Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
File: 3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft (raw, json)
Hash identifier: Sj7qXlvZvzu1GVrNaB/FhhNxeAweL5jRDFVK4BPqWDw=
Subject key identifier: 99:9C:C3:9C:D6:5B:BF:A4:04:B4:37:BF:94:53:B1:71:37:9C:E0:67
Authority key identifier: DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
Certificate issuer: /CN=de3d81211f492edf029a22cc66c20a3b94583590
Certificate serial: 019D99994E931F81712DB6163D8E7E8067A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
Manifest number: 117E
Signing time: Fri 17 Apr 2026 04:00:54 +0000
Manifest this update: Fri 17 Apr 2026 04:00:54 +0000
Manifest next update: Sat 18 Apr 2026 04:00:54 +0000
Files and hashes: 1: 3egON2jf6e6LPs4tP2ayfLDDjko.roa (hash: FPeRmXox6jx7zN8CEWYBuSRVJ47FX97vZNIl6GKWp5k=)
2: 3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl (hash: 1yWwrQKc7Z80HrrX+WnqNZ1ji2159Cq1L6tLc7kJUTs=)
3: mvCEO_UcfF7FkrN-g_zfUazRAdY.roa (hash: 60BBAVa3nyV59ILHyxDNVmnRbsZGSR5/5E7St8ZMJAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:4e:93:1f:81:71:2d:b6:16:3d:8e:7e:80:67:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de3d81211f492edf029a22cc66c20a3b94583590
Validity
Not Before: Apr 17 04:00:54 2026 GMT
Not After : Apr 18 04:00:54 2026 GMT
Subject: CN=999cc39cd65bbfa404b437bf9453b171379ce067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c7:2a:6a:5a:2a:94:31:6e:80:4c:29:ff:44:
63:96:d2:e3:fc:18:d5:e0:81:8c:04:cd:16:cc:9a:
d4:50:1f:34:fe:1d:1b:af:3a:6e:0d:30:23:26:a3:
51:7f:f4:0b:8d:ee:75:84:a4:83:38:ed:77:4a:ec:
7c:6e:41:da:f0:6a:16:ef:35:d3:15:40:cc:e4:6b:
9d:50:11:f5:d5:05:87:c6:47:4d:c6:9d:7b:63:aa:
c0:ae:51:e9:68:fa:52:c5:05:a9:ff:ab:8b:0f:a1:
32:2d:5d:32:6a:84:40:2b:0d:9b:89:33:2b:fc:9c:
2b:a5:42:02:01:70:20:55:74:f6:09:49:69:5d:9f:
5b:f3:2a:74:42:75:1b:98:24:d6:88:73:b6:25:0e:
d8:38:25:95:15:39:1a:8c:48:c0:ee:97:6a:d9:ad:
2a:c3:62:73:87:3f:22:3a:be:9f:64:08:bb:fe:0a:
19:24:42:ff:2b:a2:ea:f6:34:9d:14:9d:a4:14:c5:
1e:53:2a:36:bf:69:5c:13:e6:9e:73:27:7e:21:65:
16:35:fa:8a:b8:1d:55:09:8e:ef:df:b7:db:a8:3a:
8e:9c:2c:9d:24:c4:a8:c8:c4:d2:4d:fb:9b:84:06:
6b:a2:66:a5:4b:e3:09:f3:fc:2a:4a:74:82:88:be:
98:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:9C:C3:9C:D6:5B:BF:A4:04:B4:37:BF:94:53:B1:71:37:9C:E0:67
X509v3 Authority Key Identifier:
keyid:DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:83:d5:f4:f0:98:cc:a7:e2:03:df:b4:1f:54:f4:cc:8f:a6:
f4:77:fe:ba:e6:4a:c4:c0:47:ac:a5:70:7c:bf:64:23:f8:af:
ff:d8:a2:eb:e8:37:66:1a:9e:12:5b:83:70:89:07:a2:31:d7:
38:66:2d:46:6c:e0:d3:3e:b6:78:5b:d5:e5:17:64:8e:22:91:
d7:98:30:22:bc:44:b3:94:e9:98:c0:3d:08:2c:4a:47:b1:53:
f0:f3:a1:94:01:97:b3:95:72:9e:66:59:68:00:17:16:3e:e0:
db:6d:d4:00:51:76:1f:33:f2:59:51:a2:d1:84:79:24:e3:ee:
52:47:ae:03:61:ac:d2:52:13:b6:62:dd:5e:ea:4b:08:e3:70:
91:60:e6:2d:50:ff:b6:40:89:1b:d6:af:91:30:b4:fa:3d:14:
64:d5:c1:fe:61:94:5f:4b:08:b5:da:a7:47:dc:b6:c9:50:0c:
2e:94:94:2c:47:bb:73:b9:7c:89:b1:f8:0c:c5:84:c4:61:c7:
2d:fb:c5:cc:32:8a:44:70:25:2d:42:be:d1:88:d8:b6:2f:96:
89:a8:1e:25:12:84:d5:a1:57:1e:b8:72:87:43:78:14:c2:dc:
0f:c6:1e:63:62:71:9e:58:67:79:5b:90:3b:64:15:de:3c:06:
62:88:99:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:35:15 2026 by rpki-client