Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
File: 3AKxj1iKULknT-NGn_i9ShZJ100.mft (raw, json)
Hash identifier: 1yAzYzkXH0WrXWTZ+HDlWBEcAyRd5m6OJUmUwPH//Jo=
Subject key identifier: AA:6B:33:81:C9:71:A8:4E:C0:36:20:64:8D:48:FF:51:45:B2:32:55
Authority key identifier: DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
Certificate issuer: /CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Certificate serial: 019E1C103360ECC75EB7343F67CF709FDAA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
Manifest number: 1923
Signing time: Tue 12 May 2026 12:01:24 +0000
Manifest this update: Tue 12 May 2026 12:01:24 +0000
Manifest next update: Wed 13 May 2026 12:01:24 +0000
Files and hashes: 1: 3AKxj1iKULknT-NGn_i9ShZJ100.crl (hash: gNixmhwzKxuoP23ODsjDHM3QYJtkZmafjCUXW++eUWE=)
2: 5MACIMLMvtPjGpSWrTYPYy_0oeU.roa (hash: EJ2Ys+JT+kVU1P9zpwQaUVwemNt/L+f0Ob7zlEMUJBU=)
3: FqC8RktCc6qY8oz3rsiy732Ts4M.roa (hash: mdIDtx+4TjAohQu4FVCDn+GhhrjJpOPYnS4XF8UoaSY=)
4: PoFDIU-GQDMslzRKtEfKc0Rn8wA.roa (hash: ralmG0z6Jbcj96LF3CDF1zDKHmm0v2Ba5LksOkUYKg0=)
5: S66f2Gul6I0fFXwc0F6Uwsxne9U.roa (hash: NavMROKg+QjDM1u2vWxChfQLt+8NvkpuOrMKOryHnhk=)
6: Tk4BECob0wzGz8tktoazFqndFEA.roa (hash: vMnbx4+7QIXDr3/1NvPZgl+14y+ZGEXmNQb8sHi4+W0=)
7: VTLJBTDTIQ6Ju5e9btomtcWeLMo.roa (hash: yTXCJ9BMk8u2/KPcWBkJ56YpIjPo0JdRR1lnpXanzc8=)
8: geCL9RPAUHreYWx88VAnuY9Du5o.roa (hash: KsOAsqATMB5faX+K34f0JpwdheSXfw1xCfbke6T4Rxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:10:33:60:ec:c7:5e:b7:34:3f:67:cf:70:9f:da:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Validity
Not Before: May 12 12:01:24 2026 GMT
Not After : May 13 12:01:24 2026 GMT
Subject: CN=aa6b3381c971a84ec03620648d48ff5145b23255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b0:7c:90:9c:a5:25:a2:11:4c:2c:4c:87:68:
58:1d:0f:75:b5:4a:33:7e:e9:91:29:73:59:8b:f0:
51:3c:7e:1b:94:6a:81:c0:2e:08:78:82:a1:27:06:
30:ac:08:2b:b5:6c:eb:01:4f:44:22:a6:1a:19:84:
8a:06:62:f7:60:0b:95:c1:c0:7f:11:30:6e:9f:7e:
2e:ea:5a:90:d2:b9:69:64:a0:8f:b6:98:64:c6:45:
57:33:e6:8d:6c:39:11:26:f7:a5:3d:a2:5a:a8:da:
ab:a2:2c:e4:74:41:2f:d8:80:b4:32:f0:95:79:50:
99:3b:de:6d:1b:91:2b:f1:e2:cd:09:6d:33:32:fe:
9c:f0:3a:f9:80:b9:a3:3c:86:82:9e:4c:ed:73:7e:
62:1e:27:d9:4d:a7:50:1a:43:67:b5:09:2f:a6:74:
2a:83:96:2a:92:a3:cd:49:ff:c4:68:98:1a:ed:9f:
7b:36:32:bf:47:42:27:66:d8:fb:44:76:a7:12:99:
67:a8:2e:9d:e6:aa:1e:2a:58:61:09:5e:8d:d4:c2:
82:58:79:ff:85:29:da:ee:e3:bc:18:76:bf:1c:27:
69:d2:ad:3b:45:76:e2:4f:8a:fc:70:66:11:80:46:
96:75:1f:71:b4:5e:8a:76:6f:f4:7e:5c:70:b6:3c:
cf:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:6B:33:81:C9:71:A8:4E:C0:36:20:64:8D:48:FF:51:45:B2:32:55
X509v3 Authority Key Identifier:
keyid:DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:72:19:4e:1c:be:64:d0:15:a9:91:8c:4c:eb:8c:5d:ba:5e:
df:b9:37:a5:76:61:5b:a6:df:ca:be:fb:43:a1:0a:78:f4:a0:
45:07:7f:b0:19:d3:03:6a:28:14:03:d4:a0:a6:28:7a:e4:e2:
29:64:38:dd:5f:3a:37:c4:f7:09:eb:ae:5d:18:42:04:7f:3e:
46:74:b6:6b:a4:f4:90:6b:31:15:bf:1e:e1:12:6c:81:1e:20:
53:00:20:6f:06:56:a7:cc:a0:36:51:3a:1c:84:04:33:57:5f:
63:9d:69:6f:ac:75:9f:bd:b6:95:1b:67:db:80:b2:c9:0f:2b:
a4:30:88:92:6f:db:a9:c6:28:33:cc:d9:82:42:8f:01:29:75:
d4:84:d8:1e:df:1b:7b:53:53:5a:b2:3c:0f:51:de:73:be:54:
1a:8d:25:c0:90:6b:66:21:cb:45:40:53:cb:87:1f:d3:de:a9:
39:28:82:41:16:6a:56:2c:e3:9e:93:c3:9d:9d:70:88:4d:8e:
3c:28:1b:71:9f:d9:70:49:ca:9e:59:e1:46:b9:51:14:01:bc:
01:20:75:34:39:35:61:e9:37:6a:a5:4c:68:e6:fc:ab:7f:9f:
23:87:96:90:30:f3:59:fc:9e:4d:6b:61:d4:64:92:ee:c1:77:
fd:19:2c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:54 2026 by rpki-client