Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
File: 3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft (raw, json)
Hash identifier: UN3E0+PoMsRgjrkLCcSoAT4utPwUboYZkTheHVFWPp8=
Subject key identifier: 2F:C0:88:72:6E:B7:AF:A9:E2:F9:81:DD:41:BC:1B:88:06:A6:44:28
Authority key identifier: DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
Certificate issuer: /CN=de3d81211f492edf029a22cc66c20a3b94583590
Certificate serial: 019D27A8A26D2FDBDC24133CA6FF7573C474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
Manifest number: 1143
Signing time: Thu 26 Mar 2026 01:00:55 +0000
Manifest this update: Thu 26 Mar 2026 01:00:55 +0000
Manifest next update: Fri 27 Mar 2026 01:00:55 +0000
Files and hashes: 1: 3egON2jf6e6LPs4tP2ayfLDDjko.roa (hash: FPeRmXox6jx7zN8CEWYBuSRVJ47FX97vZNIl6GKWp5k=)
2: 3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl (hash: s4UvwZIzTzKCpMo96lNn+e+bq3DAy7RyC6pA3ZMbVgs=)
3: mvCEO_UcfF7FkrN-g_zfUazRAdY.roa (hash: 60BBAVa3nyV59ILHyxDNVmnRbsZGSR5/5E7St8ZMJAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:a2:6d:2f:db:dc:24:13:3c:a6:ff:75:73:c4:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de3d81211f492edf029a22cc66c20a3b94583590
Validity
Not Before: Mar 26 01:00:55 2026 GMT
Not After : Mar 27 01:00:55 2026 GMT
Subject: CN=2fc088726eb7afa9e2f981dd41bc1b8806a64428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:19:fa:0e:93:37:e7:e3:b6:ec:ec:90:42:03:
b1:6c:b1:de:8c:ac:d8:08:c6:fb:1c:b8:2c:35:ec:
54:5e:da:31:5a:51:c0:1c:6b:04:2e:08:3c:05:c0:
b4:f1:5d:bf:ca:b6:0d:5b:12:69:eb:e9:b1:9b:d2:
39:b1:d8:ed:1a:66:73:51:73:d5:1c:da:98:00:8b:
1f:5e:d5:b4:37:79:e3:30:39:eb:0f:af:9e:66:cd:
df:62:ba:31:47:d7:f9:e8:cd:f2:ef:c9:2c:b7:8d:
b2:27:b3:a7:37:83:39:fc:15:15:66:34:e2:c5:1d:
7c:b9:1d:fb:33:dd:05:20:11:d6:dc:10:ae:29:33:
d9:5a:c9:d4:4a:54:8e:7b:72:c3:b9:5a:29:11:4e:
0b:4e:da:6a:59:97:32:fe:58:a4:37:c2:c4:3a:95:
3d:43:4c:86:fa:61:83:e2:e8:44:50:ec:d2:67:c8:
2d:cc:2b:3c:fa:b5:a8:55:da:91:58:3a:0c:21:ae:
e4:90:d7:fc:63:7d:55:5c:bb:0c:46:5e:72:61:ad:
4b:7a:ca:70:9f:bd:0a:8f:3c:0c:f1:40:c5:65:56:
91:cf:f2:38:dd:95:4e:af:5e:cf:2c:28:e1:6d:31:
3d:ca:25:54:e0:be:54:e6:a5:57:bd:74:1b:97:bf:
31:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C0:88:72:6E:B7:AF:A9:E2:F9:81:DD:41:BC:1B:88:06:A6:44:28
X509v3 Authority Key Identifier:
keyid:DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:61:ae:1a:4c:cd:99:03:86:b4:fe:63:23:04:89:4a:ee:22:
a4:3c:09:c8:d3:22:c2:98:15:1f:21:7c:ae:c3:64:f8:4a:d7:
ba:07:99:a3:07:df:3b:9e:c9:3a:28:fb:8d:ed:dc:d6:d0:ba:
39:f4:8f:c9:60:8b:02:e6:ab:94:9c:b4:f6:9e:4a:6b:af:91:
9a:ab:37:e7:7c:94:6d:09:2c:a9:fb:00:11:b2:6e:c8:32:ee:
8b:73:60:54:3c:84:5b:7e:5d:35:35:0c:de:1a:1f:7d:c6:77:
c8:bc:fd:ef:54:d4:7a:2d:78:d9:3c:c8:1e:b9:7d:44:50:ca:
27:6c:ba:e0:ec:30:15:35:c1:b9:96:78:96:9c:ca:2c:f1:55:
17:45:93:b9:05:ec:a7:89:77:12:9c:b3:0c:d1:50:a1:75:c3:
25:e5:6c:c6:66:db:01:3b:3a:44:73:9b:51:5f:96:b3:d7:d6:
85:32:13:21:a3:3d:04:92:6d:5e:60:b4:e6:f0:b0:3b:3b:f8:
bb:b0:35:ea:99:a5:db:9b:f1:5c:59:3c:66:6e:4b:36:c5:46:
cb:99:65:7f:d2:34:35:b0:84:04:ff:eb:0c:93:2c:90:eb:5b:
3f:f5:37:45:02:f8:71:cd:86:79:72:35:74:bb:f8:42:84:3e:
1d:71:41:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:55:41 2026 by rpki-client