Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
File: 3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft (raw, json)
Hash identifier: U9WwDesr86eC8p28lsf3UpLruu3fTwY5Uslr10xogU8=
Subject key identifier: 87:C9:55:02:ED:B9:AF:41:FE:36:11:99:45:C4:1D:C4:3E:22:9C:75
Authority key identifier: DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
Certificate issuer: /CN=de3d81211f492edf029a22cc66c20a3b94583590
Certificate serial: 01A0D6148FA7979C6C50BC7B8EC1DDE382EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
Manifest number: 132B
Signing time: Fri 25 Sep 2026 01:01:06 +0000
Manifest this update: Fri 25 Sep 2026 01:01:06 +0000
Manifest next update: Sat 26 Sep 2026 01:01:06 +0000
Files and hashes: 1: 3egON2jf6e6LPs4tP2ayfLDDjko.roa (hash: FPeRmXox6jx7zN8CEWYBuSRVJ47FX97vZNIl6GKWp5k=)
2: 3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl (hash: ZdpVmqLC81khG1qLS4nxt4dS4kytQcly3x8k/sqSviQ=)
3: mvCEO_UcfF7FkrN-g_zfUazRAdY.roa (hash: 60BBAVa3nyV59ILHyxDNVmnRbsZGSR5/5E7St8ZMJAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:14:8f:a7:97:9c:6c:50:bc:7b:8e:c1:dd:e3:82:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de3d81211f492edf029a22cc66c20a3b94583590
Validity
Not Before: Sep 25 01:01:06 2026 GMT
Not After : Sep 26 01:01:06 2026 GMT
Subject: CN=87c95502edb9af41fe36119945c41dc43e229c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:eb:04:35:f5:7c:6a:2b:27:4e:a6:f8:4c:0b:
e2:29:7e:0c:92:7b:5f:3b:89:94:f8:16:c1:d6:b6:
be:a9:80:0e:a6:62:df:1e:09:b1:dd:19:ac:9f:3d:
f8:19:96:3f:fe:19:eb:62:90:25:b3:7c:4d:26:f9:
39:ec:6b:40:04:07:8f:c2:7d:c5:df:5e:61:e3:9c:
43:d9:0f:e8:66:5a:46:98:bb:a8:e9:d0:ad:38:31:
ae:80:50:80:b0:c1:4b:fe:ee:f8:73:73:68:d0:2e:
d3:99:f0:af:39:fc:fa:94:7d:03:3b:a9:88:21:dc:
21:72:94:cc:35:6a:9c:c3:2b:af:2b:5e:a0:0d:57:
d3:38:48:79:d0:de:29:51:a0:fb:6a:6e:69:ed:83:
18:96:85:79:41:1f:cf:27:39:1c:d0:54:e3:5c:50:
1e:47:bd:7b:17:2e:14:f4:93:a1:16:01:9a:71:84:
c1:e5:e2:39:33:be:b5:42:0f:51:86:05:51:62:4e:
05:ae:03:43:f3:d9:68:64:b1:85:31:ea:99:9a:0d:
35:4a:29:4f:7d:9f:4e:35:a1:2a:bf:b7:4e:4d:db:
5f:83:9e:64:c1:ca:26:8a:2b:88:94:2d:18:77:3a:
6d:69:87:c9:5c:bc:e1:d9:42:e1:17:33:d6:45:68:
3c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C9:55:02:ED:B9:AF:41:FE:36:11:99:45:C4:1D:C4:3E:22:9C:75
X509v3 Authority Key Identifier:
keyid:DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:13:97:61:d3:af:df:99:7c:2e:f1:b0:37:9d:93:6b:9b:d5:
ba:a8:68:35:64:e8:69:6e:5a:e0:40:dd:b4:b8:4a:7e:73:4a:
8d:af:65:25:3b:56:de:c3:4b:66:85:83:af:10:af:68:a0:b6:
7d:17:70:a4:3f:51:14:ab:7d:75:a4:ad:46:3f:54:e2:42:2f:
12:6b:8f:8a:0a:9a:74:06:f9:a1:ca:f2:e4:3e:af:25:d9:0d:
99:33:9e:cf:7f:b0:ad:74:69:65:1c:56:22:68:5e:c2:4f:89:
73:b5:48:83:04:64:79:a8:ed:93:9b:dd:7e:b8:ab:d0:cb:7e:
08:17:95:72:28:b7:38:22:ff:ac:c9:28:67:91:0e:ae:78:d9:
d4:ec:47:b7:03:38:4b:18:36:f9:16:9a:16:06:db:eb:7c:54:
37:a6:10:85:8f:80:3a:99:16:7f:7d:24:7d:31:6c:97:d9:0e:
5a:c3:19:21:f0:44:c6:6a:7f:bf:c8:39:e1:dd:8e:4a:d3:ff:
bf:f6:a0:dd:7f:dd:e1:aa:17:ef:5c:9d:06:2a:d7:a2:09:f1:
82:9a:b3:15:92:84:46:10:4d:c9:be:85:ff:2c:d6:0f:d5:a0:
d1:c8:64:e0:01:b6:9c:60:70:97:f6:1d:13:f3:1b:9d:ce:56:
b1:79:03:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:33:51 2026 by rpki-client