Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
File: 3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft (raw, json)
Hash identifier: rBRK7oLUg03hT+8MGqEW1H9WvmFggT7w1YkMnFzudrY=
Subject key identifier: A0:43:F5:BE:A1:13:71:52:D3:E7:DE:2D:F7:39:3A:58:7E:8D:A7:D1
Authority key identifier: DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
Certificate issuer: /CN=de3d81211f492edf029a22cc66c20a3b94583590
Certificate serial: 019E1ED9EA002CBFC344131CF9A19333EC11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
Manifest number: 11C3
Signing time: Wed 13 May 2026 01:00:58 +0000
Manifest this update: Wed 13 May 2026 01:00:58 +0000
Manifest next update: Thu 14 May 2026 01:00:58 +0000
Files and hashes: 1: 3egON2jf6e6LPs4tP2ayfLDDjko.roa (hash: FPeRmXox6jx7zN8CEWYBuSRVJ47FX97vZNIl6GKWp5k=)
2: 3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl (hash: JBDHzBBa1jEA0+ORyWvxmx/OVNnHQ7cOf6fk6zBdW5w=)
3: mvCEO_UcfF7FkrN-g_zfUazRAdY.roa (hash: 60BBAVa3nyV59ILHyxDNVmnRbsZGSR5/5E7St8ZMJAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:ea:00:2c:bf:c3:44:13:1c:f9:a1:93:33:ec:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de3d81211f492edf029a22cc66c20a3b94583590
Validity
Not Before: May 13 01:00:58 2026 GMT
Not After : May 14 01:00:58 2026 GMT
Subject: CN=a043f5bea1137152d3e7de2df7393a587e8da7d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:39:8b:44:0b:d6:11:98:f2:fe:45:25:df:15:
12:17:1d:f6:bd:ea:c3:c8:b0:1c:cb:28:d0:7c:95:
93:fa:02:d0:95:b1:21:7a:7d:42:3d:2c:fc:ca:45:
af:64:8b:dc:c5:5d:03:f9:c8:d6:af:21:ad:24:d6:
83:29:e7:8c:d4:03:58:b3:78:78:e6:6d:c3:41:09:
d4:7a:9b:5b:16:9a:9c:4b:39:15:49:95:6d:d9:56:
c7:17:0c:a9:6e:76:29:62:ca:72:eb:40:32:fc:15:
fb:c1:b7:b6:98:cc:76:d1:46:76:68:c2:c4:c7:3e:
2f:7a:89:27:ca:6e:bc:67:32:a1:f8:e5:a9:92:78:
a6:e0:b4:35:f1:a5:bb:de:25:ab:aa:fd:21:8a:b6:
68:06:f3:bf:68:6c:9a:5b:db:04:36:25:91:f0:88:
ed:bd:c4:3b:da:c5:1f:97:81:4d:46:af:c3:95:7b:
34:81:eb:89:b8:3d:28:5d:5a:4f:08:00:be:3c:54:
90:2c:d0:a0:47:3c:27:23:fc:d4:84:bc:82:31:ae:
b2:54:51:0f:01:6a:6a:b5:75:0e:65:6c:93:7a:56:
b7:a7:0f:93:77:90:3f:57:99:f6:6d:57:e7:f4:d1:
5f:42:73:e7:2b:70:ae:81:e2:52:d3:a4:dc:8d:1c:
47:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:43:F5:BE:A1:13:71:52:D3:E7:DE:2D:F7:39:3A:58:7E:8D:A7:D1
X509v3 Authority Key Identifier:
keyid:DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ce:dd:ab:0b:13:c7:12:2b:64:44:e6:57:38:42:62:80:27:
47:68:8e:26:5e:c6:4d:a7:b1:e4:78:6d:b5:13:54:08:e8:de:
81:88:9c:08:16:6c:d2:81:39:e3:d9:88:cd:bd:d6:92:20:c0:
ce:37:d5:8c:73:3e:9b:7c:eb:9a:a9:78:3d:5d:08:69:f1:2c:
7a:71:1b:c5:e9:74:86:b6:64:e1:13:87:bb:0d:ae:98:11:ca:
69:da:7c:33:e0:3c:e6:b9:5f:d0:28:3e:9b:88:d2:69:65:d6:
20:48:26:11:b0:0c:cc:45:9c:9b:16:1e:a2:9b:62:14:0d:6e:
e2:61:a8:88:f8:c9:48:c7:71:8f:4e:f6:86:9e:d4:4d:10:8e:
cf:5f:a9:06:d2:8a:7e:ce:2d:51:8d:ca:41:75:81:c6:dd:0e:
c7:c6:a4:4b:19:c5:30:d9:a6:0c:9c:23:97:ad:0e:7f:1b:a1:
e0:ca:1a:f4:4b:79:c7:0e:dd:96:47:08:a4:54:4f:1f:8b:29:
fe:b5:2d:a0:3e:80:01:f0:df:dd:e5:b2:e2:0e:e5:f8:cb:b6:
8d:1a:71:ff:2d:5d:32:85:ca:3e:25:a9:46:68:00:51:1b:09:
ac:89:5f:07:ea:1a:96:30:7e:22:ae:ce:8c:6d:25:cd:d5:35:
55:0e:45:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:35:49 2026 by rpki-client