Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/1c90d7-f12b-4283-8a93-e61741b9f249/1/3sTrmin0tz2fTIT5dcheB1S1a3E.mft
File: 3sTrmin0tz2fTIT5dcheB1S1a3E.mft (raw, json)
Hash identifier: +377X9AW60Uy/MUT+iUONHJ7rA+o72bZIfEtMetUs2k=
Subject key identifier: 16:95:35:45:9F:6D:FA:50:1D:7F:F5:9B:A2:3D:B5:7C:89:AE:6E:4B
Authority key identifier: DE:C4:EB:9A:29:F4:B7:3D:9F:4C:84:F9:75:C8:5E:07:54:B5:6B:71
Certificate issuer: /CN=dec4eb9a29f4b73d9f4c84f975c85e0754b56b71
Certificate serial: 019D0930610919678C5B8FC547B30E734891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sTrmin0tz2fTIT5dcheB1S1a3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/1c90d7-f12b-4283-8a93-e61741b9f249/1/3sTrmin0tz2fTIT5dcheB1S1a3E.mft
Manifest number: C3
Signing time: Fri 20 Mar 2026 03:00:58 +0000
Manifest this update: Fri 20 Mar 2026 03:00:58 +0000
Manifest next update: Sat 21 Mar 2026 03:00:58 +0000
Files and hashes: 1: 3sTrmin0tz2fTIT5dcheB1S1a3E.crl (hash: KmX8MTOGTGmjiKnAmXzzA/vrXBHglZqF07U29FTwqCc=)
2: 8v-B4tBwt_nXsn0BNXUtzTao1xQ.asa (hash: c3eWcYcZ6AfSlXW2n8VDHUuk8WUaUZqoj+gBRxx0us0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/1c90d7-f12b-4283-8a93-e61741b9f249/1/3sTrmin0tz2fTIT5dcheB1S1a3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/1c90d7-f12b-4283-8a93-e61741b9f249/1/3sTrmin0tz2fTIT5dcheB1S1a3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3sTrmin0tz2fTIT5dcheB1S1a3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:09:30:61:09:19:67:8c:5b:8f:c5:47:b3:0e:73:48:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec4eb9a29f4b73d9f4c84f975c85e0754b56b71
Validity
Not Before: Mar 20 03:00:58 2026 GMT
Not After : Mar 21 03:00:58 2026 GMT
Subject: CN=169535459f6dfa501d7ff59ba23db57c89ae6e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:01:67:52:29:3a:72:6d:2b:6e:8b:bf:a1:8c:
c8:ed:2d:8d:ff:6e:e1:ed:f7:19:ec:49:85:34:6b:
fb:70:6b:2a:93:d2:f4:d4:c6:9e:04:36:23:14:85:
5e:e5:0e:d6:d3:fa:0b:76:b2:11:ce:76:6c:96:67:
22:d8:f8:79:f7:15:8c:d6:da:15:0e:21:43:f4:c8:
53:6c:c3:ed:e6:70:52:db:bd:cb:e6:e9:0c:a4:c5:
24:98:c7:87:5d:f6:fa:64:f1:2c:91:c3:0b:7c:c9:
8d:5f:e1:43:54:de:53:ff:65:38:f1:db:cb:fe:c9:
19:0d:bb:94:37:44:85:9f:93:f8:7b:15:74:05:82:
ed:d5:48:fb:cb:60:4d:b6:b9:64:5e:14:7a:34:77:
66:ea:d2:0c:55:5e:0d:47:1d:61:4e:89:5f:00:94:
a4:fc:e4:f7:31:21:bc:33:45:89:66:4d:19:5e:7f:
78:8b:bf:dc:11:ab:93:bd:69:a9:8d:34:29:91:df:
93:a2:09:fe:df:69:ff:8e:db:f6:bc:a5:41:d3:93:
57:6b:e1:23:80:f4:2c:1a:07:fc:17:70:0f:07:02:
ff:3a:09:ca:a9:31:6a:2b:45:81:26:10:40:8b:74:
57:1f:ab:2d:13:bb:72:24:78:f1:ae:2a:59:27:15:
42:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:95:35:45:9F:6D:FA:50:1D:7F:F5:9B:A2:3D:B5:7C:89:AE:6E:4B
X509v3 Authority Key Identifier:
keyid:DE:C4:EB:9A:29:F4:B7:3D:9F:4C:84:F9:75:C8:5E:07:54:B5:6B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sTrmin0tz2fTIT5dcheB1S1a3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/1c90d7-f12b-4283-8a93-e61741b9f249/1/3sTrmin0tz2fTIT5dcheB1S1a3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/1c90d7-f12b-4283-8a93-e61741b9f249/1/3sTrmin0tz2fTIT5dcheB1S1a3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:96:3d:7f:2a:73:92:1f:10:4e:16:43:55:2a:e0:f9:6e:93:
06:52:82:ed:f7:f6:1b:d0:59:d7:d8:79:15:64:a0:72:cd:c3:
6b:c7:8d:ba:ac:2e:ea:af:23:d4:2c:57:be:87:80:3d:ab:75:
4c:75:1b:ba:5d:56:4c:b2:af:f5:0a:c2:bc:e6:31:74:48:1a:
76:22:d8:00:d4:98:03:33:09:92:77:cd:7c:b9:48:38:3e:2f:
3b:df:2a:62:ff:b2:4c:01:3e:a0:4a:9e:ef:cb:71:b1:cd:2b:
49:0d:34:f3:36:d6:20:9c:c5:06:c7:f6:ee:6b:c5:44:9f:66:
fc:c0:f7:fa:d1:5e:7f:9a:a0:79:36:d9:f3:7f:0c:c6:de:f7:
a1:cf:28:08:fc:50:68:89:a8:7a:c1:93:28:fa:30:20:8d:2d:
3d:74:31:04:b0:63:44:c8:12:c8:cf:d7:e4:67:d1:e3:c4:6a:
65:04:f5:4a:91:14:da:8c:f8:3b:37:0d:49:8f:40:90:4a:50:
db:c2:77:81:10:5c:f4:6b:e3:02:48:1b:b3:0a:bd:b3:c0:07:
20:53:ab:34:7a:5a:01:57:40:e9:05:cc:e4:ac:f0:53:03:14:
12:e9:dd:8c:42:b0:80:5e:06:18:23:d0:88:bb:fb:9d:e2:7d:
e7:14:3a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 07:29:54 2026 by rpki-client