Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
File: 3AKxj1iKULknT-NGn_i9ShZJ100.mft (raw, json)
Hash identifier: aKl1u6MI4039tJgo2JD9WZvA9/h7xOoWOtxWDRpLKEs=
Subject key identifier: 6D:39:F1:4B:C1:9E:11:72:F5:91:6E:34:EA:70:37:A4:74:5E:A6:33
Authority key identifier: DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
Certificate issuer: /CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Certificate serial: 019D26CD7AB2B82C9DB1DDF0E56633DA19CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
Manifest number: 18A4
Signing time: Wed 25 Mar 2026 21:01:33 +0000
Manifest this update: Wed 25 Mar 2026 21:01:33 +0000
Manifest next update: Thu 26 Mar 2026 21:01:33 +0000
Files and hashes: 1: 3AKxj1iKULknT-NGn_i9ShZJ100.crl (hash: SoeZPLwNYRcXnBlgcVT+bh6WgxET420GLXccjrbH3dw=)
2: 5MACIMLMvtPjGpSWrTYPYy_0oeU.roa (hash: EJ2Ys+JT+kVU1P9zpwQaUVwemNt/L+f0Ob7zlEMUJBU=)
3: FqC8RktCc6qY8oz3rsiy732Ts4M.roa (hash: mdIDtx+4TjAohQu4FVCDn+GhhrjJpOPYnS4XF8UoaSY=)
4: PoFDIU-GQDMslzRKtEfKc0Rn8wA.roa (hash: ralmG0z6Jbcj96LF3CDF1zDKHmm0v2Ba5LksOkUYKg0=)
5: S66f2Gul6I0fFXwc0F6Uwsxne9U.roa (hash: NavMROKg+QjDM1u2vWxChfQLt+8NvkpuOrMKOryHnhk=)
6: Tk4BECob0wzGz8tktoazFqndFEA.roa (hash: vMnbx4+7QIXDr3/1NvPZgl+14y+ZGEXmNQb8sHi4+W0=)
7: VTLJBTDTIQ6Ju5e9btomtcWeLMo.roa (hash: yTXCJ9BMk8u2/KPcWBkJ56YpIjPo0JdRR1lnpXanzc8=)
8: geCL9RPAUHreYWx88VAnuY9Du5o.roa (hash: KsOAsqATMB5faX+K34f0JpwdheSXfw1xCfbke6T4Rxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:7a:b2:b8:2c:9d:b1:dd:f0:e5:66:33:da:19:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Validity
Not Before: Mar 25 21:01:33 2026 GMT
Not After : Mar 26 21:01:33 2026 GMT
Subject: CN=6d39f14bc19e1172f5916e34ea7037a4745ea633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:42:2c:04:94:d3:78:b6:16:46:4c:23:80:92:
c2:48:d4:30:5a:a0:25:cc:6f:f9:14:39:9a:65:d6:
8f:41:2e:86:48:d9:14:11:6e:48:cf:bd:ff:d9:80:
f9:66:8c:bb:d0:85:eb:71:85:23:86:be:3a:a2:17:
0d:65:4d:e0:f7:ab:89:ff:39:7c:c4:f2:2d:d6:27:
c6:eb:0f:55:1f:dc:4f:30:18:60:53:ae:21:22:7d:
ea:e7:d9:8a:95:e6:a2:85:a9:9f:96:5e:d6:cb:ee:
f2:63:47:0b:4b:93:2f:fa:0a:4c:41:d2:03:45:b5:
44:c0:92:ca:1b:00:79:b8:0e:fc:ab:e8:62:32:1e:
5a:04:72:97:ac:4f:25:6c:28:64:77:02:95:5c:75:
22:94:f6:b3:e5:29:19:ab:d2:26:38:df:25:2a:56:
0a:a4:37:29:54:41:c3:70:0a:1e:90:3c:8a:ed:d6:
71:4f:f6:2f:0b:1f:38:e7:da:80:e7:57:e4:59:2d:
c9:c8:8c:96:33:03:28:18:5c:fb:75:c2:d2:96:e8:
59:c7:29:81:4d:36:74:e0:39:c8:e0:60:4d:62:30:
c7:a4:39:63:3d:98:50:b5:3b:73:f2:82:64:a8:3b:
da:44:01:63:4e:22:46:57:08:f7:2b:4e:79:5d:3f:
db:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:39:F1:4B:C1:9E:11:72:F5:91:6E:34:EA:70:37:A4:74:5E:A6:33
X509v3 Authority Key Identifier:
keyid:DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:b8:fc:25:57:22:ba:6e:04:96:56:7d:84:09:16:64:c3:8c:
f3:dc:04:e6:42:97:1e:5b:73:7b:fc:58:bb:09:cc:53:20:59:
83:cd:16:8f:43:34:8f:95:ff:3e:c3:2f:cd:44:42:eb:c0:8e:
07:92:7e:99:fb:53:0b:3e:f9:08:fb:d3:54:91:2e:22:6e:30:
b9:50:4e:fe:a2:ec:57:01:74:78:b4:4f:b1:6a:c0:c3:57:f8:
30:96:62:54:3c:b8:5b:c3:d4:75:90:d3:ea:cb:e7:02:e1:2c:
89:fa:6c:a1:51:1e:66:dd:7a:1d:52:13:be:58:15:1d:5f:aa:
4e:9c:69:48:6a:5b:f7:03:3d:41:08:aa:7e:6e:50:78:da:70:
79:16:d1:47:c1:93:64:f8:ea:f2:4f:d6:f2:9e:90:40:e2:d6:
30:6b:20:08:6b:af:cd:ef:3d:99:23:d9:22:f8:b1:bb:be:d8:
4d:83:1e:30:91:81:7c:84:ee:23:60:cb:ae:eb:8e:6e:e3:61:
f8:95:9c:00:93:d1:a6:aa:f8:50:b4:65:fb:b3:2f:f3:fd:54:
be:e4:01:2d:b3:2c:88:2f:be:1f:ab:35:9e:14:e0:69:57:1f:
7b:39:44:80:35:d5:23:09:96:69:49:b9:18:19:01:0a:8d:4f:
98:95:55:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:50:40 2026 by rpki-client