Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/0/3EC842120C803D17C39A3075557753CD9F7A67F1.mft
File: 3EC842120C803D17C39A3075557753CD9F7A67F1.mft (raw, json)
Hash identifier: /j113mmM8HIF2b3JfjAuiG30KUcqDs2D0Iyf9eIPpik=
Subject key identifier: 52:6B:01:22:61:7B:57:AC:C2:5A:7E:25:E8:C2:A4:DB:56:DB:2C:26
Authority key identifier: 3E:C8:42:12:0C:80:3D:17:C3:9A:30:75:55:77:53:CD:9F:7A:67:F1
Certificate issuer: /CN=3ec842120c803d17c39a3075557753cd9f7a67f1
Certificate serial: 10E4AB89797CDE5DEC8274C760D9C86A9664DA81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PshCEgyAPRfDmjB1VXdTzZ96Z_E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/0/3EC842120C803D17C39A3075557753CD9F7A67F1.mft
Manifest number: 3D
Signing time: Thu 14 May 2026 16:01:09 +0000
Manifest this update: Thu 14 May 2026 15:56:09 +0000
Manifest next update: Sat 16 May 2026 04:16:09 +0000
Files and hashes: 1: 3EC842120C803D17C39A3075557753CD9F7A67F1.crl (hash: a4XEW8d9uQLCVVtUrYf6g7iyNsZxJ1bPF2Adcbx7eXQ=)
2: AS214344.asa (hash: TGsKXPFdV/uAOjQtkxycyfn9PCvFZ2/XuR5vzeEy330=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/0/3EC842120C803D17C39A3075557753CD9F7A67F1.crl
rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/0/3EC842120C803D17C39A3075557753CD9F7A67F1.mft
rsync://rpki.ripe.net/repository/DEFAULT/PshCEgyAPRfDmjB1VXdTzZ96Z_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:e4:ab:89:79:7c:de:5d:ec:82:74:c7:60:d9:c8:6a:96:64:da:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec842120c803d17c39a3075557753cd9f7a67f1
Validity
Not Before: May 14 15:56:09 2026 GMT
Not After : May 16 04:16:09 2026 GMT
Subject: CN=526B0122617B57ACC25A7E25E8C2A4DB56DB2C26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b3:69:2d:99:91:d8:54:89:1a:1a:11:2f:08:
ab:b5:e9:19:1b:53:52:b8:77:87:a3:24:84:85:89:
b6:45:fb:cc:4f:9b:79:56:92:61:03:71:0d:d6:b4:
53:7e:b2:45:fe:b9:05:a1:0c:5f:9b:83:63:9d:3d:
e3:40:e0:96:6c:d1:07:69:d4:f4:40:a9:16:0d:fa:
32:5d:09:d4:2d:cf:e8:1b:7f:8f:8d:ae:10:a3:55:
5e:23:20:fd:59:71:9e:40:46:40:23:f4:a6:a6:44:
43:b3:63:82:9d:5d:e8:49:fd:3a:5b:45:38:6c:c8:
e7:76:dd:47:05:64:33:cc:67:81:64:58:fb:30:ab:
98:da:82:0f:11:f5:87:1a:75:70:67:40:3b:87:56:
58:6e:9f:4b:c5:ef:f9:75:cb:b9:14:06:d5:4c:39:
91:a0:7b:60:65:09:1f:41:50:f0:a4:a8:cf:b8:d8:
fb:65:41:57:3b:f2:be:3e:f0:27:2d:39:af:39:82:
03:0a:2b:59:64:34:87:d1:bd:78:3d:48:58:bb:30:
fa:0e:f3:b3:18:63:24:77:77:1f:14:01:6e:48:42:
2e:02:fc:d5:d0:8e:ec:ca:62:9d:09:57:6d:d2:c7:
1a:3f:9a:5d:cc:7a:54:54:a5:33:3c:27:43:90:ea:
96:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:6B:01:22:61:7B:57:AC:C2:5A:7E:25:E8:C2:A4:DB:56:DB:2C:26
X509v3 Authority Key Identifier:
