Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
File: 3j02h_599Iw76DmKrXvSAQZUU4I.mft (raw, json)
Hash identifier: jADM05+bbzPWo7szd4TGnL8mr5mAZbMTiv+Nd8nv6Y0=
Subject key identifier: 6E:D1:00:C8:01:C0:4D:56:08:14:A7:86:00:D0:EA:7A:9E:F5:47:7D
Authority key identifier: DE:3D:36:87:FE:7D:F4:8C:3B:E8:39:8A:AD:7B:D2:01:06:54:53:82
Certificate issuer: /CN=de3d3687fe7df48c3be8398aad7bd20106545382
Certificate serial: 019E30058B840BD83988ABBC42817E28759F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j02h_599Iw76DmKrXvSAQZUU4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
Manifest number: 1911
Signing time: Sat 16 May 2026 09:02:09 +0000
Manifest this update: Sat 16 May 2026 09:02:09 +0000
Manifest next update: Sun 17 May 2026 09:02:09 +0000
Files and hashes: 1: 3j02h_599Iw76DmKrXvSAQZUU4I.crl (hash: Q2evExv3oOkM+L2WxBtg+/mrHbPj020scWcPeIErj7g=)
2: UmGc4v4dW2AjI48WqepJzGqbsDw.roa (hash: fYk22ubS3uWxeAkHoNvB+rbSyEpAOXTAhgTHtjgfUCY=)
3: y7ivSLyg2N2CeccNLL23EoYUSS4.roa (hash: 31YSDBFlU1cRDWfJMLbiXOEeuRnq/hgQLZYoBqQPGv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3j02h_599Iw76DmKrXvSAQZUU4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:05:8b:84:0b:d8:39:88:ab:bc:42:81:7e:28:75:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de3d3687fe7df48c3be8398aad7bd20106545382
Validity
Not Before: May 16 09:02:09 2026 GMT
Not After : May 17 09:02:09 2026 GMT
Subject: CN=6ed100c801c04d560814a78600d0ea7a9ef5477d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:72:99:87:1a:d2:72:2b:ed:53:10:34:86:8f:
79:4d:64:8a:78:7a:38:7b:e4:64:aa:66:6c:a4:0e:
07:c5:d9:2a:14:a0:e4:14:ef:e9:ab:95:58:12:fc:
73:ba:91:42:67:4d:bf:41:ec:ea:10:dc:15:7c:f3:
d9:cd:da:bb:f5:e2:e6:67:35:22:63:75:88:6d:3f:
5e:99:aa:71:c3:2c:5d:d3:13:54:7e:96:b8:47:d9:
f5:94:e4:cc:15:6e:80:3a:63:16:1c:ac:7a:aa:30:
35:fb:c0:2d:43:e4:3e:2d:e9:fb:ef:0d:4c:72:b4:
0e:f2:50:3e:4d:38:8a:21:19:24:07:46:cd:18:af:
4f:99:fa:e8:f5:cd:1a:48:b4:a8:0e:32:c7:62:8e:
b7:19:d0:a3:b4:46:34:de:e2:8e:92:01:56:89:3e:
29:28:78:ea:1f:16:29:be:b8:92:80:79:c1:75:a7:
8a:3f:bd:1d:b4:cf:50:a4:49:36:7b:5b:a0:e3:cc:
e2:84:a2:f5:64:6d:ca:0a:fc:c0:17:f8:b6:5f:d2:
cd:9c:55:15:11:2a:c9:f9:95:8c:36:1d:f1:cd:40:
5d:86:2b:4d:ce:e2:1e:1b:36:ac:0c:3b:ab:e4:62:
a6:ed:bc:a5:e3:c6:f0:bd:28:21:d3:3c:2c:a8:26:
a4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:D1:00:C8:01:C0:4D:56:08:14:A7:86:00:D0:EA:7A:9E:F5:47:7D
X509v3 Authority Key Identifier:
keyid:DE:3D:36:87:FE:7D:F4:8C:3B:E8:39:8A:AD:7B:D2:01:06:54:53:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j02h_599Iw76DmKrXvSAQZUU4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:b7:eb:c3:5e:d1:4b:bc:a0:2f:01:ec:e1:15:36:20:3a:e8:
57:ff:dc:90:05:cf:6f:70:89:b7:a8:fa:28:bd:82:99:e5:bb:
77:fc:a2:65:f5:00:fd:31:b0:4a:4f:81:b0:ea:3c:6f:e8:fe:
f6:60:6b:89:e7:8b:34:eb:98:01:2b:c9:23:3c:73:7d:9e:47:
d8:71:82:15:49:25:8e:46:4a:f3:13:a4:40:b6:da:ac:d9:14:
51:16:a3:91:23:e9:46:6e:1a:18:36:4a:e1:cb:b2:de:ab:02:
7d:ac:ad:bf:80:cc:5c:51:15:fc:e9:ca:ff:e8:f2:49:1c:7a:
02:90:0d:a0:eb:c2:1a:e1:81:15:36:c1:ab:23:bc:d1:69:f4:
91:91:14:74:95:b5:38:4b:26:fc:7f:68:38:b2:88:41:17:56:
48:c4:bd:b2:d8:a4:77:15:29:b1:ac:74:04:fa:56:71:19:f0:
10:8c:9b:1b:72:e5:32:a9:a2:e0:a7:15:87:2e:9f:fd:eb:d1:
17:c8:e0:7c:e4:ab:33:d6:55:7d:1c:d8:1f:88:ad:df:2d:ab:
8f:0d:90:ca:b7:4c:31:66:66:ed:3b:06:16:b0:d2:95:dc:0e:
0a:00:fd:19:f6:3e:28:9d:f1:35:ba:45:3e:26:dd:68:54:45:
a1:56:66:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:13:55 2026 by rpki-client