Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
File: 3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft (raw, json)
Hash identifier: QKefDiB7x0TvfOv4GLXs1CXIAgPEVXaGmNwWiyutCgA=
Subject key identifier: A1:7F:10:FA:A8:05:7E:0C:97:8D:71:DD:1B:CB:7C:2F:80:AD:85:91
Authority key identifier: DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
Certificate issuer: /CN=de3d81211f492edf029a22cc66c20a3b94583590
Certificate serial: 019923D5B48FE2CFEC5F03F429DC8F151F97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
Manifest number: 0F2E
Signing time: Sun 07 Sep 2025 11:00:31 +0000
Manifest this update: Sun 07 Sep 2025 11:00:31 +0000
Manifest next update: Mon 08 Sep 2025 11:00:31 +0000
Files and hashes: 1: 3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl (hash: Z8XNUnk+YSO0VKH615dR+bDztQuHvbU7cvM84KANDck=)
2: fUsIKiUBSF-4suxe2Rd_oxkjZw4.roa (hash: le+dLHnCy+Cz7KtAkD9h+I9evtnw4iklRaF6GSYCuDI=)
3: zjT9E01ejzN9o9WTP5eEJ7zrKQg.roa (hash: J1U+yahxYD0pmAirQjo+cOhpxuPTsvVXdeiXTgQsbo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d5:b4:8f:e2:cf:ec:5f:03:f4:29:dc:8f:15:1f:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de3d81211f492edf029a22cc66c20a3b94583590
Validity
Not Before: Sep 7 11:00:31 2025 GMT
Not After : Sep 8 11:00:31 2025 GMT
Subject: CN=a17f10faa8057e0c978d71dd1bcb7c2f80ad8591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:90:d1:70:b8:23:f8:ea:b8:4c:3e:c6:f9:68:
f1:87:6e:5d:ef:d6:50:51:4f:6f:8a:34:83:54:48:
81:e9:b7:7f:57:72:0b:88:3a:54:58:d2:56:2b:dd:
76:bc:e8:a7:65:d0:d4:cd:b4:10:38:e6:42:75:bd:
54:79:23:f9:92:0b:4b:04:48:7a:4f:1d:a8:d8:98:
b5:ae:99:30:18:1e:aa:bd:e4:9a:2e:e6:da:1c:0a:
b0:71:71:cb:12:77:b4:94:5d:fd:f4:91:18:6e:0b:
c9:0a:b0:69:27:e0:c0:d3:ec:e1:26:fe:e8:15:07:
c5:2a:9a:fe:75:13:b6:a4:9f:43:74:d9:4c:b7:71:
dd:55:46:09:17:ad:75:66:5a:1b:ce:2c:30:9d:28:
bf:15:7b:d6:1a:b4:54:1f:15:b5:63:a0:dd:cc:b0:
02:01:c3:1b:36:a8:47:fc:50:90:8a:74:26:8b:cd:
b0:68:82:7d:97:37:42:11:59:85:d9:e6:1a:8d:af:
83:00:f2:40:d4:a6:6b:36:59:cd:7a:5b:76:35:d9:
af:f0:af:6d:e8:4c:8f:69:4f:57:b2:b4:45:34:6c:
15:48:aa:0c:fe:0e:71:bd:52:1d:e3:b0:e4:82:c8:
8c:ba:ea:be:86:b2:3f:0c:89:22:28:cf:40:89:38:
72:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:7F:10:FA:A8:05:7E:0C:97:8D:71:DD:1B:CB:7C:2F:80:AD:85:91
X509v3 Authority Key Identifier:
keyid:DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:c6:c5:f8:18:cf:ac:6e:79:bd:7b:e4:dc:2d:62:e1:4b:44:
