Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
File: 3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft (raw, json)
Hash identifier: t7shWN8b7BgVwBxAHUss8V1TSTI3TiHlKPPVL83ydk4=
Subject key identifier: 60:5E:0F:21:D6:E4:08:E3:D1:84:80:0F:73:CD:2A:76:54:9C:8D:76
Authority key identifier: DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
Certificate issuer: /CN=de3d81211f492edf029a22cc66c20a3b94583590
Certificate serial: 019F8FB5B7CD323EF4D93BEC7055E0E6FA25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
Manifest number: 1282
Signing time: Thu 23 Jul 2026 16:01:18 +0000
Manifest this update: Thu 23 Jul 2026 16:01:18 +0000
Manifest next update: Fri 24 Jul 2026 16:01:18 +0000
Files and hashes: 1: 3egON2jf6e6LPs4tP2ayfLDDjko.roa (hash: FPeRmXox6jx7zN8CEWYBuSRVJ47FX97vZNIl6GKWp5k=)
2: 3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl (hash: cR3zV7kJHujedzAHaVq0jTT1wWnG+p5mTHiq4ZhS47E=)
3: mvCEO_UcfF7FkrN-g_zfUazRAdY.roa (hash: 60BBAVa3nyV59ILHyxDNVmnRbsZGSR5/5E7St8ZMJAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:b7:cd:32:3e:f4:d9:3b:ec:70:55:e0:e6:fa:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de3d81211f492edf029a22cc66c20a3b94583590
Validity
Not Before: Jul 23 16:01:18 2026 GMT
Not After : Jul 24 16:01:18 2026 GMT
Subject: CN=605e0f21d6e408e3d184800f73cd2a76549c8d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c7:f4:7a:0d:df:27:4f:75:ab:78:6c:6e:1b:
37:5a:d7:07:ed:1f:27:1d:07:9c:d4:9a:a9:57:22:
3b:45:1e:b0:e1:b8:b3:0f:0d:f0:e2:6a:37:55:1c:
4b:28:cf:54:ce:24:40:d8:e0:08:33:1d:c0:a8:c2:
cd:bc:ff:03:14:76:27:9d:67:37:c2:5e:e3:f6:05:
e7:d2:d6:9a:5b:72:5a:18:96:09:e1:1a:2a:da:2f:
c7:ba:34:fb:73:9f:4c:29:0b:43:8a:09:2b:b6:b0:
82:30:cb:70:fe:5e:c6:6b:e8:bf:af:cb:20:b1:fe:
e9:63:4a:fb:c7:a0:6c:83:73:2c:ac:f9:61:97:dd:
bc:4f:6c:1b:c3:f6:16:b4:a3:6d:2c:8c:86:ab:45:
02:96:fb:36:3b:df:63:f6:ba:77:04:43:46:fd:32:
4d:77:6e:48:93:1c:ea:19:db:9f:a9:26:62:84:e5:
c3:e1:e5:b0:50:fc:b1:90:1f:98:87:15:9f:5a:c8:
d5:b7:bb:4f:80:13:9b:e2:6a:17:fc:20:54:52:0e:
3c:63:c7:13:4a:31:b1:9e:9c:4b:4b:4b:0c:59:ad:
b0:b0:76:66:c8:fb:8a:82:9a:50:02:ca:bd:05:70:
d7:26:1c:83:4f:a9:d5:eb:cb:2b:5b:66:a6:96:61:
4d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5E:0F:21:D6:E4:08:E3:D1:84:80:0F:73:CD:2A:76:54:9C:8D:76
X509v3 Authority Key Identifier:
keyid:DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:b5:5b:6b:04:8f:1f:55:fd:29:e5:8f:43:93:dc:d6:90:02:
01:49:33:aa:63:b1:95:06:30:bd:8d:dc:81:b2:c8:98:82:95:
1a:89:0b:80:6d:86:f0:13:16:f2:f7:ef:10:7e:c5:e0:e1:2c:
51:eb:cf:12:10:f7:76:01:f9:09:79:3e:aa:c1:3d:69:5d:53:
d4:e9:f8:f0:d0:4a:35:8d:bd:3c:8c:64:24:21:0d:f4:eb:f9:
2a:47:9c:66:b9:b5:70:84:a4:09:63:2d:8f:0c:7a:c4:93:30:
22:91:7e:16:3a:8f:5a:98:ef:57:ec:7c:04:73:ae:f8:72:12:
82:90:03:39:0f:8c:43:a4:1c:37:b3:66:37:e8:29:e6:b6:26:
53:cc:0a:49:28:14:ec:ff:4e:db:92:f5:c1:ee:29:b3:fc:bd:
07:0e:74:b4:ba:82:c1:26:58:ca:03:1d:29:76:43:9f:d1:61:
7e:2e:2d:35:87:6c:d4:87:d3:06:7c:51:d0:ec:1f:54:d8:3f:
0d:b3:a9:8e:a6:41:88:cc:11:e2:93:8b:e7:3d:69:2b:f3:59:
c2:6f:ae:26:1a:c4:6a:78:8c:46:39:bc:ac:05:0f:6a:3e:08:
84:5d:b9:4a:2c:5e:be:dd:28:29:97:97:0f:39:54:90:f0:ae:
0e:49:e3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:19:04 2026 by rpki-client