Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
File: 3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft (raw, json)
Hash identifier: EzMUqmaAuFqa49xSa8h+w/KW2FkVghP/yz3oO4LUNFM=
Subject key identifier: 3F:A8:CB:2B:30:23:89:06:CF:8D:5B:F1:A8:BC:13:FE:C2:0D:EA:FF
Authority key identifier: DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
Certificate issuer: /CN=de3d81211f492edf029a22cc66c20a3b94583590
Certificate serial: 019A4F2B3371A0B0074D70E0E736A2F01B4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
Manifest number: 0FC9
Signing time: Tue 04 Nov 2025 14:00:22 +0000
Manifest this update: Tue 04 Nov 2025 14:00:22 +0000
Manifest next update: Wed 05 Nov 2025 14:00:22 +0000
Files and hashes: 1: 3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl (hash: C8s9IYWZ0Hwe+BwmAvTCmkrt9znl46Ga3sX0kq9SME0=)
2: fUsIKiUBSF-4suxe2Rd_oxkjZw4.roa (hash: le+dLHnCy+Cz7KtAkD9h+I9evtnw4iklRaF6GSYCuDI=)
3: zjT9E01ejzN9o9WTP5eEJ7zrKQg.roa (hash: J1U+yahxYD0pmAirQjo+cOhpxuPTsvVXdeiXTgQsbo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:33:71:a0:b0:07:4d:70:e0:e7:36:a2:f0:1b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de3d81211f492edf029a22cc66c20a3b94583590
Validity
Not Before: Nov 4 14:00:22 2025 GMT
Not After : Nov 5 14:00:22 2025 GMT
Subject: CN=3fa8cb2b30238906cf8d5bf1a8bc13fec20deaff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:eb:7e:bb:07:91:ae:ce:7b:2a:e0:f5:ed:cb:
77:46:23:d5:3b:bd:d7:43:f6:8d:ef:4e:df:f4:7b:
60:d4:f9:36:1d:7c:41:2d:ea:f3:18:65:e3:f5:94:
3f:e3:3e:c7:79:46:eb:aa:bc:bc:7a:1b:25:60:20:
05:c9:5a:46:3e:1d:76:0f:6d:ed:4d:52:85:8a:9b:
98:52:11:85:87:e4:b6:09:65:8b:10:0d:ab:8c:c1:
88:d5:c3:2f:f1:26:de:50:bb:a0:c8:51:27:35:81:
7e:e5:a3:9a:b4:c7:31:2f:70:b0:f1:41:15:dc:53:
48:f8:44:83:72:7c:70:2d:0c:f3:46:be:14:fc:8a:
8e:6e:13:b1:af:8e:5e:07:57:9b:b7:2b:f9:0b:98:
56:cb:ed:5f:6d:e8:67:af:19:4a:da:ff:00:08:03:
a3:97:86:8a:4c:65:87:51:47:06:96:84:ee:7a:81:
cf:fd:da:b5:df:db:59:1d:61:58:55:ef:8e:60:e0:
30:e6:fe:fe:f9:46:d6:71:f8:c7:54:00:ec:88:a8:
15:d5:fb:24:59:24:00:61:bf:f1:c6:49:b0:a4:7f:
c5:7f:ba:a3:4b:e8:75:09:28:52:a9:89:95:37:0f:
1c:60:a4:8d:e2:c3:9b:f0:84:8c:a5:14:47:88:e8:
9e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A8:CB:2B:30:23:89:06:CF:8D:5B:F1:A8:BC:13:FE:C2:0D:EA:FF
X509v3 Authority Key Identifier:
keyid:DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:15:92:20:d3:60:44:68:1b:19:3e:d0:80:56:a5:fe:63:da:
0a:31:db:e5:29:1e:77:c0:a7:cb:e0:2f:56:60:80:71:a6:e3:
d3:77:20:1f:f9:ec:86:61:dc:a5:81:28:1b:7b:2d:c4:5a:bb:
2d:3d:08:9a:fb:19:5d:f3:5c:b7:bf:33:a7:18:0c:9d:ce:6b:
94:2e:d3:b6:f3:a7:1c:2c:d4:38:ee:5a:af:63:31:10:04:6e:
52:47:dc:3b:95:e6:48:3e:d5:08:57:0e:4e:38:9a:1b:5c:45:
c7:54:78:42:a4:59:de:b9:24:c9:27:53:27:a2:10:55:21:1f:
22:0d:ca:41:b0:55:8d:83:da:b5:2f:eb:7f:a3:88:0f:39:9d:
63:4b:de:0a:7d:7d:6f:ea:ca:15:32:99:84:47:b0:d5:5e:d9:
10:ad:23:f1:6e:a7:40:39:27:23:9d:14:27:c6:6d:f3:90:8f:
f5:fe:59:19:ef:fa:19:ff:55:73:64:64:f7:21:9b:f8:b8:3e:
dd:9c:74:a6:b2:98:f5:91:ed:4f:98:6c:42:5f:4c:9f:7c:5f:
40:1a:5a:be:1d:39:56:60:2d:24:ba:2e:93:87:d9:21:f0:d0:
6c:6f:f2:23:13:66:e5:6c:9a:d9:3d:0f:e8:0d:16:aa:ac:a4:
4a:6f:3c:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPKzNxoLAHTXDg5zai8BtPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlM2Q4MTIxMWY0OTJlZGYwMjlhMjJjYzY2YzIwYTNiOTQ1
ODM1OTAwHhcNMjUxMTA0MTQwMDIyWhcNMjUxMTA1MTQwMDIyWjAzMTEwLwYDVQQD
EygzZmE4Y2IyYjMwMjM4OTA2Y2Y4ZDViZjFhOGJjMTNmZWMyMGRlYWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Ot+uweRrs57KuD17ct3RiPVO73X
Q/aN707f9Htg1Pk2HXxBLerzGGXj9ZQ/4z7HeUbrqry8ehslYCAFyVpGPh12D23t
TVKFipuYUhGFh+S2CWWLEA2rjMGI1cMv8SbeULugyFEnNYF+5aOatMcxL3Cw8UEV
3FNI+ESDcnxwLQzzRr4U/IqObhOxr45eB1ebtyv5C5hWy+1fbehnrxlK2v8ACAOj
l4aKTGWHUUcGloTueoHP/dq139tZHWFYVe+OYOAw5v7++UbWcfjHVADsiKgV1fsk
WSQAYb/xxkmwpH/Ff7qjS+h1CShSqYmVNw8cYKSN4sOb8ISMpRRHiOieEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD+oyyswI4kGz41b8ai8E/7CDer/MB8GA1UdIwQY
MBaAFN49gSEfSS7fApoizGbCCjuUWDWQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2oyQklSOUpMdDhDbWlMTVpzSUtPNVJZTlpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8yNmZjYmEtNzhhZS00ZDM4LWFjYWYt
MzE0MjhiMDUwZmQ3LzEvM2oyQklSOUpMdDhDbWlMTVpzSUtPNVJZTlpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8yNmZjYmEtNzhhZS00ZDM4LWFjYWYtMzE0MjhiMDUwZmQ3
LzEvM2oyQklSOUpMdDhDbWlMTVpzSUtPNVJZTlpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADBWSINNg
RGgbGT7QgFal/mPaCjHb5Sked8Cny+AvVmCAcabj03cgH/nshmHcpYEoG3stxFq7
LT0ImvsZXfNct78zpxgMnc5rlC7TtvOnHCzUOO5ar2MxEARuUkfcO5XmSD7VCFcO
TjiaG1xFx1R4QqRZ3rkkySdTJ6IQVSEfIg3KQbBVjYPatS/rf6OIDzmdY0veCn19
b+rKFTKZhEew1V7ZEK0j8W6nQDknI50UJ8Zt85CP9f5ZGe/6Gf9Vc2Rk9yGb+Lg+
3Zx0prKY9ZHtT5hsQl9Mn3xfQBpavh05VmAtJLouk4fZIfDQbG/yIxNm5Wya2T0P
6A0WqqykSm88dw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:06:28 2025 by rpki-client