0a:92:51:b0:29:ec:54:83:fa:95:f7:de:25:5f:35:85:15:15:
3d:b1:56:8f:15:00:a6:e6:6d:6c:01:ed:fe:5d:dc:70:eb:85:
77:ce:5d:81:2f:40:f4:29:63:36:ab:b4:15:87:15:82:09:6d:
0d:0a:c1:1f:b3:ba:2a:a0:9c:e8:b7:72:01:ef:3a:07:af:8f:
0b:77:70:a9:b4:68:c4:f7:67:5c:c6:7c:20:20:21:b5:53:dc:
83:2a:20:ee:2f:09:17:93:08:4e:ee:5f:57:bc:08:6a:e6:56:
19:95:30:ba:66:f4:d2:c5:6d:7b:13:20:48:cb:2b:69:93:32:
5c:a1:48:73:dc:ed:cd:eb:02:83:19:46:ac:69:a7:4a:7d:19:
66:74:f5:fb:fa:cb:8d:b5:57:a8:10:b7:57:d1:8f:8e:46:68:
18:dd:d2:41:91:98:bb:65:bd:d4:9c:96:19:8b:ed:31:20:84:
a7:50:af:10:10:a5:1b:4a:48:16:7e:f5:43:f1:9a:c7:da:fb:
23:9a:49:e1:c9:c3:3f:ab:65:8f:be:7d:e9:c8:8e:66:18:0a:
7e:2b:05:5c:fe:a0:49:e2:09:a9:18:ba:6b:24:4d:50:ec:0a:
f1:92:b7:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkj1bSP4s/sXwP0KdyPFR+XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlM2Q4MTIxMWY0OTJlZGYwMjlhMjJjYzY2YzIwYTNiOTQ1
ODM1OTAwHhcNMjUwOTA3MTEwMDMxWhcNMjUwOTA4MTEwMDMxWjAzMTEwLwYDVQQD
EyhhMTdmMTBmYWE4MDU3ZTBjOTc4ZDcxZGQxYmNiN2MyZjgwYWQ4NTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/ZDRcLgj+Oq4TD7G+Wjxh25d79ZQ
UU9vijSDVEiB6bd/V3ILiDpUWNJWK912vOinZdDUzbQQOOZCdb1UeSP5kgtLBEh6
Tx2o2Ji1rpkwGB6qveSaLubaHAqwcXHLEne0lF399JEYbgvJCrBpJ+DA0+zhJv7o
FQfFKpr+dRO2pJ9DdNlMt3HdVUYJF611ZlobziwwnSi/FXvWGrRUHxW1Y6DdzLAC
AcMbNqhH/FCQinQmi82waIJ9lzdCEVmF2eYaja+DAPJA1KZrNlnNelt2Ndmv8K9t
6EyPaU9XsrRFNGwVSKoM/g5xvVId47DkgsiMuuq+hrI/DIkiKM9AiThyvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKF/EPqoBX4Ml41x3RvLfC+ArYWRMB8GA1UdIwQY
MBaAFN49gSEfSS7fApoizGbCCjuUWDWQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2oyQklSOUpMdDhDbWlMTVpzSUtPNVJZTlpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8yNmZjYmEtNzhhZS00ZDM4LWFjYWYt
MzE0MjhiMDUwZmQ3LzEvM2oyQklSOUpMdDhDbWlMTVpzSUtPNVJZTlpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8yNmZjYmEtNzhhZS00ZDM4LWFjYWYtMzE0MjhiMDUwZmQ3
LzEvM2oyQklSOUpMdDhDbWlMTVpzSUtPNVJZTlpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAusbF+BjP
rG55vXvk3C1i4UtECpJRsCnsVIP6lffeJV81hRUVPbFWjxUApuZtbAHt/l3ccOuF
d85dgS9A9CljNqu0FYcVggltDQrBH7O6KqCc6LdyAe86B6+PC3dwqbRoxPdnXMZ8
ICAhtVPcgyog7i8JF5MITu5fV7wIauZWGZUwumb00sVtexMgSMsraZMyXKFIc9zt
zesCgxlGrGmnSn0ZZnT1+/rLjbVXqBC3V9GPjkZoGN3SQZGYu2W91JyWGYvtMSCE
p1CvEBClG0pIFn71Q/Gax9r7I5pJ4cnDP6tlj7596ciOZhgKfisFXP6gSeIJqRi6
ayRNUOwK8ZK3fA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:28:30 2025 by rpki-client