Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
File: 3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft (raw, json)
Hash identifier: 80bMgVe20C6EpE7Qiv6u82us7CcmfBwYjXizWdtmLnk=
Subject key identifier: 28:A6:7F:76:8A:9A:A4:E4:22:8A:AD:97:EB:73:E8:27:CE:67:78:BA
Authority key identifier: DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
Certificate issuer: /CN=de3d81211f492edf029a22cc66c20a3b94583590
Certificate serial: 019A01EBB3285C331AA1C867320CC98144E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
Manifest number: 0FA1
Signing time: Mon 20 Oct 2025 14:00:15 +0000
Manifest this update: Mon 20 Oct 2025 14:00:15 +0000
Manifest next update: Tue 21 Oct 2025 14:00:15 +0000
Files and hashes: 1: 3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl (hash: 7XhTPP8TQ3oAt/glF1ozF+NIe9nag+P96wYlH88uQgk=)
2: fUsIKiUBSF-4suxe2Rd_oxkjZw4.roa (hash: le+dLHnCy+Cz7KtAkD9h+I9evtnw4iklRaF6GSYCuDI=)
3: zjT9E01ejzN9o9WTP5eEJ7zrKQg.roa (hash: J1U+yahxYD0pmAirQjo+cOhpxuPTsvVXdeiXTgQsbo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:eb:b3:28:5c:33:1a:a1:c8:67:32:0c:c9:81:44:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de3d81211f492edf029a22cc66c20a3b94583590
Validity
Not Before: Oct 20 14:00:15 2025 GMT
Not After : Oct 21 14:00:15 2025 GMT
Subject: CN=28a67f768a9aa4e4228aad97eb73e827ce6778ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c0:de:25:6e:21:e6:ce:b3:bf:78:04:44:47:
a3:4a:3c:67:f3:be:f7:cc:54:16:bb:b0:55:5b:5d:
71:61:e8:db:83:4a:e8:20:67:fb:57:c4:77:88:ee:
85:df:55:f7:75:9b:ea:5d:40:4b:01:53:86:c9:69:
ca:47:ad:a9:6b:6b:81:a0:c4:c4:6e:fd:0d:f1:66:
f7:86:70:f0:07:2d:ff:36:92:1a:95:fb:5f:5b:7e:
77:5f:04:93:db:8d:77:bf:d4:47:16:98:84:97:4b:
60:36:3c:b9:44:84:f1:20:59:ad:cd:43:45:79:f1:
a3:60:3c:fd:83:13:37:8a:13:50:29:87:4a:fa:59:
be:3d:bf:bb:61:83:0a:7f:0c:fd:a7:cc:d2:ce:02:
11:68:5a:a7:78:15:c0:80:e3:8b:22:75:10:99:a2:
3f:5f:2d:1c:21:af:5e:56:db:92:c4:dc:23:3b:30:
94:7d:1b:ae:78:df:c7:47:25:d1:1c:e1:86:e5:2b:
7d:0c:fc:2c:7d:8d:c7:4e:45:1f:44:33:88:60:1d:
62:2d:0e:15:89:73:4a:b8:9f:70:16:4a:a3:69:d6:
df:b9:92:d4:e2:de:7d:97:d2:32:b8:c4:0e:f0:dc:
7b:a6:6e:7d:d0:1a:b1:99:5c:6f:ce:3e:66:2e:b0:
e3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A6:7F:76:8A:9A:A4:E4:22:8A:AD:97:EB:73:E8:27:CE:67:78:BA
X509v3 Authority Key Identifier:
keyid:DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:9d:7f:9c:2e:d9:c9:95:7b:03:f5:93:7b:a4:64:64:60:8e:
