Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
File: 3j02h_599Iw76DmKrXvSAQZUU4I.mft (raw, json)
Hash identifier: PZ2VbV4JlyAbHG3ofpkgM6lG+zLschKcf1293AHVtI4=
Subject key identifier: 2B:B2:88:56:63:8A:AC:34:80:3F:79:BC:E6:65:C1:19:B0:A7:D5:98
Authority key identifier: DE:3D:36:87:FE:7D:F4:8C:3B:E8:39:8A:AD:7B:D2:01:06:54:53:82
Certificate issuer: /CN=de3d3687fe7df48c3be8398aad7bd20106545382
Certificate serial: 01A0016FEFE62E7F764C186FC850D43C06FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j02h_599Iw76DmKrXvSAQZUU4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 18:01:48 +0000
Manifest this update: Fri 14 Aug 2026 18:01:48 +0000
Manifest next update: Sat 15 Aug 2026 18:01:48 +0000
Files and hashes: 1: 3j02h_599Iw76DmKrXvSAQZUU4I.crl (hash: 2sQpl6pbVz1hYOg8Q/rn49iVVVKcUH9YQ1agQBdTTCA=)
2: UmGc4v4dW2AjI48WqepJzGqbsDw.roa (hash: fYk22ubS3uWxeAkHoNvB+rbSyEpAOXTAhgTHtjgfUCY=)
3: y7ivSLyg2N2CeccNLL23EoYUSS4.roa (hash: 31YSDBFlU1cRDWfJMLbiXOEeuRnq/hgQLZYoBqQPGv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3j02h_599Iw76DmKrXvSAQZUU4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:ef:e6:2e:7f:76:4c:18:6f:c8:50:d4:3c:06:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de3d3687fe7df48c3be8398aad7bd20106545382
Validity
Not Before: Aug 14 18:01:48 2026 GMT
Not After : Aug 15 18:01:48 2026 GMT
Subject: CN=2bb28856638aac34803f79bce665c119b0a7d598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:83:bb:82:c0:ac:d8:35:69:39:ce:79:5f:b8:
c7:26:f9:fd:f1:1b:9c:12:a9:c0:d0:e4:8a:30:1d:
20:cc:21:a6:cd:94:83:9a:cd:f3:76:f9:a6:87:25:
91:bb:f5:2e:bd:67:61:57:1d:75:4f:91:68:db:6e:
1d:73:7d:4d:01:b6:73:1b:c4:b5:09:dd:74:46:b5:
4c:a8:38:c7:9b:6a:d9:9d:76:79:95:b0:7d:e0:e9:
f4:85:06:46:81:e8:aa:94:74:67:fd:e9:0d:98:3c:
a6:d2:e3:29:49:16:74:c8:b9:cd:eb:14:22:aa:3e:
7e:06:5d:c1:7e:74:74:40:fc:d6:3c:4c:69:de:c2:
ae:f4:29:fc:75:9c:82:f8:10:b3:76:2a:f7:f7:9c:
93:5b:b7:2e:c7:fa:bb:d1:ff:03:23:41:e5:9c:bb:
34:94:c7:19:cf:48:20:d8:2e:a9:86:c9:cf:ae:24:
55:94:af:19:94:27:c8:06:8e:70:47:61:59:ed:cc:
b6:8f:e0:8d:ea:45:8a:d8:34:fe:b7:57:89:80:7d:
a0:ed:8d:82:1c:cb:0c:1d:99:59:f5:f2:f3:5e:bd:
3c:1a:22:a3:b5:f3:91:6f:15:39:89:27:d1:43:57:
f1:c4:a2:44:1e:96:ab:d9:9a:d7:fc:38:1f:02:93:
d2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B2:88:56:63:8A:AC:34:80:3F:79:BC:E6:65:C1:19:B0:A7:D5:98
X509v3 Authority Key Identifier:
keyid:DE:3D:36:87:FE:7D:F4:8C:3B:E8:39:8A:AD:7B:D2:01:06:54:53:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j02h_599Iw76DmKrXvSAQZUU4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d5:7f:2a:04:4f:68:65:58:a3:05:53:38:7a:7e:22:e9:5e:
46:1a:aa:78:75:df:20:19:c4:ab:2b:ed:b8:4e:56:1f:eb:63:
02:a9:11:f1:b5:3a:60:60:95:25:a5:f2:00:2a:3f:7f:8a:bb:
29:11:1c:c0:9c:9c:cd:6c:af:28:6e:4c:7f:c3:5d:68:54:ee:
38:bc:1d:94:3f:45:a2:b3:1b:fb:f8:86:c4:78:6a:0d:5d:a1:
1b:1a:6e:80:db:e4:7c:34:f1:3d:f9:16:82:1e:4f:62:39:07:
2a:00:3b:6c:1e:93:c8:dc:e1:02:6c:21:6e:fc:78:7f:6f:8d:
d1:9a:f0:78:cb:bc:d3:d8:89:55:81:b1:bf:f3:af:fc:13:2a:
ba:a1:3a:36:56:06:56:9e:b4:ad:73:59:4a:27:4d:16:e9:b3:
f4:e7:88:fe:7d:41:3c:fb:ef:18:e5:a8:8f:48:18:64:5b:3c:
dc:12:ac:af:bb:92:5e:b5:28:47:b6:f3:c2:cc:d0:ef:fd:f8:
aa:c2:43:70:38:87:8b:15:e1:5e:50:aa:28:d8:70:0b:40:5b:
28:df:15:10:d4:d2:37:8c:89:97:8c:05:96:b5:33:de:1b:64:
ff:80:58:b7:bf:06:f1:81:fa:e1:6c:df:17:66:2c:36:e6:26:
41:82:37:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:31:47 2026 by rpki-client