Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
File: 3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft (raw, json)
Hash identifier: MYsltc510bYohrlXS/hcItU/kom/hbzToA3+mVM42pk=
Subject key identifier: E1:60:70:9B:49:72:3F:D7:D2:B0:AE:AD:D3:C7:B1:79:36:2B:E7:A7
Authority key identifier: DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
Certificate issuer: /CN=de3d81211f492edf029a22cc66c20a3b94583590
Certificate serial: 01A0D8040FBBD38EAB8195F9A3404B9209CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
Manifest number: 132C
Signing time: Fri 25 Sep 2026 10:02:19 +0000
Manifest this update: Fri 25 Sep 2026 10:02:19 +0000
Manifest next update: Sat 26 Sep 2026 10:02:19 +0000
Files and hashes: 1: 3egON2jf6e6LPs4tP2ayfLDDjko.roa (hash: FPeRmXox6jx7zN8CEWYBuSRVJ47FX97vZNIl6GKWp5k=)
2: 3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl (hash: Vdk7UVJfH4liOJWx99a7qXwuQTWamzQduZpWD5+R//k=)
3: mvCEO_UcfF7FkrN-g_zfUazRAdY.roa (hash: 60BBAVa3nyV59ILHyxDNVmnRbsZGSR5/5E7St8ZMJAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 10:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:04:0f:bb:d3:8e:ab:81:95:f9:a3:40:4b:92:09:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de3d81211f492edf029a22cc66c20a3b94583590
Validity
Not Before: Sep 25 10:02:19 2026 GMT
Not After : Sep 26 10:02:19 2026 GMT
Subject: CN=e160709b49723fd7d2b0aeadd3c7b179362be7a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3b:28:88:31:b7:16:6a:80:11:71:34:d2:16:
7b:1d:18:d7:6a:87:ea:61:ad:87:35:49:54:aa:c7:
40:8b:39:60:51:73:9f:60:46:f7:67:c2:c6:c7:8b:
67:5d:1b:06:33:12:39:f0:b0:db:c1:c2:fa:45:97:
45:b7:4c:fc:77:fd:dc:fb:82:6f:80:b1:31:12:9a:
b8:97:14:93:75:45:37:3a:d8:26:08:b0:d4:91:18:
a7:67:c0:95:16:8c:8e:53:0f:58:f9:da:bf:fd:20:
6d:eb:44:6c:de:f2:aa:3f:24:90:af:a5:3f:d3:b4:
0b:21:5a:a5:73:10:00:92:92:4c:d0:ab:40:33:1c:
c5:fe:8d:c5:d7:77:a2:c2:25:7f:c9:59:f6:04:d5:
da:bd:fd:a8:0c:9f:c8:ec:04:5e:63:82:d1:43:72:
c9:1a:19:e5:31:92:b3:e0:aa:fb:9a:75:75:2a:88:
57:43:01:1f:82:81:07:b0:62:ad:91:1b:05:9a:dc:
0e:76:d5:24:8a:e9:7c:57:ce:10:98:f9:8c:16:2c:
56:c0:7f:21:7f:ff:a3:21:fa:90:8d:da:24:50:0b:
c0:d6:13:09:8a:09:6b:f2:0a:13:de:22:8a:c1:24:
21:92:5b:c7:de:69:8f:dc:3b:93:c4:12:1c:74:de:
e4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:60:70:9B:49:72:3F:D7:D2:B0:AE:AD:D3:C7:B1:79:36:2B:E7:A7
X509v3 Authority Key Identifier:
keyid:DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:fc:50:9d:2b:53:63:e9:c3:72:16:25:3d:38:08:e8:b1:07:
a5:1a:6b:41:5b:e0:4f:ba:5c:bf:4d:de:d9:53:57:b7:00:30:
cb:7b:d0:a4:68:90:99:a0:bf:f7:fd:a6:2c:f9:32:e3:e4:6e:
2f:17:8d:0f:0c:75:a2:87:43:e9:c2:ec:68:92:a5:1d:f2:90:
84:18:85:77:7a:06:fd:c5:21:c2:73:e9:53:ec:5a:5f:c4:9a:
b5:3b:bf:62:54:d3:7a:08:38:0b:96:74:db:35:0f:42:2e:1a:
35:c2:c3:f6:33:e1:e9:a1:d2:d7:b2:2e:06:e5:46:8b:bb:2f:
45:4d:08:0e:1f:b4:7b:00:b0:41:66:24:a3:b2:ae:9b:5d:56:
87:16:4c:9e:49:7c:e4:a0:08:5a:b7:a6:69:93:86:53:fb:75:
5c:1e:72:6b:ba:3b:a1:90:80:7a:52:f5:fb:25:f2:7d:11:fc:
7a:ac:99:3b:1f:a1:f3:b4:37:be:03:a9:70:e1:eb:a6:5f:d6:
c3:88:30:1e:1f:f3:ac:de:69:ed:e8:66:8e:77:c2:57:8c:46:
28:c2:ba:e5:82:30:9c:63:3c:f3:72:a8:65:c9:ee:53:e1:75:
db:31:e7:63:c1:5e:b7:78:25:37:6b:42:ed:c4:d3:60:7a:5f:
1e:32:52:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:38:37 2026 by rpki-client