Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
File: 3j02h_599Iw76DmKrXvSAQZUU4I.mft (raw, json)
Hash identifier: esSdLxa8Zv5MLego6x2d0Y3noTH0wABjJTvVus70zqg=
Subject key identifier: 9B:48:DF:34:58:A4:7B:41:9E:FB:F6:DB:C9:86:F6:D4:C0:09:8F:0C
Authority key identifier: DE:3D:36:87:FE:7D:F4:8C:3B:E8:39:8A:AD:7B:D2:01:06:54:53:82
Certificate issuer: /CN=de3d3687fe7df48c3be8398aad7bd20106545382
Certificate serial: 019F916C421A59D75B67E05C99C821F2FAB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j02h_599Iw76DmKrXvSAQZUU4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 00:00:18 +0000
Manifest this update: Fri 24 Jul 2026 00:00:18 +0000
Manifest next update: Sat 25 Jul 2026 00:00:18 +0000
Files and hashes: 1: 3j02h_599Iw76DmKrXvSAQZUU4I.crl (hash: UAp2gqaUErfJ5/4i8DN//YZk5Sli8H3UYiiASlTUb1Y=)
2: UmGc4v4dW2AjI48WqepJzGqbsDw.roa (hash: fYk22ubS3uWxeAkHoNvB+rbSyEpAOXTAhgTHtjgfUCY=)
3: y7ivSLyg2N2CeccNLL23EoYUSS4.roa (hash: 31YSDBFlU1cRDWfJMLbiXOEeuRnq/hgQLZYoBqQPGv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3j02h_599Iw76DmKrXvSAQZUU4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:42:1a:59:d7:5b:67:e0:5c:99:c8:21:f2:fa:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de3d3687fe7df48c3be8398aad7bd20106545382
Validity
Not Before: Jul 24 00:00:18 2026 GMT
Not After : Jul 25 00:00:18 2026 GMT
Subject: CN=9b48df3458a47b419efbf6dbc986f6d4c0098f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5d:28:f3:3a:8f:4e:c5:8f:21:08:a6:bc:a8:
eb:97:35:0f:44:77:c5:a0:8a:01:8f:e0:f6:67:e8:
06:ad:d1:6e:80:df:c2:a5:c1:b7:bf:7f:6a:98:64:
90:16:9b:63:fd:b6:6d:32:43:93:44:b0:c3:01:47:
95:98:de:bd:44:30:9e:94:83:b7:bd:56:87:40:66:
95:4d:49:24:84:23:35:77:b4:be:42:d4:f6:67:37:
ca:35:77:b6:5f:c5:79:71:b6:5a:70:32:ff:36:d2:
fc:3b:5b:49:fe:74:66:3d:a6:49:2e:98:e7:b8:8c:
d1:39:af:cc:b8:76:b2:37:40:7b:c1:ca:9e:52:25:
43:4b:20:48:00:e5:76:85:ef:48:9a:b8:13:9f:0b:
e7:71:b7:1b:c0:35:20:b0:23:82:b4:ef:50:6e:bd:
07:1f:9d:fe:36:ec:8d:9e:33:9f:8d:5b:aa:51:e0:
0f:93:4a:0e:f1:11:8b:a1:5b:79:f9:4f:2e:f2:f2:
46:e7:f8:20:29:75:00:9c:da:9b:40:b1:7c:43:b5:
50:b1:f1:5e:88:95:45:27:90:1f:49:d2:aa:a5:64:
af:a9:10:e8:e3:90:35:63:10:9c:ea:41:b9:87:3c:
d8:59:c2:6b:a9:e2:17:c6:f4:59:36:68:7f:b3:9a:
75:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:48:DF:34:58:A4:7B:41:9E:FB:F6:DB:C9:86:F6:D4:C0:09:8F:0C
X509v3 Authority Key Identifier:
keyid:DE:3D:36:87:FE:7D:F4:8C:3B:E8:39:8A:AD:7B:D2:01:06:54:53:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j02h_599Iw76DmKrXvSAQZUU4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:3c:88:80:6e:09:d1:4f:39:ed:b6:06:b1:cb:ee:1b:32:ac:
d2:ac:b9:a6:b9:44:9b:c4:97:e9:30:c4:f9:bc:a8:ec:74:f9:
6a:5b:b3:6c:f0:0f:cb:c5:3a:0a:27:cb:79:6a:1b:b9:60:fe:
21:c3:f1:13:1b:da:20:0e:32:e6:2d:86:02:a1:c7:8a:e5:b2:
ab:f9:a6:bc:87:53:29:ee:ca:6d:e9:9a:77:78:11:88:0a:a3:
39:28:9a:22:fa:f8:e0:c0:ae:41:27:e9:ac:15:dc:7a:18:0b:
e4:54:a0:ba:72:db:78:25:8b:9a:9b:f9:6e:1b:55:67:f3:d5:
bd:de:a9:1c:4e:3f:51:eb:8e:42:97:1f:44:ac:ab:25:c9:92:
e3:28:9c:59:10:fc:16:c2:5e:8b:bb:92:6a:5b:63:e0:fa:7d:
e7:65:83:6e:2a:8f:b4:eb:45:d3:f3:db:fc:49:40:c6:e3:7f:
2d:7c:48:f0:91:02:d4:11:3d:01:55:0e:4d:90:a6:9a:fa:6d:
7e:2d:2b:a6:bf:43:44:13:d5:98:9f:ab:61:4f:6a:98:f6:7d:
62:dc:29:ed:6d:37:06:72:f2:3c:57:b1:1d:a6:01:1a:4e:de:
09:81:3a:05:26:2d:a7:ef:ab:d1:b3:ca:a4:2d:b3:26:4a:a0:
96:3c:57:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:06:18 2026 by rpki-client