Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
File: 3j02h_599Iw76DmKrXvSAQZUU4I.mft (raw, json)
Hash identifier: OOO5/BolmyO75Mci3N/Zu1B+liKyQ4W9Dqy1WN6IuEk=
Subject key identifier: D6:69:14:BB:72:FB:DF:A7:B8:8B:8B:F5:67:D7:75:A2:C0:9D:49:4D
Authority key identifier: DE:3D:36:87:FE:7D:F4:8C:3B:E8:39:8A:AD:7B:D2:01:06:54:53:82
Certificate issuer: /CN=de3d3687fe7df48c3be8398aad7bd20106545382
Certificate serial: 019D38D32C0735D511791B8F46FBBDF6C0D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j02h_599Iw76DmKrXvSAQZUU4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 09:00:56 +0000
Manifest this update: Sun 29 Mar 2026 09:00:56 +0000
Manifest next update: Mon 30 Mar 2026 09:00:56 +0000
Files and hashes: 1: 3j02h_599Iw76DmKrXvSAQZUU4I.crl (hash: Haz6Ie6yUbpjmZxXQxVfhCOSAvd3wNE7qAuc1UnRVqc=)
2: UmGc4v4dW2AjI48WqepJzGqbsDw.roa (hash: fYk22ubS3uWxeAkHoNvB+rbSyEpAOXTAhgTHtjgfUCY=)
3: y7ivSLyg2N2CeccNLL23EoYUSS4.roa (hash: 31YSDBFlU1cRDWfJMLbiXOEeuRnq/hgQLZYoBqQPGv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3j02h_599Iw76DmKrXvSAQZUU4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:2c:07:35:d5:11:79:1b:8f:46:fb:bd:f6:c0:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de3d3687fe7df48c3be8398aad7bd20106545382
Validity
Not Before: Mar 29 09:00:56 2026 GMT
Not After : Mar 30 09:00:56 2026 GMT
Subject: CN=d66914bb72fbdfa7b88b8bf567d775a2c09d494d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:55:e0:5e:7c:bd:bb:0c:8f:e1:80:89:0c:d8:
47:18:30:31:a4:e6:67:af:8d:7f:11:b7:32:27:0a:
a9:83:b4:42:05:03:3d:a9:85:f8:b8:b5:41:55:fd:
b1:54:48:6a:d4:a8:0f:48:ea:0a:55:bd:0c:cf:c3:
ae:27:05:67:f2:7a:c0:32:49:ad:9a:26:88:b1:20:
d0:2f:e8:bd:95:ab:a0:8a:9f:10:5b:ce:c0:b2:fb:
f8:dd:9e:ff:03:52:4e:d9:04:bf:cf:9d:2c:79:3d:
aa:7f:d5:3a:67:c3:26:3f:9e:9f:ad:52:d6:d4:9e:
0b:55:72:05:06:3f:b9:4a:1c:ca:0d:a9:03:60:f8:
77:39:11:7b:5a:e5:a9:2f:88:d8:a6:cd:fb:2f:cc:
12:e3:60:83:42:b9:c7:16:f4:b1:86:bc:c9:20:1f:
e8:0a:ee:0b:cc:1c:f9:27:36:72:aa:92:56:41:af:
47:d9:eb:79:4d:6d:23:5b:b0:e5:bd:f6:78:4e:86:
97:8a:fe:4c:14:ac:85:cc:96:6b:5a:89:3c:5c:19:
6d:bd:8c:96:48:b0:e2:2c:48:4c:64:d4:1f:e3:76:
20:af:69:5f:96:d5:05:dd:72:a5:04:27:aa:5b:52:
a7:ee:f3:00:21:3d:3a:23:c7:60:df:9e:27:8f:c5:
3c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:69:14:BB:72:FB:DF:A7:B8:8B:8B:F5:67:D7:75:A2:C0:9D:49:4D
X509v3 Authority Key Identifier:
keyid:DE:3D:36:87:FE:7D:F4:8C:3B:E8:39:8A:AD:7B:D2:01:06:54:53:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j02h_599Iw76DmKrXvSAQZUU4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:f9:da:92:a7:dc:95:5e:99:da:a0:7b:ed:82:83:89:84:1d:
