Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
File: 3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft (raw, json)
Hash identifier: wdCzVdaBlD0g27Au/k0qY1xEhNZH+QBfYRXLjPiX61o=
Subject key identifier: 70:F9:19:74:8A:36:84:26:6A:41:A7:57:81:80:3B:4A:80:45:78:29
Authority key identifier: DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
Certificate issuer: /CN=de3d81211f492edf029a22cc66c20a3b94583590
Certificate serial: 019CAA21E98CC5A1C9B7558D5DCF8E0CFB7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
Manifest number: 1102
Signing time: Sun 01 Mar 2026 16:01:15 +0000
Manifest this update: Sun 01 Mar 2026 16:01:15 +0000
Manifest next update: Mon 02 Mar 2026 16:01:15 +0000
Files and hashes: 1: 3egON2jf6e6LPs4tP2ayfLDDjko.roa (hash: FPeRmXox6jx7zN8CEWYBuSRVJ47FX97vZNIl6GKWp5k=)
2: 3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl (hash: 8Z4l+anEr3UOtuECEJa9KjmFuYkS/2OSvGEG0drMbsQ=)
3: mvCEO_UcfF7FkrN-g_zfUazRAdY.roa (hash: 60BBAVa3nyV59ILHyxDNVmnRbsZGSR5/5E7St8ZMJAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:e9:8c:c5:a1:c9:b7:55:8d:5d:cf:8e:0c:fb:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de3d81211f492edf029a22cc66c20a3b94583590
Validity
Not Before: Mar 1 16:01:15 2026 GMT
Not After : Mar 2 16:01:15 2026 GMT
Subject: CN=70f919748a3684266a41a75781803b4a80457829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ce:6b:83:29:65:40:df:28:97:66:0b:c0:b1:
35:3f:28:9b:1a:2f:e2:50:a5:18:36:a1:fb:85:da:
05:cc:bc:0e:9e:1b:b1:d7:da:6c:11:be:36:7d:b5:
63:f2:b9:91:40:1f:37:9b:b1:43:81:85:7f:58:fa:
e9:ac:50:a6:bb:66:75:b3:1f:49:5f:18:3e:47:dd:
db:28:78:14:22:ea:a0:7d:a6:5f:00:91:81:64:01:
48:6c:c6:c6:78:93:08:4e:6c:6d:3c:45:d8:42:bb:
4e:72:31:b7:ec:85:81:7b:43:0b:f3:7a:75:cb:91:
34:8e:54:a0:b9:e1:e8:4f:f0:62:a8:cf:11:27:b4:
49:11:7e:c8:56:f0:ef:a5:ed:a2:ec:7f:5b:c9:d4:
5c:8e:e1:40:4b:ce:8c:43:2e:8f:56:de:3f:64:7c:
bb:9f:7e:6e:7e:a7:e8:80:d2:5d:57:64:aa:e5:d1:
f1:61:f3:19:78:3d:65:a3:5d:64:25:82:5e:48:a1:
0e:c1:89:1f:8c:06:b0:86:23:f1:37:c0:79:a3:33:
27:47:93:f9:3b:68:c9:b1:11:8c:0c:5a:a6:a7:82:
96:3e:87:07:2e:d6:1b:8b:5d:87:99:e4:c2:12:20:
76:8f:96:0b:e3:f1:ea:2d:85:c8:be:08:89:c9:19:
43:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F9:19:74:8A:36:84:26:6A:41:A7:57:81:80:3B:4A:80:45:78:29
X509v3 Authority Key Identifier:
keyid:DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:f0:da:5e:a2:4a:cf:d8:de:8c:cc:ca:d2:fe:76:f9:31:dd:
