Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/1c90d7-f12b-4283-8a93-e61741b9f249/1/3sTrmin0tz2fTIT5dcheB1S1a3E.mft
File: 3sTrmin0tz2fTIT5dcheB1S1a3E.mft (raw, json)
Hash identifier: pSi0lvN/NNaMOe0bEnaV/GSVfpRfw8aGZP81w1yASGE=
Subject key identifier: F1:BB:2C:33:4D:A3:41:EC:8A:22:32:31:02:ED:3B:86:B6:8C:D0:8A
Authority key identifier: DE:C4:EB:9A:29:F4:B7:3D:9F:4C:84:F9:75:C8:5E:07:54:B5:6B:71
Certificate issuer: /CN=dec4eb9a29f4b73d9f4c84f975c85e0754b56b71
Certificate serial: 019FF86C1368D6D2F8D50F16F1491DFD553A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sTrmin0tz2fTIT5dcheB1S1a3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/1c90d7-f12b-4283-8a93-e61741b9f249/1/3sTrmin0tz2fTIT5dcheB1S1a3E.mft
Manifest number: 0248
Signing time: Thu 13 Aug 2026 00:01:00 +0000
Manifest this update: Thu 13 Aug 2026 00:01:00 +0000
Manifest next update: Fri 14 Aug 2026 00:01:00 +0000
Files and hashes: 1: 3sTrmin0tz2fTIT5dcheB1S1a3E.crl (hash: eDQh7G/IJHxZ9IC8seTjY7l4AcBAr8PcsCkJ/x91P2g=)
2: 8v-B4tBwt_nXsn0BNXUtzTao1xQ.asa (hash: c3eWcYcZ6AfSlXW2n8VDHUuk8WUaUZqoj+gBRxx0us0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/1c90d7-f12b-4283-8a93-e61741b9f249/1/3sTrmin0tz2fTIT5dcheB1S1a3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/1c90d7-f12b-4283-8a93-e61741b9f249/1/3sTrmin0tz2fTIT5dcheB1S1a3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3sTrmin0tz2fTIT5dcheB1S1a3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 00:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:6c:13:68:d6:d2:f8:d5:0f:16:f1:49:1d:fd:55:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec4eb9a29f4b73d9f4c84f975c85e0754b56b71
Validity
Not Before: Aug 13 00:01:00 2026 GMT
Not After : Aug 14 00:01:00 2026 GMT
Subject: CN=f1bb2c334da341ec8a22323102ed3b86b68cd08a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5b:00:80:14:71:a5:dc:16:fb:9f:ec:98:47:
31:fb:2b:73:c6:d3:05:65:a7:d9:51:76:d6:95:59:
b0:26:6b:18:5f:c4:51:c0:cd:c3:6e:6d:5d:6f:9b:
f2:bb:bd:8d:3a:bc:0c:52:4f:46:ab:3b:75:3a:7e:
b6:72:17:27:c9:69:ee:86:cf:40:00:7b:b2:9d:0b:
0d:24:cd:df:a2:78:3e:1c:fa:05:69:98:90:39:a8:
26:69:a1:70:e3:af:da:5a:c0:26:b3:ed:e7:e7:3d:
65:3c:36:eb:71:9b:aa:1c:68:1f:ad:97:e6:85:2a:
b1:ed:20:00:34:f2:b2:f0:01:7b:2d:cd:f0:53:7b:
0b:83:ff:00:a9:76:93:e3:13:71:d9:63:d8:5f:16:
09:a1:ed:1c:75:fa:d4:50:4c:14:c4:57:40:1f:ff:
48:72:4d:a8:5b:2c:73:f4:00:f8:65:99:6b:96:8b:
ff:e9:9f:ef:77:61:e1:c9:34:53:ba:a1:e1:64:86:
1c:71:60:a2:52:fa:8f:8d:fa:fb:ce:8e:ea:a1:44:
03:52:95:14:76:ef:73:40:a6:80:41:70:32:1c:fc:
1a:7c:bf:3a:83:b3:d9:e1:84:57:b9:7d:36:71:00:
8b:da:38:21:55:ea:54:0a:a8:b8:b3:2c:26:b2:bd:
84:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:BB:2C:33:4D:A3:41:EC:8A:22:32:31:02:ED:3B:86:B6:8C:D0:8A
X509v3 Authority Key Identifier:
keyid:DE:C4:EB:9A:29:F4:B7:3D:9F:4C:84:F9:75:C8:5E:07:54:B5:6B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sTrmin0tz2fTIT5dcheB1S1a3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/1c90d7-f12b-4283-8a93-e61741b9f249/1/3sTrmin0tz2fTIT5dcheB1S1a3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/1c90d7-f12b-4283-8a93-e61741b9f249/1/3sTrmin0tz2fTIT5dcheB1S1a3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:b5:51:d4:e7:20:87:1a:11:50:ed:1b:1c:9f:c1:76:6b:fa:
30:6b:ac:82:9f:85:43:8c:ad:dc:0a:c8:64:39:88:7f:4f:ca:
1e:2c:3d:50:15:f3:37:c2:f8:67:cd:02:e7:d6:ca:d6:1f:39:
5e:66:16:a0:8e:00:42:d0:c3:58:e7:10:5f:fe:dc:a2:01:51:
a4:71:41:89:b6:2a:42:59:f7:99:c1:8c:e4:28:ec:13:4d:52:
10:86:f5:ea:2d:5b:9d:e8:82:c3:24:7e:a6:a2:69:76:27:16:
7a:0a:38:ce:d9:c4:b4:f3:b7:a2:d0:aa:94:f3:15:4d:67:66:
1f:7f:24:92:14:86:a5:f5:13:7b:ab:57:17:c1:80:3b:13:a2:
d7:94:7b:cf:e6:30:ef:aa:93:8c:35:a4:0e:d2:14:11:33:b6:
5c:7b:db:1c:28:ea:a4:21:e1:17:8a:66:66:f4:1b:19:1d:50:
7a:e6:fb:43:3b:3e:3a:b0:9f:1c:80:38:74:1b:73:04:54:d5:
b5:66:02:95:e4:ea:fb:95:1b:25:82:c7:60:90:32:58:21:81:
61:ec:27:86:39:2a:8a:49:40:17:c4:9b:78:20:b5:77:27:54:
38:e2:df:55:ba:0e:33:ab:3d:b8:a2:03:4b:2b:e6:49:fa:ef:
de:0d:33:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:01:42 2026 by rpki-client