Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
File: 3AKxj1iKULknT-NGn_i9ShZJ100.mft (raw, json)
Hash identifier: rFwvenGRSm7QfsYw0lSv8O+rlalJhx4jv1iqk9xHSns=
Subject key identifier: CA:2D:41:B7:BC:17:58:A6:7E:3F:04:2D:06:69:52:C6:FF:C8:A7:3C
Authority key identifier: DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
Certificate issuer: /CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Certificate serial: 019F90C79243065DD5B497754970FBD2D005
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
Manifest number: 19E4
Signing time: Thu 23 Jul 2026 21:00:25 +0000
Manifest this update: Thu 23 Jul 2026 21:00:25 +0000
Manifest next update: Fri 24 Jul 2026 21:00:25 +0000
Files and hashes: 1: 3AKxj1iKULknT-NGn_i9ShZJ100.crl (hash: b8kdWdYAZaAOxmBWPt7fsRsaTDVEgGrXlWExgySBc7A=)
2: 5MACIMLMvtPjGpSWrTYPYy_0oeU.roa (hash: EJ2Ys+JT+kVU1P9zpwQaUVwemNt/L+f0Ob7zlEMUJBU=)
3: FqC8RktCc6qY8oz3rsiy732Ts4M.roa (hash: mdIDtx+4TjAohQu4FVCDn+GhhrjJpOPYnS4XF8UoaSY=)
4: PoFDIU-GQDMslzRKtEfKc0Rn8wA.roa (hash: ralmG0z6Jbcj96LF3CDF1zDKHmm0v2Ba5LksOkUYKg0=)
5: S66f2Gul6I0fFXwc0F6Uwsxne9U.roa (hash: NavMROKg+QjDM1u2vWxChfQLt+8NvkpuOrMKOryHnhk=)
6: Tk4BECob0wzGz8tktoazFqndFEA.roa (hash: vMnbx4+7QIXDr3/1NvPZgl+14y+ZGEXmNQb8sHi4+W0=)
7: VTLJBTDTIQ6Ju5e9btomtcWeLMo.roa (hash: yTXCJ9BMk8u2/KPcWBkJ56YpIjPo0JdRR1lnpXanzc8=)
8: geCL9RPAUHreYWx88VAnuY9Du5o.roa (hash: KsOAsqATMB5faX+K34f0JpwdheSXfw1xCfbke6T4Rxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:92:43:06:5d:d5:b4:97:75:49:70:fb:d2:d0:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Validity
Not Before: Jul 23 21:00:25 2026 GMT
Not After : Jul 24 21:00:25 2026 GMT
Subject: CN=ca2d41b7bc1758a67e3f042d066952c6ffc8a73c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:4e:2d:6b:e0:65:b4:65:f2:a2:e0:6d:9a:1f:
5e:75:bf:88:af:e8:ee:bc:2c:0b:e9:8a:02:f0:a0:
a9:44:5e:db:ac:37:32:75:31:e6:9e:94:ee:a0:8e:
b1:0f:89:79:ff:fd:aa:f1:75:fd:6c:90:45:28:0b:
37:44:ae:b9:40:b9:b3:7d:ff:a2:a2:2d:bb:99:07:
1b:01:6f:25:d9:11:95:bd:5d:50:de:1f:38:26:1e:
1a:44:2b:5a:ed:20:23:f3:67:e2:a5:c7:e5:22:c4:
80:c3:dd:b7:5c:ee:b2:d8:bf:96:94:c3:9a:f2:c0:
81:f6:16:83:bf:f9:24:a1:10:fa:93:f1:a0:b3:85:
91:dc:20:84:f6:75:e2:60:5b:d0:c8:57:80:0d:ab:
d9:b2:a1:e4:e1:f7:a3:03:b8:75:72:d6:40:a3:05:
18:a0:6f:77:7a:b4:13:f1:35:04:ce:f2:63:c7:3e:
9f:28:d5:7c:3b:db:13:a9:e3:93:16:ae:4a:00:36:
d6:41:dd:af:61:e0:4f:c6:4a:9a:d6:14:19:28:06:
40:b3:d4:0b:1e:2a:87:89:8e:5a:d5:cc:e6:14:5a:
db:23:53:db:89:b1:ee:32:b1:81:84:fa:d2:e8:8f:
b6:52:76:23:b1:d0:85:fe:d9:93:8a:c8:8d:85:97:
c2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2D:41:B7:BC:17:58:A6:7E:3F:04:2D:06:69:52:C6:FF:C8:A7:3C
