Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/1c90d7-f12b-4283-8a93-e61741b9f249/1/3sTrmin0tz2fTIT5dcheB1S1a3E.mft
File: 3sTrmin0tz2fTIT5dcheB1S1a3E.mft (raw, json)
Hash identifier: 6+Vl/tQG5vhzL7t03xYCwLgty07EH6aWjo0bBdRcP0s=
Subject key identifier: 05:C0:7B:F3:22:DF:45:71:43:AE:05:83:F2:24:C6:FA:AF:99:E8:14
Authority key identifier: DE:C4:EB:9A:29:F4:B7:3D:9F:4C:84:F9:75:C8:5E:07:54:B5:6B:71
Certificate issuer: /CN=dec4eb9a29f4b73d9f4c84f975c85e0754b56b71
Certificate serial: 019DF8A7B4AC1CFEB6D62DC7D6A774AC1613
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sTrmin0tz2fTIT5dcheB1S1a3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/1c90d7-f12b-4283-8a93-e61741b9f249/1/3sTrmin0tz2fTIT5dcheB1S1a3E.mft
Manifest number: 013F
Signing time: Tue 05 May 2026 15:00:33 +0000
Manifest this update: Tue 05 May 2026 15:00:33 +0000
Manifest next update: Wed 06 May 2026 15:00:33 +0000
Files and hashes: 1: 3sTrmin0tz2fTIT5dcheB1S1a3E.crl (hash: VjSb+q2aW4+2xb3f0U/nAYdCa/5cEZNH5XXqvqJlhQ4=)
2: 8v-B4tBwt_nXsn0BNXUtzTao1xQ.asa (hash: c3eWcYcZ6AfSlXW2n8VDHUuk8WUaUZqoj+gBRxx0us0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/1c90d7-f12b-4283-8a93-e61741b9f249/1/3sTrmin0tz2fTIT5dcheB1S1a3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/1c90d7-f12b-4283-8a93-e61741b9f249/1/3sTrmin0tz2fTIT5dcheB1S1a3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3sTrmin0tz2fTIT5dcheB1S1a3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 13:57:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f8:a7:b4:ac:1c:fe:b6:d6:2d:c7:d6:a7:74:ac:16:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec4eb9a29f4b73d9f4c84f975c85e0754b56b71
Validity
Not Before: May 5 15:00:33 2026 GMT
Not After : May 6 15:00:33 2026 GMT
Subject: CN=05c07bf322df457143ae0583f224c6faaf99e814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:bd:8c:d3:45:0f:e2:b3:8f:cc:b1:2b:7b:56:
07:32:9d:aa:dd:98:b2:ac:e4:f1:33:45:c5:3f:cd:
bb:ea:79:f1:5d:06:46:f7:61:6d:17:ed:c6:13:6b:
ad:54:7d:f0:ed:ff:52:32:11:f0:9e:77:75:a9:8e:
d2:f4:6b:0c:58:fc:9f:a2:e6:a7:03:64:2f:89:b4:
03:e0:3c:43:11:42:1e:d9:18:15:17:03:ea:07:a7:
3d:8d:4a:a1:93:2c:f8:68:46:ad:d9:04:0f:92:19:
56:71:8b:17:44:d6:a3:0a:1f:33:9b:04:72:88:8f:
19:88:80:52:44:29:24:90:11:cd:48:e0:af:09:11:
de:86:6d:23:6b:3f:63:53:92:21:2b:e6:e4:ef:db:
cc:bb:13:6e:25:fb:55:11:63:fc:d2:5c:2c:ca:f9:
1d:7c:ef:ad:8a:80:d8:8d:e3:c8:52:f7:28:ea:ae:
37:fe:86:25:9d:ef:c2:ad:52:2c:ef:71:fa:0d:d2:
80:46:af:6e:a4:e2:ed:e8:48:da:30:f6:13:e5:99:
ab:fb:c6:30:57:2e:26:dd:43:0d:07:88:e1:b2:12:
a1:7a:12:be:2c:ca:dd:21:e4:49:03:cd:f6:6e:b9:
66:52:fc:7a:0d:b9:f2:29:24:8d:77:bf:e0:1d:5b:
7a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C0:7B:F3:22:DF:45:71:43:AE:05:83:F2:24:C6:FA:AF:99:E8:14
X509v3 Authority Key Identifier:
keyid:DE:C4:EB:9A:29:F4:B7:3D:9F:4C:84:F9:75:C8:5E:07:54:B5:6B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sTrmin0tz2fTIT5dcheB1S1a3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/1c90d7-f12b-4283-8a93-e61741b9f249/1/3sTrmin0tz2fTIT5dcheB1S1a3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/1c90d7-f12b-4283-8a93-e61741b9f249/1/3sTrmin0tz2fTIT5dcheB1S1a3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:39:2f:17:d7:cb:94:3f:86:5b:90:ce:bd:40:02:aa:96:7f:
d1:d3:c2:42:d1:a1:d6:1f:15:df:98:34:c8:df:95:47:07:29:
16:24:08:02:11:01:7f:cc:c0:48:6c:cd:b1:01:fe:5f:96:c5:
f8:f9:2f:69:68:94:ff:72:67:42:bc:25:89:f8:52:38:ff:45:
2a:5f:16:3b:ce:b6:b4:02:55:43:4e:59:03:a9:a1:c9:9c:a5:
ab:39:c2:c9:7b:bf:55:1e:b3:c1:57:3f:c3:ed:61:ba:d2:00:
b0:27:c6:51:ea:13:8e:23:77:53:af:79:eb:64:63:d9:b4:09:
d4:69:be:f9:3b:c7:df:d1:69:a3:46:c1:00:a8:f5:07:ef:4b:
34:1b:27:03:45:97:e0:89:1d:c6:4e:c9:98:ff:66:38:5b:f9:
8d:35:37:e8:cf:5f:6e:c4:e0:05:71:f1:78:6f:fe:21:3b:13:
b0:ed:0a:00:26:2d:61:db:ab:e5:57:d9:55:d0:98:a4:3f:52:
13:f5:7c:c2:81:00:2e:05:90:aa:4c:07:e7:7b:2a:33:ce:66:
c3:15:c0:af:9e:86:69:d2:7a:c1:d7:bf:10:9e:29:ee:5f:48:
ac:ff:f1:c3:c8:91:dd:7c:ac:92:43:cd:35:bb:7e:52:42:96:
dd:aa:02:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ34p7SsHP621i3H1qd0rBYTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlYzRlYjlhMjlmNGI3M2Q5ZjRjODRmOTc1Yzg1ZTA3NTRi
NTZiNzEwHhcNMjYwNTA1MTUwMDMzWhcNMjYwNTA2MTUwMDMzWjAzMTEwLwYDVQQD
EygwNWMwN2JmMzIyZGY0NTcxNDNhZTA1ODNmMjI0YzZmYWFmOTllODE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3r2M00UP4rOPzLEre1YHMp2q3Ziy
rOTxM0XFP8276nnxXQZG92FtF+3GE2utVH3w7f9SMhHwnnd1qY7S9GsMWPyfouan
A2QvibQD4DxDEUIe2RgVFwPqB6c9jUqhkyz4aEat2QQPkhlWcYsXRNajCh8zmwRy
iI8ZiIBSRCkkkBHNSOCvCRHehm0jaz9jU5IhK+bk79vMuxNuJftVEWP80lwsyvkd
fO+tioDYjePIUvco6q43/oYlne/CrVIs73H6DdKARq9upOLt6EjaMPYT5Zmr+8Yw
Vy4m3UMNB4jhshKhehK+LMrdIeRJA832brlmUvx6DbnyKSSNd7/gHVt6mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAXAe/Mi30VxQ64Fg/IkxvqvmegUMB8GA1UdIwQY
MBaAFN7E65op9Lc9n0yE+XXIXgdUtWtxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3NUcm1pbjB0ejJmVElUNWRjaGVCMVMxYTNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8xYzkwZDctZjEyYi00MjgzLThhOTMt
ZTYxNzQxYjlmMjQ5LzEvM3NUcm1pbjB0ejJmVElUNWRjaGVCMVMxYTNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS8xYzkwZDctZjEyYi00MjgzLThhOTMtZTYxNzQxYjlmMjQ5
LzEvM3NUcm1pbjB0ejJmVElUNWRjaGVCMVMxYTNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjjkvF9fL
lD+GW5DOvUACqpZ/0dPCQtGh1h8V35g0yN+VRwcpFiQIAhEBf8zASGzNsQH+X5bF
+PkvaWiU/3JnQrwlifhSOP9FKl8WO862tAJVQ05ZA6mhyZylqznCyXu/VR6zwVc/
w+1hutIAsCfGUeoTjiN3U69562Rj2bQJ1Gm++TvH39Fpo0bBAKj1B+9LNBsnA0WX
4Ikdxk7JmP9mOFv5jTU36M9fbsTgBXHxeG/+ITsTsO0KACYtYdur5VfZVdCYpD9S
E/V8woEALgWQqkwH53sqM85mwxXAr56GadJ6wde/EJ4p7l9IrP/xw8iR3XyskkPN
Nbt+UkKW3aoCoA==
-----END CERTIFICATE-----
Generated at Tue May 5 20:11:15 2026 by rpki-client