50:c8:79:a0:65:48:f6:20:fc:d0:f3:12:9b:59:a3:1f:a0:94:
f6:56:1e:06:bd:14:1c:bb:90:f7:83:32:1f:bd:06:f1:62:98:
33:2e:48:a9:3d:bc:bd:b9:fe:59:1b:c7:a3:22:5d:35:16:98:
9b:02:d0:5c:5c:2d:9c:3e:35:c9:61:38:a3:e6:87:38:86:d9:
96:97:e5:79:6b:3a:5d:cb:85:c4:e4:67:25:d8:20:e0:8f:ec:
09:e2:7d:74:5f:43:8a:ab:e1:39:62:6f:b3:da:5b:3e:25:39:
8b:92:d4:35:39:78:b2:04:2e:73:3d:77:ad:6e:d4:5c:90:49:
9a:d6:d3:4d:c6:6f:ee:d2:1b:ad:14:75:13:45:0f:a6:ce:97:
ca:ad:a6:1a:91:5e:11:8f:50:1a:1a:af:f3:a2:a0:26:d2:24:
0d:85:c2:47:2f:d3:f6:1e:60:f7:60:83:83:2b:eb:9a:6e:f2:
43:78:19:1d:54:49:4d:18:21:65:90:3b:89:4a:27:48:03:98:
bc:a6:a3:5d:95:9c:e5:a1:e0:09:52:14:9f:12:13:04:d2:96:
80:aa:04:da:71:c6:d4:56:50:88:d4:2e:3b:46:5c:46:b1:d7:
29:ba:28:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqIemMxaHJt1WNXc+ODPt7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlM2Q4MTIxMWY0OTJlZGYwMjlhMjJjYzY2YzIwYTNiOTQ1
ODM1OTAwHhcNMjYwMzAxMTYwMTE1WhcNMjYwMzAyMTYwMTE1WjAzMTEwLwYDVQQD
Eyg3MGY5MTk3NDhhMzY4NDI2NmE0MWE3NTc4MTgwM2I0YTgwNDU3ODI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn85rgyllQN8ol2YLwLE1PyibGi/i
UKUYNqH7hdoFzLwOnhux19psEb42fbVj8rmRQB83m7FDgYV/WPrprFCmu2Z1sx9J
Xxg+R93bKHgUIuqgfaZfAJGBZAFIbMbGeJMITmxtPEXYQrtOcjG37IWBe0ML83p1
y5E0jlSgueHoT/BiqM8RJ7RJEX7IVvDvpe2i7H9bydRcjuFAS86MQy6PVt4/ZHy7
n35ufqfogNJdV2Sq5dHxYfMZeD1lo11kJYJeSKEOwYkfjAawhiPxN8B5ozMnR5P5
O2jJsRGMDFqmp4KWPocHLtYbi12HmeTCEiB2j5YL4/HqLYXIvgiJyRlDUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHD5GXSKNoQmakGnV4GAO0qARXgpMB8GA1UdIwQY
MBaAFN49gSEfSS7fApoizGbCCjuUWDWQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2oyQklSOUpMdDhDbWlMTVpzSUtPNVJZTlpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8yNmZjYmEtNzhhZS00ZDM4LWFjYWYt
MzE0MjhiMDUwZmQ3LzEvM2oyQklSOUpMdDhDbWlMTVpzSUtPNVJZTlpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8yNmZjYmEtNzhhZS00ZDM4LWFjYWYtMzE0MjhiMDUwZmQ3
LzEvM2oyQklSOUpMdDhDbWlMTVpzSUtPNVJZTlpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxvDaXqJK
z9jejMzK0v52+THdUMh5oGVI9iD80PMSm1mjH6CU9lYeBr0UHLuQ94MyH70G8WKY
My5IqT28vbn+WRvHoyJdNRaYmwLQXFwtnD41yWE4o+aHOIbZlpfleWs6XcuFxORn
Jdgg4I/sCeJ9dF9DiqvhOWJvs9pbPiU5i5LUNTl4sgQucz13rW7UXJBJmtbTTcZv
7tIbrRR1E0UPps6Xyq2mGpFeEY9QGhqv86KgJtIkDYXCRy/T9h5g92CDgyvrmm7y
Q3gZHVRJTRghZZA7iUonSAOYvKajXZWc5aHgCVIUnxITBNKWgKoE2nHG1FZQiNQu
O0ZcRrHXKboo5Q==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:24 2026 by rpki-client