Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
File: 3AKxj1iKULknT-NGn_i9ShZJ100.mft (raw, json)
Hash identifier: Bd/q72PBnB5qQbRh4LA7r8HQPX6gd/ao7aC7MRQ7RPs=
Subject key identifier: D6:CE:06:E6:8C:52:52:62:8E:3E:D4:45:E1:5F:7E:AE:8B:F6:ED:61
Authority key identifier: DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
Certificate issuer: /CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Certificate serial: 01A0CD7EA9C284F0DF25695AEC6F24EB7D0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
Manifest number: 1A88
Signing time: Wed 23 Sep 2026 09:00:25 +0000
Manifest this update: Wed 23 Sep 2026 09:00:25 +0000
Manifest next update: Thu 24 Sep 2026 09:00:25 +0000
Files and hashes: 1: 3AKxj1iKULknT-NGn_i9ShZJ100.crl (hash: zTPxnyyNPLhahX0+0WCsM3YbIFI7Kyod+I/vOhASO7g=)
2: 5MACIMLMvtPjGpSWrTYPYy_0oeU.roa (hash: EJ2Ys+JT+kVU1P9zpwQaUVwemNt/L+f0Ob7zlEMUJBU=)
3: FqC8RktCc6qY8oz3rsiy732Ts4M.roa (hash: mdIDtx+4TjAohQu4FVCDn+GhhrjJpOPYnS4XF8UoaSY=)
4: PoFDIU-GQDMslzRKtEfKc0Rn8wA.roa (hash: ralmG0z6Jbcj96LF3CDF1zDKHmm0v2Ba5LksOkUYKg0=)
5: S66f2Gul6I0fFXwc0F6Uwsxne9U.roa (hash: NavMROKg+QjDM1u2vWxChfQLt+8NvkpuOrMKOryHnhk=)
6: Tk4BECob0wzGz8tktoazFqndFEA.roa (hash: vMnbx4+7QIXDr3/1NvPZgl+14y+ZGEXmNQb8sHi4+W0=)
7: VTLJBTDTIQ6Ju5e9btomtcWeLMo.roa (hash: yTXCJ9BMk8u2/KPcWBkJ56YpIjPo0JdRR1lnpXanzc8=)
8: geCL9RPAUHreYWx88VAnuY9Du5o.roa (hash: KsOAsqATMB5faX+K34f0JpwdheSXfw1xCfbke6T4Rxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:7e:a9:c2:84:f0:df:25:69:5a:ec:6f:24:eb:7d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Validity
Not Before: Sep 23 09:00:25 2026 GMT
Not After : Sep 24 09:00:25 2026 GMT
Subject: CN=d6ce06e68c5252628e3ed445e15f7eae8bf6ed61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6c:b1:92:57:b0:32:0a:b8:96:00:34:a6:3c:
a8:c2:fc:98:2e:c5:cd:a8:3b:55:db:a9:2f:84:1a:
83:5f:43:84:8d:af:c5:b7:96:c7:29:af:1f:7d:68:
0e:80:e8:7d:51:d1:25:f6:68:ca:60:e6:11:cb:68:
91:4c:5b:bd:a8:98:35:3e:de:7d:c4:60:04:d9:26:
45:f2:1e:52:5d:1a:14:26:9b:3a:1d:94:74:10:88:
f5:63:18:4a:ed:55:dd:2c:b4:29:c7:39:1a:e4:35:
32:81:c7:ec:24:35:b5:da:84:0b:f8:fd:27:7f:03:
d9:a8:be:ee:01:9b:d0:30:be:b7:11:ea:a9:ed:d6:
3e:c0:1b:1d:a8:a6:66:21:a0:e1:c3:fc:fc:3a:79:
8a:4a:ca:ea:02:64:f0:4f:80:dc:f0:6b:26:d2:ca:
9c:45:6c:eb:5c:84:26:2f:97:30:18:19:39:43:40:
60:5d:00:38:4b:b1:ac:24:77:dd:0b:06:6f:05:96:
dd:de:69:7e:6d:c1:f0:63:fc:b5:fe:d7:24:84:3b:
64:78:fa:70:a1:c9:a3:cc:84:42:b9:1f:51:a7:f0:
b0:70:8a:de:e8:5b:bf:83:7d:a2:67:1d:73:c4:7b:
55:85:de:4d:90:b0:4a:23:8c:02:43:b3:75:b0:8d:
3a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:CE:06:E6:8C:52:52:62:8E:3E:D4:45:E1:5F:7E:AE:8B:F6:ED:61
X509v3 Authority Key Identifier:
keyid:DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:6e:80:fe:c3:c1:a8:b0:de:0f:fc:96:b3:e7:7e:aa:e6:b5:
f4:5a:08:06:72:56:29:f2:e3:c5:1b:59:5e:4f:c4:46:a7:79:
27:c8:66:ab:91:c8:8c:47:06:47:a3:16:c0:be:ee:aa:4d:a2:
01:10:0e:32:ef:0c:31:b6:f5:14:ee:f6:7a:1c:d1:48:77:c4:
1c:66:f7:19:d1:56:b2:26:80:54:16:fb:a2:c8:80:b4:46:da:
03:61:db:03:a9:45:c0:ec:d7:2a:bf:33:9b:d1:f3:d8:02:81:
a0:21:6d:45:8c:0d:f0:a7:72:72:45:63:ff:b6:3c:01:3e:2e:
83:79:e1:bb:06:15:d9:53:86:43:bd:59:ae:55:0d:03:78:eb:
38:28:3f:9d:3b:40:57:c1:c1:92:aa:ac:1c:33:74:3a:d8:b4:
93:7e:8b:38:06:91:d5:d6:bc:7d:50:53:17:e6:2f:a5:c7:34:
b5:83:66:22:43:50:09:1d:da:c9:26:fb:12:51:d3:60:c0:2f:
5c:22:0c:d4:cd:e4:97:d2:8f:0a:00:d5:48:f0:32:2f:99:7e:
32:01:9f:78:df:93:f0:fc:59:d9:0e:dc:f2:57:dd:2a:28:54:
9a:68:f8:4e:3c:9d:5e:0a:f7:98:a2:06:6c:e8:07:0e:38:f8:
7b:bc:ea:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:43:35 2026 by rpki-client