Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
File: 3j02h_599Iw76DmKrXvSAQZUU4I.mft (raw, json)
Hash identifier: upKBUILzHSuYdoBt8BZ0OVEjrkpRhOFbFJkcGCvk4BI=
Subject key identifier: 12:06:FE:AA:F3:85:2F:2A:19:6A:21:7F:88:10:5C:19:9C:60:B0:67
Authority key identifier: DE:3D:36:87:FE:7D:F4:8C:3B:E8:39:8A:AD:7B:D2:01:06:54:53:82
Certificate issuer: /CN=de3d3687fe7df48c3be8398aad7bd20106545382
Certificate serial: 01A14015B90D66993F2FCBA194205501734C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j02h_599Iw76DmKrXvSAQZUU4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
Manifest number: 1AA7
Signing time: Thu 15 Oct 2026 15:02:07 +0000
Manifest this update: Thu 15 Oct 2026 15:02:07 +0000
Manifest next update: Fri 16 Oct 2026 15:02:07 +0000
Files and hashes: 1: 3j02h_599Iw76DmKrXvSAQZUU4I.crl (hash: 5Fe5WoJqFHdXFgCV656xDq+7yOAah5TEZVCNx58mKso=)
2: UmGc4v4dW2AjI48WqepJzGqbsDw.roa (hash: fYk22ubS3uWxeAkHoNvB+rbSyEpAOXTAhgTHtjgfUCY=)
3: y7ivSLyg2N2CeccNLL23EoYUSS4.roa (hash: 31YSDBFlU1cRDWfJMLbiXOEeuRnq/hgQLZYoBqQPGv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3j02h_599Iw76DmKrXvSAQZUU4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 15:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:15:b9:0d:66:99:3f:2f:cb:a1:94:20:55:01:73:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de3d3687fe7df48c3be8398aad7bd20106545382
Validity
Not Before: Oct 15 15:02:07 2026 GMT
Not After : Oct 16 15:02:07 2026 GMT
Subject: CN=1206feaaf3852f2a196a217f88105c199c60b067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e3:8b:e3:ef:71:66:a5:78:a1:7b:49:b8:ca:
c3:c2:b7:7a:29:24:49:ed:ac:15:8b:73:e9:c7:cb:
1b:a5:54:4d:e0:66:00:41:fe:14:e0:72:df:91:ae:
79:b7:e4:ad:4b:b6:32:de:5e:93:84:2f:67:3f:e3:
b5:56:b1:a4:7a:e0:f8:b5:68:6a:e5:66:9b:1b:4b:
02:02:34:7f:9e:f2:ec:b4:e6:54:65:15:b7:45:64:
fc:10:cd:3f:d9:5b:32:88:f3:6a:79:6b:ed:7f:ae:
08:38:5c:4c:1f:f0:4c:05:e0:9e:b3:9c:62:10:9b:
80:f2:d0:dc:54:29:b8:36:42:5b:71:48:4f:9e:4e:
fc:ee:39:e0:df:14:5f:24:f4:4e:d3:24:d0:c0:8c:
73:6d:37:0b:b6:09:44:7e:b6:63:1d:0e:a8:6f:e8:
da:81:a1:4f:b3:76:f0:2e:9f:45:0b:6a:1a:40:48:
8e:e9:84:fb:76:2d:68:92:e7:38:5b:bf:b0:a6:e2:
8c:06:39:59:46:8c:98:23:46:3c:e6:cc:9e:8f:c5:
2a:e8:07:53:fb:3f:11:39:00:40:b3:66:c1:93:6b:
62:86:59:0b:fe:db:b1:ba:07:68:56:c1:7b:ce:c4:
5d:a5:a1:63:c5:87:de:51:66:37:74:f1:b1:17:67:
be:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:06:FE:AA:F3:85:2F:2A:19:6A:21:7F:88:10:5C:19:9C:60:B0:67
X509v3 Authority Key Identifier:
keyid:DE:3D:36:87:FE:7D:F4:8C:3B:E8:39:8A:AD:7B:D2:01:06:54:53:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j02h_599Iw76DmKrXvSAQZUU4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:22:22:33:f3:1a:e3:ef:80:cd:1b:a5:e8:98:50:d2:42:56:
76:89:98:08:40:20:b6:4a:0b:4a:e0:75:24:f8:27:39:69:dd:
d3:23:15:2f:de:93:4d:19:c3:78:63:07:de:cf:87:ef:1a:a6:
5c:9a:da:01:c7:59:35:dd:d9:c2:ff:1b:e8:03:8a:90:3c:1e:
78:b8:9c:f9:e2:84:85:a8:fd:9c:f0:d2:86:68:4a:47:91:87:
e5:e4:4f:1b:11:ef:f0:3f:1a:45:d0:b3:5c:3f:5a:9f:8e:7d:
27:ef:c3:15:b0:2c:df:5b:4b:16:30:46:0b:c3:9e:76:87:58:
e0:85:e0:8d:15:f3:3f:ec:0a:b2:a5:bd:0d:3b:78:81:b0:8d:
45:2c:6e:8d:25:0e:17:87:50:0e:9c:85:34:d8:e9:58:97:ac:
3a:be:68:97:e7:2e:12:f0:d0:ee:93:72:d9:23:24:9b:56:34:
e0:ed:16:06:d6:f2:9a:3f:c1:89:08:49:1e:da:44:3a:0a:9e:
4f:53:19:1b:db:b7:6b:db:62:db:14:9f:5f:63:68:47:ac:c1:
f1:83:44:e0:21:f5:5b:f1:ee:19:9e:68:c9:1a:56:af:55:1a:
6e:5a:1b:c7:5d:da:8a:5a:fe:59:ba:8f:ac:27:74:aa:da:98:
d2:ba:26:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:56:57 2026 by rpki-client