X509v3 Authority Key Identifier:
keyid:DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:52:b0:4c:fc:30:fc:c4:c8:a0:84:eb:61:23:c2:69:4a:d9:
c7:71:72:7d:62:8d:6d:fa:1b:ab:b5:51:0c:1f:e3:c1:5e:4c:
f0:99:f8:c0:94:4f:20:71:57:b3:ad:82:db:c0:5f:ce:79:59:
b0:eb:69:a7:fe:5e:85:be:d3:af:df:50:2e:08:ad:92:7f:25:
42:a6:b3:69:0e:46:16:b1:ed:8a:3a:a9:f3:12:c2:1e:ff:5e:
6c:fc:5e:99:17:ba:fd:63:13:92:e3:39:cd:b4:db:91:b2:5c:
86:92:23:02:c8:af:7a:3a:34:32:c9:e4:6d:2b:ff:10:e1:19:
c5:9d:4c:7c:f6:8f:77:f7:fe:80:18:d2:d3:37:36:70:da:b0:
36:a8:1b:35:e0:46:b4:01:fb:9f:b1:b3:32:26:c7:1d:0f:ad:
e7:77:9c:9d:77:53:da:f6:0d:5a:0b:ef:63:7d:d5:7c:54:20:
5e:14:06:0f:de:33:af:49:cb:2e:27:db:94:2c:58:f4:12:4f:
b9:3f:c3:30:9f:78:f3:18:82:b7:f2:25:ec:86:bc:be:bf:2b:
0f:4a:1f:3d:1d:bb:3c:2a:17:53:d4:d9:5c:57:14:bf:b8:96:
37:29:33:0d:ad:67:0b:6d:7b:72:cc:f8:08:89:e5:da:5c:7d:
1b:f9:d0:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Qx5JDBl3VtJd1SXD70tAFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMDJiMThmNTg4YTUwYjkyNzRmZTM0NjlmZjhiZDRhMTY0
OWQ3NGQwHhcNMjYwNzIzMjEwMDI1WhcNMjYwNzI0MjEwMDI1WjAzMTEwLwYDVQQD
EyhjYTJkNDFiN2JjMTc1OGE2N2UzZjA0MmQwNjY5NTJjNmZmYzhhNzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiU4ta+BltGXyouBtmh9edb+Ir+ju
vCwL6YoC8KCpRF7brDcydTHmnpTuoI6xD4l5//2q8XX9bJBFKAs3RK65QLmzff+i
oi27mQcbAW8l2RGVvV1Q3h84Jh4aRCta7SAj82fipcflIsSAw923XO6y2L+WlMOa
8sCB9haDv/kkoRD6k/Ggs4WR3CCE9nXiYFvQyFeADavZsqHk4fejA7h1ctZAowUY
oG93erQT8TUEzvJjxz6fKNV8O9sTqeOTFq5KADbWQd2vYeBPxkqa1hQZKAZAs9QL
HiqHiY5a1czmFFrbI1PbibHuMrGBhPrS6I+2UnYjsdCF/tmTisiNhZfCmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMotQbe8F1imfj8ELQZpUsb/yKc8MB8GA1UdIwQY
MBaAFNwCsY9YilC5J0/jRp/4vUoWSddNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0FLeGoxaUtVTGtuVC1OR25faTlTaFpKMTAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jODYxYzgtYzg5YS00MDQzLWEwMmQt
NjY0ZjA0ZDJhNjhkLzEvM0FLeGoxaUtVTGtuVC1OR25faTlTaFpKMTAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9jODYxYzgtYzg5YS00MDQzLWEwMmQtNjY0ZjA0ZDJhNjhk
LzEvM0FLeGoxaUtVTGtuVC1OR25faTlTaFpKMTAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJVKwTPww
/MTIoITrYSPCaUrZx3FyfWKNbfobq7VRDB/jwV5M8Jn4wJRPIHFXs62C28BfznlZ
sOtpp/5ehb7Tr99QLgitkn8lQqazaQ5GFrHtijqp8xLCHv9ebPxemRe6/WMTkuM5
zbTbkbJchpIjAsivejo0MsnkbSv/EOEZxZ1MfPaPd/f+gBjS0zc2cNqwNqgbNeBG
tAH7n7GzMibHHQ+t53ecnXdT2vYNWgvvY33VfFQgXhQGD94zr0nLLifblCxY9BJP
uT/DMJ948xiCt/Il7Ia8vr8rD0ofPR27PCoXU9TZXFcUv7iWNykzDa1nC217csz4
CInl2lx9G/nQ0w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:06:27 2026 by rpki-client