89:64:9c:04:04:6f:a1:e0:67:ad:4f:9d:e1:36:3a:d9:79:25:
d6:0a:c6:53:50:e2:cc:60:70:e7:86:50:40:eb:ae:64:b2:ab:
34:8c:ad:86:e7:8e:de:65:ba:78:3c:ab:28:e1:3b:15:e4:d8:
de:9d:6f:e8:8f:f3:32:ee:d5:b5:86:9b:76:3e:0b:2d:70:6c:
69:e8:24:4e:05:58:22:a0:62:d2:26:d3:f5:71:0d:5f:b3:b0:
50:9c:66:50:09:d7:06:06:10:16:44:18:af:63:54:fa:ef:29:
70:e8:05:e0:10:3c:72:7c:47:41:1a:ca:d2:ad:42:08:cc:b8:
c4:03:a3:67:aa:12:60:91:00:9f:dd:7f:af:c3:27:d5:4a:83:
aa:6a:df:c3:91:22:f9:b7:77:3f:94:c2:1a:41:44:00:e2:05:
ac:23:e0:be:d0:23:9d:bc:fb:65:ff:76:1e:33:75:1d:8d:5a:
e3:0e:5f:c1:f1:11:75:6b:6d:35:44:66:d9:04:75:88:be:58:
c5:29:2d:95:10:6f:aa:0f:18:9e:2a:b9:6b:30:d5:32:48:50:
9f:6e:54:9e:10:79:85:1c:de:e2:dc:1d:98:11:38:9c:ef:9c:
17:6d:c2:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoB67MoXDMaochnMgzJgUTnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlM2Q4MTIxMWY0OTJlZGYwMjlhMjJjYzY2YzIwYTNiOTQ1
ODM1OTAwHhcNMjUxMDIwMTQwMDE1WhcNMjUxMDIxMTQwMDE1WjAzMTEwLwYDVQQD
EygyOGE2N2Y3NjhhOWFhNGU0MjI4YWFkOTdlYjczZTgyN2NlNjc3OGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8DeJW4h5s6zv3gEREejSjxn8773
zFQWu7BVW11xYejbg0roIGf7V8R3iO6F31X3dZvqXUBLAVOGyWnKR62pa2uBoMTE
bv0N8Wb3hnDwBy3/NpIalftfW353XwST2413v9RHFpiEl0tgNjy5RITxIFmtzUNF
efGjYDz9gxM3ihNQKYdK+lm+Pb+7YYMKfwz9p8zSzgIRaFqneBXAgOOLInUQmaI/
Xy0cIa9eVtuSxNwjOzCUfRuueN/HRyXRHOGG5St9DPwsfY3HTkUfRDOIYB1iLQ4V
iXNKuJ9wFkqjadbfuZLU4t59l9IyuMQO8Nx7pm590BqxmVxvzj5mLrDjtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCimf3aKmqTkIoqtl+tz6CfOZ3i6MB8GA1UdIwQY
MBaAFN49gSEfSS7fApoizGbCCjuUWDWQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2oyQklSOUpMdDhDbWlMTVpzSUtPNVJZTlpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8yNmZjYmEtNzhhZS00ZDM4LWFjYWYt
MzE0MjhiMDUwZmQ3LzEvM2oyQklSOUpMdDhDbWlMTVpzSUtPNVJZTlpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8yNmZjYmEtNzhhZS00ZDM4LWFjYWYtMzE0MjhiMDUwZmQ3
LzEvM2oyQklSOUpMdDhDbWlMTVpzSUtPNVJZTlpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4Z1/nC7Z
yZV7A/WTe6RkZGCOiWScBARvoeBnrU+d4TY62Xkl1grGU1DizGBw54ZQQOuuZLKr
NIythueO3mW6eDyrKOE7FeTY3p1v6I/zMu7VtYabdj4LLXBsaegkTgVYIqBi0ibT
9XENX7OwUJxmUAnXBgYQFkQYr2NU+u8pcOgF4BA8cnxHQRrK0q1CCMy4xAOjZ6oS
YJEAn91/r8Mn1UqDqmrfw5Ei+bd3P5TCGkFEAOIFrCPgvtAjnbz7Zf92HjN1HY1a
4w5fwfERdWttNURm2QR1iL5YxSktlRBvqg8Yniq5azDVMkhQn25UnhB5hRze4twd
mBE4nO+cF23Cjw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 23:12:04 2025 by rpki-client