Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
File: 3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft (raw, json)
Hash identifier: JWv76wzHGXIfQrCi5qhjFDus9gln14gw/kUWynBgmso=
Subject key identifier: 60:63:DF:91:F0:9E:41:C2:1A:B1:60:CD:0C:DD:36:1A:85:F8:5E:5F
Authority key identifier: DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
Certificate issuer: /CN=de3d81211f492edf029a22cc66c20a3b94583590
Certificate serial: 019FA8D06FA18AB38335978388FD6C8559D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
Manifest number: 128F
Signing time: Tue 28 Jul 2026 13:01:00 +0000
Manifest this update: Tue 28 Jul 2026 13:01:00 +0000
Manifest next update: Wed 29 Jul 2026 13:01:00 +0000
Files and hashes: 1: 3egON2jf6e6LPs4tP2ayfLDDjko.roa (hash: FPeRmXox6jx7zN8CEWYBuSRVJ47FX97vZNIl6GKWp5k=)
2: 3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl (hash: rTCKZM51Uc9T93svA66HychbGHFNWT/Mr+NywO6gqkI=)
3: mvCEO_UcfF7FkrN-g_zfUazRAdY.roa (hash: 60BBAVa3nyV59ILHyxDNVmnRbsZGSR5/5E7St8ZMJAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:6f:a1:8a:b3:83:35:97:83:88:fd:6c:85:59:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de3d81211f492edf029a22cc66c20a3b94583590
Validity
Not Before: Jul 28 13:01:00 2026 GMT
Not After : Jul 29 13:01:00 2026 GMT
Subject: CN=6063df91f09e41c21ab160cd0cdd361a85f85e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:68:7d:e0:2a:0b:f0:ef:86:f2:74:64:b6:15:
50:9b:52:e1:43:cc:34:10:a3:9b:98:3a:cf:11:f6:
ac:70:37:d1:68:c3:9d:8e:e7:67:36:4a:94:1e:f7:
cf:02:e4:7d:37:a8:07:e9:2e:7a:fe:20:d7:c3:8f:
18:eb:57:fd:ba:d1:36:e2:48:75:82:38:cd:7a:2d:
4b:ca:52:eb:35:d0:4e:b7:48:2c:d2:a9:ce:90:c8:
62:40:67:87:4b:d0:0b:92:d2:d0:01:66:f2:73:82:
32:51:a8:71:0c:33:2e:89:5f:15:56:1d:bd:88:a3:
21:09:1b:62:36:8d:17:0d:15:99:50:22:af:1b:40:
51:85:e4:ce:aa:c3:94:65:e1:e6:2c:55:5b:bc:8c:
b5:84:bb:4d:e6:27:9e:48:97:50:68:57:8c:41:12:
11:c4:29:e0:89:eb:eb:b7:73:58:aa:69:4f:ed:6e:
97:d6:c7:88:85:79:e8:f4:ee:1b:06:49:cd:26:19:
53:88:df:fc:4f:d0:ae:27:40:c2:7b:9f:e5:a9:59:
45:99:52:30:e9:a4:46:d2:1f:8b:4d:b7:03:1b:5e:
c1:98:25:1f:1b:9e:b7:c9:71:63:e9:40:43:15:38:
09:d8:7f:22:6e:a5:17:50:1d:9c:70:74:72:a1:7a:
b6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:63:DF:91:F0:9E:41:C2:1A:B1:60:CD:0C:DD:36:1A:85:F8:5E:5F
X509v3 Authority Key Identifier:
keyid:DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:0b:59:9e:61:a1:0f:ab:34:0a:f9:51:cf:61:6f:64:22:d1:
7b:77:38:fc:49:33:b4:e6:9a:35:8f:66:d5:0b:59:c6:09:96:
fb:7c:42:20:24:4a:fb:51:76:f9:b2:4b:5c:e8:16:d2:3b:0f:
1a:1e:1e:02:38:22:64:72:35:0b:50:3f:7d:40:5e:26:22:29:
97:59:df:04:2b:30:0a:5d:22:b3:70:f4:47:59:11:d2:0f:61:
75:0c:b1:0c:0a:8d:c4:bf:0a:c3:d9:f1:4e:8e:2c:1a:8c:0d:
f1:d2:c2:16:5e:7c:e5:f5:2c:24:46:6e:ed:1e:a8:0a:59:f3:
bd:4a:a2:a3:f2:70:98:d9:62:78:67:92:1a:c9:5c:74:5f:c4:
09:11:71:35:43:ae:07:4b:b9:08:cc:cc:a7:da:74:71:07:86:
a9:21:01:73:b6:13:30:6d:eb:9d:6d:c1:6f:d4:78:c8:98:b4:
6e:08:57:b4:b9:58:f3:52:4e:cb:36:ac:eb:06:eb:49:e3:c0:
7c:8a:ca:7b:22:1a:f8:55:51:50:46:c3:53:cc:5c:65:00:86:
bc:0f:a9:f1:97:87:09:90:5d:d2:d8:01:f3:18:cf:d8:07:eb:
ea:25:9b:ad:40:37:0b:77:05:91:2f:62:af:81:2a:b6:8f:ee:
ad:2b:4c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:37:56 2026 by rpki-client