keyid:3E:C8:42:12:0C:80:3D:17:C3:9A:30:75:55:77:53:CD:9F:7A:67:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/0/3EC842120C803D17C39A3075557753CD9F7A67F1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PshCEgyAPRfDmjB1VXdTzZ96Z_E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/0/3EC842120C803D17C39A3075557753CD9F7A67F1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:1e:a3:11:cd:31:8e:ba:5e:b0:45:af:c9:44:cd:d4:42:29:
c6:5a:f4:d2:66:72:a6:b0:cf:7b:a3:a7:e7:ed:9e:93:28:73:
6f:a3:c3:0e:6e:5f:30:b6:e8:ca:00:84:fb:48:9d:bc:8e:c7:
ed:41:df:db:22:20:6a:09:f0:f5:3f:45:40:c1:b9:e8:90:e5:
35:33:66:6d:a6:17:5d:21:e2:c8:72:53:6f:45:25:70:85:81:
48:c6:19:a6:af:4f:28:d0:b5:97:d7:62:e9:47:44:3b:99:c4:
8c:3a:8a:90:ed:21:f6:ab:68:ee:ae:fb:39:b0:b9:55:69:e9:
ea:da:ec:b2:24:f8:57:76:1e:60:b9:cf:63:c5:74:29:34:45:
9b:89:2c:ff:7f:23:ed:75:ef:d2:2e:b3:87:e2:c2:bd:88:d7:
dd:a0:65:50:8b:2a:3d:c1:23:70:de:48:a2:46:d1:de:4b:fa:
9e:12:21:bd:df:6f:ed:80:08:ef:e7:cd:24:8a:b7:ca:87:4a:
24:77:82:d6:39:32:99:7e:5d:43:76:81:e7:03:ce:cd:16:7e:
52:04:6f:0e:85:1b:49:91:76:fa:3e:07:d6:c0:f2:52:84:51:
ee:aa:2f:2c:ac:ed:ef:c1:4c:cc:78:56:5d:c1:1a:4d:d7:94:
d6:c9:83:5c
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUEOSriXl83l3sgnTHYNnIapZk2oEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2VjODQyMTIwYzgwM2QxN2MzOWEzMDc1NTU3NzUzY2Q5
ZjdhNjdmMTAeFw0yNjA1MTQxNTU2MDlaFw0yNjA1MTYwNDE2MDlaMDMxMTAvBgNV
BAMTKDUyNkIwMTIyNjE3QjU3QUNDMjVBN0UyNUU4QzJBNERCNTZEQjJDMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjs2ktmZHYVIkaGhEvCKu16Rkb
U1K4d4ejJISFibZF+8xPm3lWkmEDcQ3WtFN+skX+uQWhDF+bg2OdPeNA4JZs0Qdp
1PRAqRYN+jJdCdQtz+gbf4+NrhCjVV4jIP1ZcZ5ARkAj9KamREOzY4KdXehJ/Tpb
RThsyOd23UcFZDPMZ4FkWPswq5jagg8R9YcadXBnQDuHVlhun0vF7/l1y7kUBtVM
OZGge2BlCR9BUPCkqM+42PtlQVc78r4+8CctOa85ggMKK1lkNIfRvXg9SFi7MPoO
87MYYyR3dx8UAW5IQi4C/NXQjuzKYp0JV23Sxxo/ml3MelRUpTM8J0OQ6pZtAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUUmsBImF7V6zCWn4l6MKk21bbLCYwHwYDVR0j
BBgwFoAUPshCEgyAPRfDmjB1VXdTzZ96Z/EwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYjk2YjYxMTMtODVlYS00ZmMyLWFlZDQtMWY4NjVkMGFk
NDQ0LzAvM0VDODQyMTIwQzgwM0QxN0MzOUEzMDc1NTU3NzUzQ0Q5RjdBNjdGMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BzaENFZ3lBUFJmRG1qQjFWWGRUelo5
NlpfRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iOTZiNjExMy04
NWVhLTRmYzItYWVkNC0xZjg2NWQwYWQ0NDQvMC8zRUM4NDIxMjBDODAzRDE3QzM5
QTMwNzU1NTc3NTNDRDlGN0E2N0YxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfx6jEc0xjrpesEWvyUTN
1EIpxlr00mZyprDPe6On5+2ekyhzb6PDDm5fMLboygCE+0idvI7H7UHf2yIgagnw
9T9FQMG56JDlNTNmbaYXXSHiyHJTb0UlcIWBSMYZpq9PKNC1l9di6UdEO5nEjDqK
kO0h9qto7q77ObC5VWnp6trssiT4V3YeYLnPY8V0KTRFm4ks/38j7XXv0i6zh+LC
vYjX3aBlUIsqPcEjcN5IokbR3kv6nhIhvd9v7YAI7+fNJIq3yodKJHeC1jkymX5d
Q3aB5wPOzRZ+UgRvDoUbSZF2+j4H1sDyUoRR7qovLKzt78FMzHhWXcEaTdeU1smD
XA==
-----END CERTIFICATE-----
Generated at Fri May 15 06:14:10 2026 by rpki-client