Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/0/3EC842120C803D17C39A3075557753CD9F7A67F1.mft
File: 3EC842120C803D17C39A3075557753CD9F7A67F1.mft (raw, json)
Hash identifier: vHX/wxbNy5ur036Ctuc/Q51UJpuSCWJVZHNBZPlx6Fw=
Subject key identifier: 9C:7B:E8:38:13:BB:A8:B1:9A:BC:6C:DC:B1:5F:CF:77:B0:48:C9:F9
Authority key identifier: 3E:C8:42:12:0C:80:3D:17:C3:9A:30:75:55:77:53:CD:9F:7A:67:F1
Certificate issuer: /CN=3ec842120c803d17c39a3075557753cd9f7a67f1
Certificate serial: 0AE6F70A94E3886AFA3E0EF9771AAA9EC1C869E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PshCEgyAPRfDmjB1VXdTzZ96Z_E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/0/3EC842120C803D17C39A3075557753CD9F7A67F1.mft
Manifest number: B7
Signing time: Thu 23 Jul 2026 11:07:29 +0000
Manifest this update: Thu 23 Jul 2026 11:02:29 +0000
Manifest next update: Sat 25 Jul 2026 00:59:29 +0000
Files and hashes: 1: 3EC842120C803D17C39A3075557753CD9F7A67F1.crl (hash: t0jJVJxAttD9IS7exkIQiM2ZhOJLz799HM/Tp9+I0Wc=)
2: AS214344.asa (hash: uYGSkYWuw6t30fZ1s2NADMDDtXgosgQODcTNPIgjjkI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/0/3EC842120C803D17C39A3075557753CD9F7A67F1.crl
rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/0/3EC842120C803D17C39A3075557753CD9F7A67F1.mft
rsync://rpki.ripe.net/repository/DEFAULT/PshCEgyAPRfDmjB1VXdTzZ96Z_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:e6:f7:0a:94:e3:88:6a:fa:3e:0e:f9:77:1a:aa:9e:c1:c8:69:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec842120c803d17c39a3075557753cd9f7a67f1
Validity
Not Before: Jul 23 11:02:29 2026 GMT
Not After : Jul 25 00:59:29 2026 GMT
Subject: CN=9C7BE83813BBA8B19ABC6CDCB15FCF77B048C9F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:21:7e:6a:20:f3:d4:de:4c:0f:b9:09:25:22:
b6:ed:5a:c6:ba:bc:8d:4b:55:bf:38:53:bd:bb:05:
60:f7:df:fa:46:2f:52:ee:9b:3c:1d:06:f8:cf:f1:
5c:2f:c9:8d:c0:18:cd:bf:5a:aa:c4:db:8f:00:f4:
34:f8:e2:5f:6a:6e:e6:ff:33:7e:25:bb:b6:24:44:
80:83:d6:4e:78:b9:b1:bb:32:00:38:dc:c9:d0:64:
7b:2b:44:a3:b7:81:df:c4:64:60:2a:06:f7:e6:c4:
a8:76:5c:fe:c0:eb:47:30:a7:7d:0b:2c:ab:c1:9d:
f1:6b:69:03:e6:d9:65:bf:fe:50:77:39:43:a8:85:
09:df:49:da:f7:91:4c:c2:82:e9:19:19:99:f2:a8:
d8:e8:65:5c:50:3c:9a:a1:d9:22:53:20:19:e4:68:
89:e8:46:43:47:7a:25:68:04:50:a0:cc:53:19:22:
9d:23:25:e4:6f:41:3a:f9:6f:d6:ed:3b:c8:fb:90:
48:e3:24:66:7f:8a:b9:f8:d5:e2:54:09:b8:97:5a:
70:bf:f0:d1:fa:98:46:cf:bb:cf:a4:5d:7c:97:5e:
ff:89:da:77:8d:86:77:33:2a:50:25:57:a9:41:25:
a2:58:a1:ee:34:cc:82:26:55:8b:f7:dc:81:ee:cc:
88:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:7B:E8:38:13:BB:A8:B1:9A:BC:6C:DC:B1:5F:CF:77:B0:48:C9:F9
X509v3 Authority Key Identifier:
keyid:3E:C8:42:12:0C:80:3D:17:C3:9A:30:75:55:77:53:CD:9F:7A:67:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/0/3EC842120C803D17C39A3075557753CD9F7A67F1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PshCEgyAPRfDmjB1VXdTzZ96Z_E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/0/3EC842120C803D17C39A3075557753CD9F7A67F1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:d4:5d:f3:2c:a4:79:6e:f0:23:3d:0f:3f:ca:73:b1:da:1e:
4b:b0:d1:d9:cf:81:05:77:45:9e:80:38:8e:4e:5b:b8:b2:bc:
39:45:50:dd:1b:31:df:57:39:00:b8:89:2c:24:86:b4:ea:1a:
3e:47:13:e4:6e:1e:c7:69:4b:5f:ef:4c:05:f0:40:d4:d5:47:
4b:35:4f:c2:01:b9:4a:cc:e7:1f:75:10:f7:f5:79:b0:8b:17:
ae:fc:d3:fd:e3:81:7e:6f:58:a5:b3:58:47:aa:ce:5d:a4:1a:
40:ff:50:2e:db:b5:0b:9b:5f:75:f0:61:72:e6:23:07:b6:83:
37:db:c2:c4:d7:52:57:4b:41:91:ee:21:d6:74:6d:03:fd:ee:
fb:bd:7c:86:0d:67:4e:8d:e5:22:9b:43:46:ec:98:ab:94:fc:
f0:b1:df:58:b0:d5:9a:1d:06:fe:33:4b:5d:1e:5f:44:8f:87:
44:52:35:51:43:41:46:7c:50:52:68:4c:f5:59:53:57:83:f5:
e4:db:39:87:8f:4e:ff:8e:d6:5b:d9:43:34:e0:d0:3e:e7:a7:
a7:24:1f:f7:b3:21:ab:d8:d9:b8:93:fd:47:08:10:82:d3:75:
24:5d:b4:18:55:73:85:a9:d5:d5:a5:e1:98:eb:90:05:69:c0:
e8:84:a8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:54:59 2026 by rpki-client