Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
File: 3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft (raw, json)
Hash identifier: s0Uq+eG0nxwKS60NJvDpiSmcmRtyrbzi9OcYbU7ExaA=
Subject key identifier: 8D:53:41:1F:56:11:76:9C:4A:6E:B6:AD:20:3E:29:E4:17:3F:FB:8E
Authority key identifier: DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
Certificate issuer: /CN=de3d81211f492edf029a22cc66c20a3b94583590
Certificate serial: 019A22C0B4BB7999C446EADFEA6A6EB23F05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
Manifest number: 0FB2
Signing time: Sun 26 Oct 2025 23:00:45 +0000
Manifest this update: Sun 26 Oct 2025 23:00:45 +0000
Manifest next update: Mon 27 Oct 2025 23:00:45 +0000
Files and hashes: 1: 3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl (hash: SIB8qbMduYsdwB9WzCSdvTMf/vdw3dzjkusUHf400jk=)
2: fUsIKiUBSF-4suxe2Rd_oxkjZw4.roa (hash: le+dLHnCy+Cz7KtAkD9h+I9evtnw4iklRaF6GSYCuDI=)
3: zjT9E01ejzN9o9WTP5eEJ7zrKQg.roa (hash: J1U+yahxYD0pmAirQjo+cOhpxuPTsvVXdeiXTgQsbo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:c0:b4:bb:79:99:c4:46:ea:df:ea:6a:6e:b2:3f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de3d81211f492edf029a22cc66c20a3b94583590
Validity
Not Before: Oct 26 23:00:45 2025 GMT
Not After : Oct 27 23:00:45 2025 GMT
Subject: CN=8d53411f5611769c4a6eb6ad203e29e4173ffb8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a9:0b:8f:58:89:bc:6a:fe:b6:69:25:80:59:
ea:5c:4b:75:cd:96:9e:eb:f2:34:50:ec:72:e5:c3:
5b:3f:f0:22:ce:a5:a1:34:bf:7f:74:43:ea:79:6d:
cc:45:27:55:6b:50:8d:1a:9e:2f:08:9f:28:cd:95:
a8:b1:e6:cc:11:31:fc:03:14:c7:98:ea:6e:ef:14:
ed:77:8b:b0:ed:0a:19:5c:0e:ee:1a:76:95:dc:2f:
dd:1c:36:a2:3c:c1:9b:04:b4:19:0c:2b:b2:2c:d3:
c0:99:d3:db:4d:e0:c6:e3:16:50:0d:79:72:a9:04:
fb:b1:cb:d5:e3:52:ce:bd:85:96:46:0b:00:fc:10:
51:f5:f3:37:1a:b7:6f:7d:bd:de:d4:c5:84:53:9d:
3f:9b:8d:1d:c7:42:69:48:8c:72:a7:da:6b:3f:59:
20:3c:21:b9:2e:95:9a:28:91:14:33:74:93:8e:ff:
56:89:d1:03:51:38:4c:db:3f:f3:9d:dc:f0:63:0e:
68:b3:44:e0:6a:03:a1:c0:c5:5e:57:cf:68:ff:e6:
9a:68:98:07:67:bd:0a:93:3f:58:1f:96:7b:33:88:
40:80:b6:f8:24:55:3d:32:90:38:0f:a8:99:d9:22:
3a:1b:96:5d:24:6d:ff:1d:ed:65:b4:03:f8:02:18:
8e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:53:41:1F:56:11:76:9C:4A:6E:B6:AD:20:3E:29:E4:17:3F:FB:8E
X509v3 Authority Key Identifier:
keyid:DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:22:07:0f:33:0a:ae:00:07:2e:d5:74:b5:f1:6d:44:72:1d:
