Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
File: 3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft (raw, json)
Hash identifier: 8BQGGxI+1oNtnBAjPuy+jTcYUiceMbI/qiwtfOhgKn0=
Subject key identifier: 62:9B:F5:62:55:30:B1:30:F7:E8:FB:0E:9B:CD:09:76:7A:19:EB:E4
Authority key identifier: DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
Certificate issuer: /CN=de3d81211f492edf029a22cc66c20a3b94583590
Certificate serial: 019E303B51F02FAD81E5C97A41730FEA4AED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
Manifest number: 11CC
Signing time: Sat 16 May 2026 10:00:54 +0000
Manifest this update: Sat 16 May 2026 10:00:54 +0000
Manifest next update: Sun 17 May 2026 10:00:54 +0000
Files and hashes: 1: 3egON2jf6e6LPs4tP2ayfLDDjko.roa (hash: FPeRmXox6jx7zN8CEWYBuSRVJ47FX97vZNIl6GKWp5k=)
2: 3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl (hash: 6q/BSNEHFLofggQAxJ2IKm3v00lcDuTgimhEV8laeeU=)
3: mvCEO_UcfF7FkrN-g_zfUazRAdY.roa (hash: 60BBAVa3nyV59ILHyxDNVmnRbsZGSR5/5E7St8ZMJAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:51:f0:2f:ad:81:e5:c9:7a:41:73:0f:ea:4a:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de3d81211f492edf029a22cc66c20a3b94583590
Validity
Not Before: May 16 10:00:54 2026 GMT
Not After : May 17 10:00:54 2026 GMT
Subject: CN=629bf5625530b130f7e8fb0e9bcd09767a19ebe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:92:82:28:20:f7:61:da:70:e9:75:dd:4f:d9:
b6:b1:48:54:b3:dc:69:50:d0:5d:a8:67:06:b9:40:
b5:92:0e:35:70:3a:00:25:ab:30:dd:db:a0:71:2a:
cc:7d:0d:3c:f5:b7:a0:66:c4:8a:42:4c:d7:2a:e4:
9a:73:81:65:ab:20:06:ad:e3:69:4f:c6:4e:2d:59:
2e:cb:24:72:c1:49:b6:23:a1:9c:f2:bd:b4:a7:71:
11:ac:d0:c8:cf:b8:58:95:d1:cb:85:a0:4e:49:71:
5c:07:d8:d8:35:bb:53:6e:53:4a:a9:80:95:1c:50:
61:ac:97:13:85:74:a6:69:34:65:b1:b8:18:fa:18:
c0:7c:26:11:68:9e:42:ee:0c:0f:6f:36:eb:3e:43:
5d:35:3a:27:cd:7b:1c:f3:33:3e:84:f1:19:8c:ab:
c6:a2:de:ae:ed:3b:5c:a2:1b:ed:c3:38:e7:4f:b2:
25:62:fd:d9:df:65:ac:46:fa:ce:dd:c2:e9:7b:24:
23:0f:76:00:09:cd:de:b7:b3:c9:28:48:c6:7f:53:
ea:4b:fe:64:c5:f1:99:d4:a6:7b:b4:f8:f8:24:b2:
4e:5c:a6:bc:70:ae:85:00:1c:65:be:19:a3:8e:b5:
23:55:8c:21:c5:95:06:46:5f:2f:c1:a7:e4:49:53:
6f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:9B:F5:62:55:30:B1:30:F7:E8:FB:0E:9B:CD:09:76:7A:19:EB:E4
X509v3 Authority Key Identifier:
keyid:DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:7c:1f:77:d6:9f:e1:74:b6:18:c2:40:5a:d1:02:9d:37:a9:
2d:fe:9a:55:57:6f:ff:ac:65:64:a7:ed:0f:92:bf:75:7d:11:
d9:81:cf:a1:ee:92:be:ce:37:54:ee:a2:78:c4:1e:cc:aa:71:
93:aa:ba:57:6c:af:41:21:8f:2d:97:55:5e:25:88:25:30:63:
79:44:55:72:f3:fe:c2:39:a5:8c:75:8e:87:16:ea:e8:6c:13:
be:f6:ed:7e:ca:3e:ad:6d:e5:ef:3d:f3:75:15:f8:50:f3:9e:
71:b8:3d:12:e1:74:70:3b:c8:9b:9c:ac:1d:e6:86:31:23:76:
df:51:d9:df:b0:b9:ac:3d:0a:92:4b:e5:5a:3d:f5:ed:0c:51:
80:ef:01:01:45:ac:6c:ce:52:38:7b:81:37:85:0b:b8:aa:e3:
44:c7:d4:e0:36:c6:dc:11:44:2e:1a:e7:ee:cd:34:56:0e:76:
30:2b:1b:0e:94:87:9d:06:d8:6f:4d:dc:31:94:f2:c8:c9:6e:
04:f6:9a:27:a0:65:b9:34:cb:ee:55:3a:5d:b1:a3:05:bb:31:
55:77:12:90:53:ab:06:19:a1:98:37:d7:a2:77:2d:f4:da:11:
57:4a:d8:ff:01:1d:2f:47:ab:35:07:3c:e0:78:82:88:99:e7:
ef:78:fd:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:56 2026 by rpki-client