Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
File: 3j02h_599Iw76DmKrXvSAQZUU4I.mft (raw, json)
Hash identifier: TSLfDkFdKn5IuPla66AjdLo6QHqbZYEmnqlmkaGi6po=
Subject key identifier: CD:DD:CC:26:56:BD:7F:74:78:CE:26:D8:79:F3:A6:A7:C1:8D:35:11
Authority key identifier: DE:3D:36:87:FE:7D:F4:8C:3B:E8:39:8A:AD:7B:D2:01:06:54:53:82
Certificate issuer: /CN=de3d3687fe7df48c3be8398aad7bd20106545382
Certificate serial: 019E1EA2C8CA327AA1DAA01AB9EFCE04C4CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j02h_599Iw76DmKrXvSAQZUU4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 00:00:44 +0000
Manifest this update: Wed 13 May 2026 00:00:44 +0000
Manifest next update: Thu 14 May 2026 00:00:44 +0000
Files and hashes: 1: 3j02h_599Iw76DmKrXvSAQZUU4I.crl (hash: Aj9NqN6/Tbwx45SBfSm3B1lwvxHZuNwX0X6k3BEQ7RA=)
2: UmGc4v4dW2AjI48WqepJzGqbsDw.roa (hash: fYk22ubS3uWxeAkHoNvB+rbSyEpAOXTAhgTHtjgfUCY=)
3: y7ivSLyg2N2CeccNLL23EoYUSS4.roa (hash: 31YSDBFlU1cRDWfJMLbiXOEeuRnq/hgQLZYoBqQPGv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3j02h_599Iw76DmKrXvSAQZUU4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:c8:ca:32:7a:a1:da:a0:1a:b9:ef:ce:04:c4:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de3d3687fe7df48c3be8398aad7bd20106545382
Validity
Not Before: May 13 00:00:44 2026 GMT
Not After : May 14 00:00:44 2026 GMT
Subject: CN=cdddcc2656bd7f7478ce26d879f3a6a7c18d3511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f1:1a:9c:e4:9a:25:6e:ad:2e:80:56:cd:2b:
db:b0:b7:a0:ee:ec:81:bf:a4:76:50:e0:ec:94:d1:
96:97:78:2d:47:be:07:ae:51:86:1a:1a:2f:b5:46:
e9:cf:1d:05:57:a2:85:05:29:16:eb:53:de:92:c6:
4b:6d:d5:d6:51:c2:56:d3:c6:15:9e:b6:cd:bd:c7:
6f:1a:58:5c:62:4a:ba:80:69:47:00:25:8c:46:4f:
27:79:e4:47:b2:20:8a:fb:31:cf:4e:ba:30:c6:41:
cf:aa:1d:02:32:04:02:68:6b:35:55:3b:56:86:23:
3d:d9:8c:3e:7a:b9:7f:9e:e1:31:95:32:4a:03:cf:
6e:73:78:07:be:bd:1a:9d:bb:fe:73:d6:d7:e9:8c:
25:b7:ab:3b:71:96:44:32:00:36:70:02:5f:53:92:
c6:8d:63:89:b6:a6:74:ea:11:e9:55:e8:2f:1d:b5:
bc:31:b4:12:82:61:1a:9b:b2:ff:3d:10:af:be:da:
22:26:99:61:90:37:fc:d8:60:79:e8:52:04:23:4e:
92:94:c7:22:f6:c8:a2:0b:13:8d:e9:1f:f5:92:7d:
57:e7:6a:c8:d0:e6:48:75:9f:49:a6:bd:42:eb:81:
e4:8b:d9:fc:a7:74:a0:a4:50:e5:35:57:06:7d:f9:
24:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:DD:CC:26:56:BD:7F:74:78:CE:26:D8:79:F3:A6:A7:C1:8D:35:11
X509v3 Authority Key Identifier:
keyid:DE:3D:36:87:FE:7D:F4:8C:3B:E8:39:8A:AD:7B:D2:01:06:54:53:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j02h_599Iw76DmKrXvSAQZUU4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:f5:8b:0b:bb:71:7a:0b:0e:c7:2a:a5:81:69:69:c6:1d:c0:
6b:dd:d0:7e:e9:7b:e5:07:b0:5d:1f:c9:ec:d6:a9:c9:1b:2a:
57:5c:5a:a1:5f:7a:48:d6:52:30:1b:8c:78:ad:2d:b0:41:b4:
d7:c6:00:cf:cf:be:a1:80:f3:06:86:9f:41:48:82:99:83:71:
de:c6:55:c4:f0:74:62:af:63:11:c7:fd:6c:cf:62:27:68:fa:
31:b9:3d:8d:72:dd:66:07:3e:14:19:ea:b6:e8:4f:a1:27:49:
56:db:f2:58:84:a1:e6:26:64:b9:f4:d2:a2:28:1f:1c:2e:4b:
14:b1:4b:d9:9e:25:00:73:18:ca:88:9a:87:a8:c5:15:2a:e3:
a1:5e:55:d0:3b:20:1b:7c:6e:1a:df:c4:ac:86:79:13:87:bb:
22:c4:20:95:10:4a:74:f1:3a:91:83:b3:b2:a1:a9:c8:de:18:
eb:b1:aa:eb:dc:1d:80:3c:51:d3:7b:17:9c:3d:06:4c:a6:82:
b8:b4:72:48:47:4d:be:44:c2:21:2a:89:cf:5d:ab:8a:e6:3c:
0a:f6:b5:ca:58:0b:61:a7:3c:e4:71:db:6e:e7:82:86:c3:51:
d7:9a:a9:33:8a:b8:39:c4:56:23:a8:7e:e5:45:e4:0e:89:0a:
cf:13:d5:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:38:13 2026 by rpki-client