d0:6e:90:f6:c8:0e:36:93:63:23:a4:95:25:a3:57:aa:6e:68:
4b:b9:d0:04:da:b6:b7:25:7f:20:b4:48:9b:b7:69:35:90:0f:
bb:55:d0:b8:1d:af:8d:30:2f:1a:46:0c:d8:16:7f:39:f1:b5:
5d:ae:86:fc:23:0c:cb:d9:26:3f:e4:1e:9d:af:03:42:e7:12:
3d:f1:4f:6f:c1:e8:a4:6a:8a:72:28:83:e7:df:9c:c1:42:a8:
69:0d:2a:1b:9d:09:00:54:2a:c3:ff:19:dc:c9:e9:b1:92:e5:
e2:28:4f:6d:c6:09:79:5a:ea:cd:7d:0f:d9:bd:19:0e:ab:69:
dd:2a:87:28:fd:7f:27:67:dd:19:84:07:4d:03:ae:ba:1d:a5:
ed:54:20:16:73:cd:25:7e:32:62:c6:d2:ed:fb:b8:b6:b4:51:
f0:4f:01:fd:ad:97:33:10:93:04:8c:a1:1e:c6:e3:e1:b8:af:
f8:a3:f8:c8:3b:2d:06:c7:ea:8e:1b:3a:03:2b:e4:91:60:db:
7c:ea:3b:c5:81:9b:6b:9c:3c:c0:42:35:8a:a6:c7:23:11:9f:
ba:fe:57:e5:23:84:a1:fa:9e:f6:f7:d2:a7:04:a3:2f:ec:8e:
e4:41:52:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040ywHNdUReRuPRvu99sDUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlM2QzNjg3ZmU3ZGY0OGMzYmU4Mzk4YWFkN2JkMjAxMDY1
NDUzODIwHhcNMjYwMzI5MDkwMDU2WhcNMjYwMzMwMDkwMDU2WjAzMTEwLwYDVQQD
EyhkNjY5MTRiYjcyZmJkZmE3Yjg4YjhiZjU2N2Q3NzVhMmMwOWQ0OTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVXgXny9uwyP4YCJDNhHGDAxpOZn
r41/EbcyJwqpg7RCBQM9qYX4uLVBVf2xVEhq1KgPSOoKVb0Mz8OuJwVn8nrAMkmt
miaIsSDQL+i9laugip8QW87Asvv43Z7/A1JO2QS/z50seT2qf9U6Z8MmP56frVLW
1J4LVXIFBj+5ShzKDakDYPh3ORF7WuWpL4jYps37L8wS42CDQrnHFvSxhrzJIB/o
Cu4LzBz5JzZyqpJWQa9H2et5TW0jW7DlvfZ4ToaXiv5MFKyFzJZrWok8XBltvYyW
SLDiLEhMZNQf43Ygr2lfltUF3XKlBCeqW1Kn7vMAIT06I8dg354nj8U8ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNZpFLty+9+nuIuL9WfXdaLAnUlNMB8GA1UdIwQY
MBaAFN49Nof+ffSMO+g5iq170gEGVFOCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2owMmhfNTk5SXc3NkRtS3JYdlNBUVpVVTRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy80MDBiNGYtMzY4OC00OTdjLTk3ODUt
MjM0Y2JhZmFjODZhLzEvM2owMmhfNTk5SXc3NkRtS3JYdlNBUVpVVTRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy80MDBiNGYtMzY4OC00OTdjLTk3ODUtMjM0Y2JhZmFjODZh
LzEvM2owMmhfNTk5SXc3NkRtS3JYdlNBUVpVVTRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFvnakqfc
lV6Z2qB77YKDiYQd0G6Q9sgONpNjI6SVJaNXqm5oS7nQBNq2tyV/ILRIm7dpNZAP
u1XQuB2vjTAvGkYM2BZ/OfG1Xa6G/CMMy9kmP+Qena8DQucSPfFPb8HopGqKciiD
59+cwUKoaQ0qG50JAFQqw/8Z3MnpsZLl4ihPbcYJeVrqzX0P2b0ZDqtp3SqHKP1/
J2fdGYQHTQOuuh2l7VQgFnPNJX4yYsbS7fu4trRR8E8B/a2XMxCTBIyhHsbj4biv
+KP4yDstBsfqjhs6AyvkkWDbfOo7xYGba5w8wEI1iqbHIxGfuv5X5SOEofqe9vfS
pwSjL+yO5EFSUA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:20 2026 by rpki-client