
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
File: 3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft (raw, json)
Hash identifier: MnPYoQIOAzvbKlrzNLaMC+Lqc22Sulyta2UPCZiMnGI=
Subject key identifier: 51:00:9E:31:50:1F:F1:8C:46:93:4F:93:54:5D:2E:CC:45:6F:94:BF
Authority key identifier: DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
Certificate issuer: /CN=de3d81211f492edf029a22cc66c20a3b94583590
Certificate serial: 019F17F99F9752EE30076178883C6CCDFE8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
Manifest number: 1244
Signing time: Tue 30 Jun 2026 10:01:02 +0000
Manifest this update: Tue 30 Jun 2026 10:01:02 +0000
Manifest next update: Wed 01 Jul 2026 10:01:02 +0000
Files and hashes: 1: 3egON2jf6e6LPs4tP2ayfLDDjko.roa (hash: FPeRmXox6jx7zN8CEWYBuSRVJ47FX97vZNIl6GKWp5k=)
2: 3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl (hash: eZgQBxrdjrZMpuQwp2MXb7GrIRSuVvldBvp1DLgSla4=)
3: mvCEO_UcfF7FkrN-g_zfUazRAdY.roa (hash: 60BBAVa3nyV59ILHyxDNVmnRbsZGSR5/5E7St8ZMJAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:9f:97:52:ee:30:07:61:78:88:3c:6c:cd:fe:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de3d81211f492edf029a22cc66c20a3b94583590
Validity
Not Before: Jun 30 10:01:02 2026 GMT
Not After : Jul 1 10:01:02 2026 GMT
Subject: CN=51009e31501ff18c46934f93545d2ecc456f94bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:48:49:b3:44:14:16:8d:8f:f4:d5:94:d0:c0:
d0:84:44:df:b8:1d:69:c8:36:9c:82:97:6b:e7:e8:
7d:20:72:65:e9:47:3b:75:c4:e7:79:eb:0b:25:d7:
55:89:4e:c6:f8:30:c0:37:10:0f:82:67:ba:99:a5:
0e:1a:54:2f:72:32:00:8c:eb:f8:04:1f:0d:62:f2:
1e:cb:64:c1:54:52:07:5a:a7:b0:82:c2:b6:6e:37:
83:f1:b3:d3:77:6d:69:b3:2f:87:65:29:4e:51:0e:
a2:c2:44:4e:18:66:3a:48:75:1a:81:2b:45:47:78:
7e:9c:4d:32:a0:10:ce:3c:32:fc:74:31:00:62:c6:
84:cd:47:c1:ff:ff:4a:85:14:31:3f:74:28:9a:61:
76:e5:ea:64:11:16:58:55:76:eb:92:5f:76:08:51:
5e:0b:41:f4:9f:a7:47:f3:cb:32:76:05:a7:e2:aa:
4e:42:44:79:0a:50:4a:25:d6:b0:eb:3d:91:c5:ff:
07:05:de:be:5a:cf:de:93:aa:f1:dc:b6:19:41:93:
fc:6b:32:d9:30:ec:0b:a5:8a:bc:ae:8c:16:b7:20:
40:1c:8c:fc:14:ea:a1:56:84:cb:6e:52:25:4c:58:
a4:96:f6:2f:8c:6a:f4:8a:db:9f:58:20:c5:c8:0b:
32:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:00:9E:31:50:1F:F1:8C:46:93:4F:93:54:5D:2E:CC:45:6F:94:BF
X509v3 Authority Key Identifier:
keyid:DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:24:bc:c4:af:46:f6:6e:74:0d:aa:57:9f:0f:d5:6c:ee:38:
35:10:37:ac:9a:92:b6:1d:e6:d3:21:ff:62:d5:42:7a:59:d7:
e0:01:60:76:41:61:74:a0:d9:3f:f6:35:0f:ab:66:e3:8c:b6:
8d:a8:e7:a7:83:d9:3e:31:2a:77:de:14:51:80:77:10:04:96:
3e:85:55:19:48:e7:ad:b7:8b:61:21:85:a2:fd:93:76:ab:ed:
37:ad:2e:21:5a:d6:43:86:d5:de:02:58:99:5b:9b:85:14:91:
87:7c:06:73:de:c8:12:bb:03:4a:25:9a:b0:3e:33:ce:a8:e3:
88:e1:83:4e:95:db:be:7b:6d:25:44:d7:24:7d:25:b7:3f:36:
bd:06:df:90:c2:f9:10:07:a5:7f:dc:77:c6:a3:18:08:1e:a0:
a7:7e:dd:bf:d8:3d:a8:ef:06:79:fd:e4:b5:04:f7:7b:2a:d7:
ce:b5:b3:e6:ac:51:2d:0d:e5:4b:57:48:d2:a8:3d:a1:c2:58:
75:0c:7a:d7:dc:de:50:58:c7:7a:a7:ff:c6:f9:a1:71:1f:0a:
c4:15:70:6f:01:13:5a:1f:4d:dd:c9:1e:f0:4d:e1:ce:97:cf:
cb:15:2f:13:04:b0:d3:63:b9:a5:21:aa:1c:e7:07:19:8e:f1:
33:28:dd:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:35:38 2026 by rpki-client