5:bd:3d:1d:6a:4b:45:a9:91:8c:5f:3b:b0:
4d:0f:d9:07:07:84:16:de:5a:a1:89:c7:95:c9:07:
2e:ce:7d:35:ac:87:5d:2a:ea:48:fb:c1:4a:30:0d:
96:39:38:bf:99:67:48:3a:4d:b6:fa:b0:ba:c6:06:
fd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:45:10:86:7F:C8:F1:18:CE:3F:92:15:13:D3:95:94:FE:CF:FB:97
X509v3 Authority Key Identifier:
keyid:DE:C4:EB:9A:29:F4:B7:3D:9F:4C:84:F9:75:C8:5E:07:54:B5:6B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sTrmin0tz2fTIT5dcheB1S1a3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/1c90d7-f12b-4283-8a93-e61741b9f249/1/3sTrmin0tz2fTIT5dcheB1S1a3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/1c90d7-f12b-4283-8a93-e61741b9f249/1/3sTrmin0tz2fTIT5dcheB1S1a3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:5a:4c:e8:31:9f:42:a0:5f:f8:d2:1c:3e:a1:72:fb:d8:52:
48:b2:ba:1a:29:82:9c:3d:a3:2e:5d:6d:86:3e:7b:ed:90:0f:
50:67:47:74:72:51:03:9c:99:5d:92:93:b4:9b:09:8b:6a:17:
f2:30:aa:3e:4c:d6:99:ac:95:ab:86:31:f4:61:cc:14:4c:8b:
fb:e4:28:74:ef:de:a1:89:c8:04:fa:11:39:f4:7f:c2:28:69:
d5:d2:9f:ef:20:a5:73:92:79:c4:be:6d:97:28:dc:8d:b0:89:
2f:76:31:10:76:7b:45:d5:81:c0:22:31:d4:42:db:42:5e:43:
f1:53:7d:8c:62:30:46:f4:c6:2f:e8:aa:ba:fc:da:d1:da:02:
9a:eb:39:64:a1:f1:e5:3e:d2:a8:a3:c6:d2:9b:fb:b6:44:5b:
08:27:b8:13:c8:2d:c0:20:a5:06:e9:71:c6:c9:45:92:86:f8:
31:50:d9:25:f8:d3:7f:ef:b0:6d:54:c0:5c:a6:23:ae:6d:87:
7d:06:36:a5:af:66:21:f4:9d:f4:70:f0:e1:5a:81:c0:47:76:
f1:22:df:aa:bb:69:85:d4:c5:4f:5a:ba:3b:0e:33:9d:e6:73:
8b:0f:81:40:a6:8d:62:95:bb:ee:d3:d5:ed:e0:3c:8c:48:ac:
0a:94:af:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SEPvuyKGC8AFTKunIk4qWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlYzRlYjlhMjlmNGI3M2Q5ZjRjODRmOTc1Yzg1ZTA3NTRi
NTZiNzEwHhcNMjYwNzI0MDMwMDE0WhcNMjYwNzI1MDMwMDE0WjAzMTEwLwYDVQQD
EyhiNjQ1MTA4NjdmYzhmMTE4Y2UzZjkyMTUxM2QzOTU5NGZlY2ZmYjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhURqeOXwC0nhfhpiomKBm+nGT3j
6s7Vbk6iMracuBYRb3acC1uBPe4mOLuuCAK7gWb2CE/s6boegLb6ss5QaWJrp11p
Lq3RwZmiWcdY/LIXt5I1CLbiXTVRohK7NQiU5BEYf6HreWfEmF1vghmgU2bh2jBq
s1AQUcwYgYDHD0AqXNVyRhmoJm8Ld/nbPdYHSZ7nTci02vG89U3fAvYXJPZOcZ1O
aaM8YoqILVE6p1GWGW3NoJKd+rHVmGjer2jqdARolvW9PR1qS0WpkYxfO7BND9kH
B4QW3lqhiceVyQcuzn01rIddKupI+8FKMA2WOTi/mWdIOk22+rC6xgb9NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLZFEIZ/yPEYzj+SFRPTlZT+z/uXMB8GA1UdIwQY
MBaAFN7E65op9Lc9n0yE+XXIXgdUtWtxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3NUcm1pbjB0ejJmVElUNWRjaGVCMVMxYTNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8xYzkwZDctZjEyYi00MjgzLThhOTMt
ZTYxNzQxYjlmMjQ5LzEvM3NUcm1pbjB0ejJmVElUNWRjaGVCMVMxYTNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS8xYzkwZDctZjEyYi00MjgzLThhOTMtZTYxNzQxYjlmMjQ5
LzEvM3NUcm1pbjB0ejJmVElUNWRjaGVCMVMxYTNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALVpM6DGf
QqBf+NIcPqFy+9hSSLK6GimCnD2jLl1thj577ZAPUGdHdHJRA5yZXZKTtJsJi2oX
8jCqPkzWmayVq4Yx9GHMFEyL++QodO/eoYnIBPoROfR/wihp1dKf7yClc5J5xL5t
lyjcjbCJL3YxEHZ7RdWBwCIx1ELbQl5D8VN9jGIwRvTGL+iquvza0doCmus5ZKHx
5T7SqKPG0pv7tkRbCCe4E8gtwCClBulxxslFkob4MVDZJfjTf++wbVTAXKYjrm2H
fQY2pa9mIfSd9HDw4VqBwEd28SLfqrtphdTFT1q6Ow4zneZziw+BQKaNYpW77tPV
7eA8jEisCpSvwg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:12:52 2026 by rpki-client