Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/0/3EC842120C803D17C39A3075557753CD9F7A67F1.mft
File: 3EC842120C803D17C39A3075557753CD9F7A67F1.mft (raw, json)
Hash identifier: hD6R+KxF7epZ4UA3aYkyy+YqwlSEVrNVlC9UEwjvfYc=
Subject key identifier: F8:1B:ED:2F:10:F2:BD:7B:C1:97:E0:74:79:0D:E6:E8:C2:C3:2B:C9
Authority key identifier: 3E:C8:42:12:0C:80:3D:17:C3:9A:30:75:55:77:53:CD:9F:7A:67:F1
Certificate issuer: /CN=3ec842120c803d17c39a3075557753cd9f7a67f1
Certificate serial: 3689FD2D2C9DFA15B9A64B94D064E3300EEE7E79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PshCEgyAPRfDmjB1VXdTzZ96Z_E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/0/3EC842120C803D17C39A3075557753CD9F7A67F1.mft
Manifest number: 8D
Signing time: Mon 29 Jun 2026 03:28:52 +0000
Manifest this update: Mon 29 Jun 2026 03:23:52 +0000
Manifest next update: Tue 30 Jun 2026 16:13:52 +0000
Files and hashes: 1: 3EC842120C803D17C39A3075557753CD9F7A67F1.crl (hash: o3cq1GS4xanh6d8mUiXoP9ST3Ga/6a4zcPz4qYVVt9U=)
2: AS214344.asa (hash: M/APLboS0nlaBjhr8TSIm5mXXu1zdoqRhoSyCAeTtgU=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/0/3EC842120C803D17C39A3075557753CD9F7A67F1.crl
rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/0/3EC842120C803D17C39A3075557753CD9F7A67F1.mft
rsync://rpki.ripe.net/repository/DEFAULT/PshCEgyAPRfDmjB1VXdTzZ96Z_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:89:fd:2d:2c:9d:fa:15:b9:a6:4b:94:d0:64:e3:30:0e:ee:7e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec842120c803d17c39a3075557753cd9f7a67f1
Validity
Not Before: Jun 29 03:23:52 2026 GMT
Not After : Jun 30 16:13:52 2026 GMT
Subject: CN=F81BED2F10F2BD7BC197E074790DE6E8C2C32BC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ce:f5:06:87:00:d9:6e:1c:9c:a5:07:6f:0a:
d9:59:ae:02:00:df:f6:91:fb:ac:5c:2c:66:fe:c8:
fd:68:eb:a6:4e:c2:a7:85:01:ed:74:3d:96:0f:a0:
a3:5c:6b:b9:4e:38:0c:51:e5:75:bd:06:63:77:57:
b6:06:ef:9f:5e:9a:cb:92:e1:82:c5:d1:56:81:15:
7e:0c:98:be:99:2b:68:9f:88:4e:e7:59:5a:06:d4:
b9:c5:2d:0f:68:2f:57:e9:af:d5:e3:7a:28:e7:7e:
3b:4c:04:c3:f6:5f:01:8d:35:22:39:3c:5d:ec:fa:
e3:be:a7:14:06:5d:86:0e:59:92:be:5e:5d:c0:1b:
9c:0a:fd:b6:c6:34:0a:1a:c6:db:d5:e6:4e:a9:82:
85:4c:43:df:b3:7d:c1:24:ad:4d:2f:b7:b1:06:29:
70:80:56:65:e8:1b:a3:69:b0:24:55:5e:66:84:80:
ec:99:92:bf:78:a5:7e:2a:82:88:76:8b:14:f2:cf:
1e:a7:a5:7e:67:b8:32:c8:26:b4:6b:ca:fa:b5:59:
bf:e1:12:e6:98:2d:30:d7:ff:8a:0b:2b:a8:4e:48:
00:97:e1:bf:90:df:21:05:78:e0:93:8b:3d:26:5f:
73:45:c4:d7:15:f2:21:f0:c9:c5:ec:46:c0:fc:6d:
78:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:1B:ED:2F:10:F2:BD:7B:C1:97:E0:74:79:0D:E6:E8:C2:C3:2B:C9
X509v3 Authority Key Identifier:
keyid:3E:C8:42:12:0C:80:3D:17:C3:9A:30:75:55:77:53:CD:9F:7A:67:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/0/3EC842120C803D17C39A3075557753CD9F7A67F1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PshCEgyAPRfDmjB1VXdTzZ96Z_E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/0/3EC842120C803D17C39A3075557753CD9F7A67F1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:54:20:ef:db:b9:56:d8:7d:5b:52:db:8e:d4:48:b4:80:e7:
75:c3:a3:f3:29:2e:59:67:77:36:77:6b:8e:d2:ef:8f:14:df:
c6:94:18:70:10:81:d4:63:6c:26:57:3c:8b:71:3d:b9:71:57:
77:0b:9a:d6:c5:a8:a7:59:9e:94:a9:09:67:7c:a7:0f:9f:03:
38:03:25:db:1d:6c:d6:a5:82:89:cd:3b:be:c1:98:cd:97:ec:
da:3b:5b:c5:7b:54:a0:b6:ec:a4:b8:5b:76:05:32:77:dd:a8:
4d:12:78:bd:65:55:1d:77:31:aa:b4:33:50:b4:62:bc:ce:29:
f3:0e:90:09:52:32:06:03:dd:01:cb:ff:b0:f1:6e:1d:57:78:
f1:ef:42:b5:10:5c:b9:68:ea:24:ff:d0:c4:1a:c0:fb:21:01:
76:ce:1e:b0:d8:5e:c3:b0:c3:2b:3a:52:3d:0c:96:76:33:ba:
93:ba:d3:2b:f0:42:b5:8a:3d:a2:2c:2c:8c:36:6f:dd:8f:68:
2e:70:eb:48:72:a2:c1:c5:7a:9c:8d:1d:78:db:55:77:10:67:
c7:97:3d:48:8d:f5:1d:1a:87:ab:89:cd:40:50:2d:b1:7d:c5:
55:63:dd:59:81:25:b0:fc:5a:51:c5:eb:10:f2:d9:9c:ad:93:
8e:7a:d1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:38:40 2026 by rpki-client