
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
File: 3AKxj1iKULknT-NGn_i9ShZJ100.mft (raw, json)
Hash identifier: FlvRLLcNQyybljGz7pPXQzZHGg1ixdWsviPDZANZGHA=
Subject key identifier: 7C:83:A2:01:31:73:F3:8C:88:AE:33:2A:17:F2:80:A7:8C:70:C1:93
Authority key identifier: DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
Certificate issuer: /CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Certificate serial: 0199FB0F53A54C4CBF3463EF1BCA71655D05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
Manifest number: 16FE
Signing time: Sun 19 Oct 2025 06:01:49 +0000
Manifest this update: Sun 19 Oct 2025 06:01:49 +0000
Manifest next update: Mon 20 Oct 2025 06:01:49 +0000
Files and hashes: 1: 3AKxj1iKULknT-NGn_i9ShZJ100.crl (hash: 1KyZXAK3Sy9mvIEw/UVMBoS77+ldTessFY67x5xNIeM=)
2: 6vn0S84Of3Am641RtQSWgEcI8LQ.roa (hash: liXU+EaS34eLz4h7mt5PwqdMf8bXjU0VdoViqn9V7yA=)
3: 8CNNYBbzQiDFPTM1tjqp5lUESM8.roa (hash: FKMYJ+6HiuRFIY6sbk4LB3mHseE0YsFT5neIU8ZSV0A=)
4: I0EWVa5mZSWikCbYj71SVDGODXk.roa (hash: qRro/RYNQpEPToY47O32IDSH0UGN5UknBXKBqz78hLc=)
5: SgwPvwknub36baQ9KcDiF10XVjg.roa (hash: AqBX/OOtLCRwId7Bx3Diq3oyJG6vd4oLaGxEgTaatfA=)
6: VajIGedTAEjBNV3b8yhI3Gm_wwY.roa (hash: zWXkCVS1+asFBr2Z3nZVK8HEU5fThFspnuVO3DjbBl4=)
7: goC_YpQrwJcU48WyzOg3OlsUAbY.roa (hash: OHpeanfXRy8bamPYQwO5dLykWIe4C63dtCxwNHxZdBc=)
8: lXMs99__wPFL_tQdoxzgPhccZK0.roa (hash: OuWROGz9NUYwdhgN+POUZ2OWYBha2GAUM0PW+Sf4wFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:53:a5:4c:4c:bf:34:63:ef:1b:ca:71:65:5d:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Validity
Not Before: Oct 19 06:01:49 2025 GMT
Not After : Oct 20 06:01:49 2025 GMT
Subject: CN=7c83a2013173f38c88ae332a17f280a78c70c193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9a:ca:5e:73:a4:f1:a1:16:3b:04:d3:69:f4:
2f:aa:84:e3:c2:02:09:e9:e0:ee:a8:34:a2:6b:1a:
a3:2e:90:09:35:41:05:f4:f8:98:57:29:3c:1b:61:
53:12:f7:39:fa:ea:5b:62:27:1d:4d:7f:4b:fc:d8:
03:2b:f0:4e:68:af:e6:31:54:48:c0:cc:5f:6b:56:
d6:18:4d:c5:a2:2e:6a:f6:fb:54:68:1a:51:d5:94:
5f:8a:ab:bc:e8:45:ab:fb:81:69:f4:14:65:f6:01:
a1:8f:81:35:65:a4:08:b1:74:13:73:1a:cc:bf:67:
ec:2a:b2:04:be:fa:7d:ad:a3:a6:eb:e6:83:90:ae:
f8:1a:cb:2d:27:52:b7:42:8c:73:97:06:30:c8:a9:
b0:dd:8b:ad:b2:c3:6b:ff:13:02:10:88:31:22:ff:
11:bc:ea:4c:3b:4d:5f:69:a5:98:c0:e2:ac:17:10:
24:aa:44:29:da:52:61:03:e1:2b:1f:cf:2d:d4:f4:
a7:e7:26:c5:0c:47:1c:6f:8e:10:7f:5a:c5:36:67:
62:78:49:b1:d4:03:a8:8e:8b:38:77:08:65:93:47:
12:97:9c:81:87:ec:60:1e:5b:c8:ee:bf:fe:fc:50:
c7:cd:db:57:87:ac:fd:2f:47:dd:25:f9:cd:0d:5e:
7c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:83:A2:01:31:73:F3:8C:88:AE:33:2A:17:F2:80:A7:8C:70:C1:93
