Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
File: 3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft (raw, json)
Hash identifier: W6dTLhKd5cae5a9pReFX8bBEdyVKwIUGFI51ITTf0Wg=
Subject key identifier: 45:BB:02:A9:22:46:7D:F6:4F:08:ED:8F:48:19:BE:19:10:33:F3:3D
Authority key identifier: DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
Certificate issuer: /CN=de3d81211f492edf029a22cc66c20a3b94583590
Certificate serial: 01A0D048ADD04EC466499B6B3A511B67DCF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
Manifest number: 1328
Signing time: Wed 23 Sep 2026 22:00:18 +0000
Manifest this update: Wed 23 Sep 2026 22:00:18 +0000
Manifest next update: Thu 24 Sep 2026 22:00:18 +0000
Files and hashes: 1: 3egON2jf6e6LPs4tP2ayfLDDjko.roa (hash: FPeRmXox6jx7zN8CEWYBuSRVJ47FX97vZNIl6GKWp5k=)
2: 3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl (hash: ZKyqMyHtRAwJ7q0T9gx2aDdlUy9axmmD/H0i/IqXwtw=)
3: mvCEO_UcfF7FkrN-g_zfUazRAdY.roa (hash: 60BBAVa3nyV59ILHyxDNVmnRbsZGSR5/5E7St8ZMJAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 22:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:48:ad:d0:4e:c4:66:49:9b:6b:3a:51:1b:67:dc:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de3d81211f492edf029a22cc66c20a3b94583590
Validity
Not Before: Sep 23 22:00:18 2026 GMT
Not After : Sep 24 22:00:18 2026 GMT
Subject: CN=45bb02a922467df64f08ed8f4819be191033f33d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ef:b0:18:ab:8e:89:5b:b5:5c:52:2b:b7:93:
1a:e0:5b:5a:c3:de:16:03:71:14:27:71:75:ad:8e:
15:3d:bc:f9:99:dc:a0:5a:ef:ae:55:c4:e9:8c:85:
31:76:17:6b:c2:0d:a9:bc:b8:d6:d7:3a:30:2b:34:
b4:86:a5:e9:66:23:d4:16:2e:95:70:c5:5a:01:e1:
cf:cf:a0:ee:45:6c:14:cb:66:72:b6:95:55:2a:56:
aa:a4:14:54:ce:00:29:19:6c:d9:ef:a5:39:cb:c4:
8e:6f:d0:e1:8e:9c:a2:00:41:59:c0:34:8d:9b:c7:
57:d3:6c:fa:4e:37:b6:45:f2:bb:9b:b0:10:49:57:
2a:83:b7:bd:0e:5f:8c:a8:14:e8:66:08:81:15:3b:
72:31:1e:84:58:c2:7b:a0:57:81:3a:f8:ec:8d:d7:
d4:21:c0:29:93:45:7c:15:7e:6b:9b:ea:7c:ee:44:
d3:a5:95:b2:37:17:40:fa:8d:57:58:6d:cd:1a:8d:
1a:00:34:e3:3c:25:eb:2e:af:4f:fb:0c:ed:b8:c0:
5a:27:07:37:fb:76:3b:1c:3e:67:1f:67:84:e8:80:
8b:c0:97:b3:44:65:02:f2:27:36:1e:f6:10:dd:d7:
fe:16:24:9a:83:12:9c:b8:d3:bc:b8:03:0e:68:11:
68:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:BB:02:A9:22:46:7D:F6:4F:08:ED:8F:48:19:BE:19:10:33:F3:3D
X509v3 Authority Key Identifier:
keyid:DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:8c:6c:68:99:d4:04:e9:4e:70:bb:c2:a5:7d:c7:52:86:46:
5b:fb:ca:30:c6:84:ae:5d:3d:9b:34:b4:6b:a2:7a:69:69:3e:
86:82:5d:c6:79:49:e7:56:cd:ea:b4:ea:fd:bb:20:0b:fe:d0:
c5:ff:10:d4:19:e4:23:65:ea:32:90:cf:8e:e2:01:b1:d8:5c:
82:a5:d4:18:9b:38:f5:73:0a:2f:12:54:8c:c2:c8:72:a6:ac:
1c:40:1f:b4:22:56:6c:2a:fb:31:54:c3:73:85:e2:e5:89:16:
52:fa:81:2e:75:d1:d9:f5:43:4c:59:b7:64:84:b4:e4:36:04:
5b:78:6d:9e:f8:6d:bf:a7:9d:e4:d7:6e:46:85:7d:54:7b:0b:
0e:16:ab:95:b1:28:45:ca:0b:55:0d:d3:79:1e:4f:29:a9:d5:
d5:16:d2:b9:fb:44:b3:73:f8:ee:8a:c7:5e:fd:e5:74:b6:13:
44:66:13:b6:2d:37:44:aa:6c:1b:e2:df:e7:e0:59:8a:7c:54:
81:9a:79:85:f3:d7:40:53:6a:03:2e:c8:62:22:31:43:9f:0e:
92:3a:f1:b3:67:df:58:95:e8:84:1c:bc:69:10:26:05:cd:30:
65:cd:66:2a:13:77:29:d4:93:9a:77:2e:0b:64:5b:be:a4:6f:
5a:54:2b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:33:29 2026 by rpki-client