b1:ec:ba:ec:db:a4:10:91:72:4c:2d:2f:96:42:f2:5d:c3:f9:
cb:4c:44:73:d3:36:fc:ad:a2:a4:63:b2:71:7d:6a:39:a9:55:
09:d6:60:43:06:68:7b:6e:4d:08:ef:a7:16:4e:b6:2a:2e:56:
50:92:fd:e1:7d:e6:aa:f7:70:e9:53:49:86:ca:25:96:9e:cc:
97:d5:ee:51:60:95:58:00:db:ab:5d:46:f8:70:46:12:76:1b:
b4:c2:74:46:ec:dc:c4:d2:92:7c:4e:7d:2a:fc:9b:43:44:3d:
c8:a8:20:8f:5c:0e:dd:da:b4:15:20:a2:1c:be:8a:53:2a:f7:
a4:d7:0a:cf:14:8a:ba:33:47:30:2c:0d:97:e8:2e:76:4c:c1:
88:e7:4b:f7:7c:3e:35:4d:51:09:28:ad:d2:d4:da:ee:db:8d:
86:da:5b:4f:77:a5:42:42:51:6e:d8:6e:07:d2:cd:cf:51:85:
95:e3:3f:65:68:ea:6c:d4:45:49:5c:a2:32:5c:2d:a2:c6:63:
23:f3:c0:4b:35:10:cc:90:fc:63:6d:90:39:3e:ac:e7:b7:a1:
7d:8d:f6:e3:59:43:cf:92:81:84:dc:9b:f1:ab:9e:f2:be:a1:
11:2a:66:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoiwLS7eZnERurf6mpusj8FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlM2Q4MTIxMWY0OTJlZGYwMjlhMjJjYzY2YzIwYTNiOTQ1
ODM1OTAwHhcNMjUxMDI2MjMwMDQ1WhcNMjUxMDI3MjMwMDQ1WjAzMTEwLwYDVQQD
Eyg4ZDUzNDExZjU2MTE3NjljNGE2ZWI2YWQyMDNlMjllNDE3M2ZmYjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqkLj1iJvGr+tmklgFnqXEt1zZae
6/I0UOxy5cNbP/AizqWhNL9/dEPqeW3MRSdVa1CNGp4vCJ8ozZWosebMETH8AxTH
mOpu7xTtd4uw7QoZXA7uGnaV3C/dHDaiPMGbBLQZDCuyLNPAmdPbTeDG4xZQDXly
qQT7scvV41LOvYWWRgsA/BBR9fM3Grdvfb3e1MWEU50/m40dx0JpSIxyp9prP1kg
PCG5LpWaKJEUM3STjv9WidEDUThM2z/zndzwYw5os0TgagOhwMVeV89o/+aaaJgH
Z70Kkz9YH5Z7M4hAgLb4JFU9MpA4D6iZ2SI6G5ZdJG3/He1ltAP4AhiOiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI1TQR9WEXacSm62rSA+KeQXP/uOMB8GA1UdIwQY
MBaAFN49gSEfSS7fApoizGbCCjuUWDWQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2oyQklSOUpMdDhDbWlMTVpzSUtPNVJZTlpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8yNmZjYmEtNzhhZS00ZDM4LWFjYWYt
MzE0MjhiMDUwZmQ3LzEvM2oyQklSOUpMdDhDbWlMTVpzSUtPNVJZTlpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8yNmZjYmEtNzhhZS00ZDM4LWFjYWYtMzE0MjhiMDUwZmQ3
LzEvM2oyQklSOUpMdDhDbWlMTVpzSUtPNVJZTlpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4iIHDzMK
rgAHLtV0tfFtRHIdsey67NukEJFyTC0vlkLyXcP5y0xEc9M2/K2ipGOycX1qOalV
CdZgQwZoe25NCO+nFk62Ki5WUJL94X3mqvdw6VNJhsollp7Ml9XuUWCVWADbq11G
+HBGEnYbtMJ0RuzcxNKSfE59KvybQ0Q9yKggj1wO3dq0FSCiHL6KUyr3pNcKzxSK
ujNHMCwNl+gudkzBiOdL93w+NU1RCSit0tTa7tuNhtpbT3elQkJRbthuB9LNz1GF
leM/ZWjqbNRFSVyiMlwtosZjI/PASzUQzJD8Y22QOT6s57ehfY3241lDz5KBhNyb
8aue8r6hESpm5g==
-----END CERTIFICATE-----
Generated at Mon Oct 27 02:08:53 2025 by rpki-client