Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
File: 3j02h_599Iw76DmKrXvSAQZUU4I.mft (raw, json)
Hash identifier: drCrLK3Tnp00Mq4fahLGBUHWenInXGc5hF+qjXSd7to=
Subject key identifier: B9:87:58:C7:14:58:23:D9:F3:F7:F8:64:A0:95:0C:51:96:6D:C5:F3
Authority key identifier: DE:3D:36:87:FE:7D:F4:8C:3B:E8:39:8A:AD:7B:D2:01:06:54:53:82
Certificate issuer: /CN=de3d3687fe7df48c3be8398aad7bd20106545382
Certificate serial: 019D2B4ED407AF341F5E4A37028876C70D5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j02h_599Iw76DmKrXvSAQZUU4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 18:01:19 +0000
Manifest this update: Thu 26 Mar 2026 18:01:19 +0000
Manifest next update: Fri 27 Mar 2026 18:01:19 +0000
Files and hashes: 1: 3j02h_599Iw76DmKrXvSAQZUU4I.crl (hash: CgzL3K6aKVZue9rGokKZj8Jf4x4UJISml0yD6b/CYG4=)
2: UmGc4v4dW2AjI48WqepJzGqbsDw.roa (hash: fYk22ubS3uWxeAkHoNvB+rbSyEpAOXTAhgTHtjgfUCY=)
3: y7ivSLyg2N2CeccNLL23EoYUSS4.roa (hash: 31YSDBFlU1cRDWfJMLbiXOEeuRnq/hgQLZYoBqQPGv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3j02h_599Iw76DmKrXvSAQZUU4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 18:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:d4:07:af:34:1f:5e:4a:37:02:88:76:c7:0d:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de3d3687fe7df48c3be8398aad7bd20106545382
Validity
Not Before: Mar 26 18:01:19 2026 GMT
Not After : Mar 27 18:01:19 2026 GMT
Subject: CN=b98758c7145823d9f3f7f864a0950c51966dc5f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:64:b5:cb:d8:9c:0b:d9:cf:50:98:04:ba:f2:
f5:3c:ed:e8:f8:36:03:42:7b:cf:68:11:e9:84:1a:
d7:a8:ea:81:52:69:ab:48:5d:f9:4e:bb:22:85:ce:
47:bb:f7:10:b3:14:b4:7d:97:d5:0e:65:ef:1a:ff:
4b:e2:e0:15:51:4e:88:a0:ad:9b:02:f3:21:fd:f3:
97:24:94:af:cd:13:03:19:a9:ee:09:e7:52:42:7c:
83:66:63:51:7e:f1:67:2e:f3:64:6f:44:75:10:fb:
3d:db:34:43:f2:c5:77:2a:49:f5:df:73:57:14:db:
43:13:b0:5f:f3:21:b4:6b:48:9a:dc:69:23:c5:85:
3e:ed:a7:97:8f:43:84:d5:18:ce:40:76:6f:b5:5e:
99:ca:7a:2e:ce:0f:2f:3e:50:6d:47:5d:f7:05:e9:
d6:43:43:22:bb:18:87:6c:bc:7b:d9:5e:91:80:de:
48:1d:b6:cf:bf:86:4c:d6:e6:6b:4f:36:a2:fc:0e:
48:2c:ea:fd:a9:62:34:cb:ba:be:cd:75:27:00:3d:
9c:5a:26:37:ea:d3:f6:72:c4:07:3a:07:4d:1a:32:
d6:ba:f2:cf:32:a5:ba:a6:fe:f9:74:35:61:2d:6f:
fb:db:82:73:f8:6f:d0:27:af:6e:3a:81:4f:2e:26:
5b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:87:58:C7:14:58:23:D9:F3:F7:F8:64:A0:95:0C:51:96:6D:C5:F3
X509v3 Authority Key Identifier:
keyid:DE:3D:36:87:FE:7D:F4:8C:3B:E8:39:8A:AD:7B:D2:01:06:54:53:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j02h_599Iw76DmKrXvSAQZUU4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:7d:c4:c5:ab:1d:7a:85:24:5a:dc:6f:04:e2:b3:ea:0a:f4:
de:aa:35:87:e2:45:a0:d7:d8:2f:8d:9f:38:f2:6e:71:1b:2b:
7c:bc:0a:e2:fa:ec:c5:c5:0f:0d:63:59:ea:89:95:c1:71:db:
ef:d6:21:38:f8:cd:3c:8e:cd:e2:ba:c3:51:4e:84:9b:4c:d3:
17:21:63:36:06:c6:b3:66:f4:e8:97:ae:99:cb:73:48:e2:b9:
55:fe:72:22:0b:e1:38:f5:26:7e:9a:fb:25:88:92:dc:f2:61:
f9:f9:97:c3:a0:45:95:46:47:63:70:45:3b:ec:73:02:ea:15:
38:d8:3a:4a:cb:f7:b9:27:a3:02:27:c1:07:f1:76:f4:7b:c8:
66:c5:40:09:c0:9c:6b:8c:a6:8f:08:36:50:4d:ba:e7:2c:30:
c4:fd:90:e2:62:70:1c:ef:42:8e:d2:c0:00:79:1c:44:1c:a5:
4b:0d:24:85:33:e5:95:d4:5e:c2:d9:a3:cc:26:d3:97:49:32:
aa:37:72:28:ad:54:48:69:02:0b:82:95:96:0f:ba:22:37:98:
bb:d6:ae:3b:6e:cb:db:5c:da:74:0e:6c:e4:a2:f1:53:6b:9f:
80:fe:c5:75:3f:ce:65:a7:ae:dd:dd:17:7f:f1:53:58:24:e0:
e6:4b:63:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:41:21 2026 by rpki-client