X509v3 Authority Key Identifier:
keyid:DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:ae:61:4d:9c:28:17:f6:4d:05:ef:69:49:40:fb:bf:b2:19:
88:df:fd:bd:05:12:c6:c9:c4:31:6d:52:ba:f4:f8:d2:57:0c:
9f:4a:00:c7:24:39:ee:55:72:d6:38:55:d9:e9:72:77:59:da:
39:af:85:0b:40:82:de:cd:9c:52:20:93:71:c2:c5:a9:cf:16:
ba:89:db:a3:86:22:40:35:62:51:f4:74:03:45:cf:bb:af:47:
c3:6d:80:ae:a0:31:26:13:a2:b6:ce:ca:5b:65:ef:79:78:dd:
92:b3:1e:3c:00:72:16:cc:a2:3a:8b:0a:69:17:5c:95:b2:8b:
4f:07:68:e4:9c:74:f5:94:1c:b7:97:93:64:4c:43:58:f7:a4:
ec:43:1e:d7:ac:30:0b:9b:f9:6b:5c:f5:e2:fc:c1:35:b8:67:
3b:c5:9e:0a:f0:90:19:69:36:84:ae:b2:d6:80:a9:47:d5:91:
7c:49:b0:8d:11:4b:39:29:56:ca:9c:1a:61:5e:17:fc:43:2f:
08:26:f5:ab:55:af:24:12:88:c5:5a:6f:f1:00:e4:1e:b6:6a:
36:d4:f5:38:a4:0d:3d:e5:6b:12:d5:db:99:79:91:34:52:80:
02:ff:d9:6e:c4:41:aa:1e:9a:7d:9d:38:6d:3b:19:b2:fa:b9:
c9:54:73:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7D1OlTEy/NGPvG8pxZV0FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMDJiMThmNTg4YTUwYjkyNzRmZTM0NjlmZjhiZDRhMTY0
OWQ3NGQwHhcNMjUxMDE5MDYwMTQ5WhcNMjUxMDIwMDYwMTQ5WjAzMTEwLwYDVQQD
Eyg3YzgzYTIwMTMxNzNmMzhjODhhZTMzMmExN2YyODBhNzhjNzBjMTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JrKXnOk8aEWOwTTafQvqoTjwgIJ
6eDuqDSiaxqjLpAJNUEF9PiYVyk8G2FTEvc5+upbYicdTX9L/NgDK/BOaK/mMVRI
wMxfa1bWGE3Foi5q9vtUaBpR1ZRfiqu86EWr+4Fp9BRl9gGhj4E1ZaQIsXQTcxrM
v2fsKrIEvvp9raOm6+aDkK74GsstJ1K3QoxzlwYwyKmw3YutssNr/xMCEIgxIv8R
vOpMO01faaWYwOKsFxAkqkQp2lJhA+ErH88t1PSn5ybFDEccb44Qf1rFNmdieEmx
1AOojos4dwhlk0cSl5yBh+xgHlvI7r/+/FDHzdtXh6z9L0fdJfnNDV58ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHyDogExc/OMiK4zKhfygKeMcMGTMB8GA1UdIwQY
MBaAFNwCsY9YilC5J0/jRp/4vUoWSddNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0FLeGoxaUtVTGtuVC1OR25faTlTaFpKMTAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jODYxYzgtYzg5YS00MDQzLWEwMmQt
NjY0ZjA0ZDJhNjhkLzEvM0FLeGoxaUtVTGtuVC1OR25faTlTaFpKMTAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9jODYxYzgtYzg5YS00MDQzLWEwMmQtNjY0ZjA0ZDJhNjhk
LzEvM0FLeGoxaUtVTGtuVC1OR25faTlTaFpKMTAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV65hTZwo
F/ZNBe9pSUD7v7IZiN/9vQUSxsnEMW1SuvT40lcMn0oAxyQ57lVy1jhV2elyd1na
Oa+FC0CC3s2cUiCTccLFqc8Wuonbo4YiQDViUfR0A0XPu69Hw22ArqAxJhOits7K
W2XveXjdkrMePAByFsyiOosKaRdclbKLTwdo5Jx09ZQct5eTZExDWPek7EMe16ww
C5v5a1z14vzBNbhnO8WeCvCQGWk2hK6y1oCpR9WRfEmwjRFLOSlWypwaYV4X/EMv
CCb1q1WvJBKIxVpv8QDkHrZqNtT1OKQNPeVrEtXbmXmRNFKAAv/ZbsRBqh6afZ04
bTsZsvq5yVRz/A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:55 2025 by rpki-client