Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
File: 3AKxj1iKULknT-NGn_i9ShZJ100.mft (raw, json)
Hash identifier: EDGcxR4t2e/KfYAQVP7n3TFV2tiewtLpou/tZmbIFTI=
Subject key identifier: 39:D8:89:D7:32:F4:F4:F8:66:60:09:B5:3B:56:C2:73:52:CE:8C:BA
Authority key identifier: DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
Certificate issuer: /CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Certificate serial: 019D3A1CB9B8C3408A4D0F0B3F91C160BA63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
Manifest number: 18AE
Signing time: Sun 29 Mar 2026 15:00:54 +0000
Manifest this update: Sun 29 Mar 2026 15:00:54 +0000
Manifest next update: Mon 30 Mar 2026 15:00:54 +0000
Files and hashes: 1: 3AKxj1iKULknT-NGn_i9ShZJ100.crl (hash: YUX+EVkTENI3YAd8OLp3C/C9eCIgjrKLNzsJM86OjMU=)
2: 5MACIMLMvtPjGpSWrTYPYy_0oeU.roa (hash: EJ2Ys+JT+kVU1P9zpwQaUVwemNt/L+f0Ob7zlEMUJBU=)
3: FqC8RktCc6qY8oz3rsiy732Ts4M.roa (hash: mdIDtx+4TjAohQu4FVCDn+GhhrjJpOPYnS4XF8UoaSY=)
4: PoFDIU-GQDMslzRKtEfKc0Rn8wA.roa (hash: ralmG0z6Jbcj96LF3CDF1zDKHmm0v2Ba5LksOkUYKg0=)
5: S66f2Gul6I0fFXwc0F6Uwsxne9U.roa (hash: NavMROKg+QjDM1u2vWxChfQLt+8NvkpuOrMKOryHnhk=)
6: Tk4BECob0wzGz8tktoazFqndFEA.roa (hash: vMnbx4+7QIXDr3/1NvPZgl+14y+ZGEXmNQb8sHi4+W0=)
7: VTLJBTDTIQ6Ju5e9btomtcWeLMo.roa (hash: yTXCJ9BMk8u2/KPcWBkJ56YpIjPo0JdRR1lnpXanzc8=)
8: geCL9RPAUHreYWx88VAnuY9Du5o.roa (hash: KsOAsqATMB5faX+K34f0JpwdheSXfw1xCfbke6T4Rxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:b9:b8:c3:40:8a:4d:0f:0b:3f:91:c1:60:ba:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Validity
Not Before: Mar 29 15:00:54 2026 GMT
Not After : Mar 30 15:00:54 2026 GMT
Subject: CN=39d889d732f4f4f8666009b53b56c27352ce8cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:88:66:d7:a4:7a:58:db:b5:8b:6f:7b:99:87:
96:70:63:e0:b5:f3:9c:df:a8:19:55:b5:4e:c1:ff:
6a:71:13:ad:9c:5f:14:c3:b2:d8:69:cf:85:3f:81:
d4:b9:1c:d0:90:17:03:33:8f:d9:9f:01:cf:4d:5d:
4c:88:21:d6:e2:06:a1:15:30:63:45:80:9e:b2:25:
1f:f6:63:af:67:6e:60:da:75:47:99:28:68:90:0b:
9a:f1:33:a2:64:00:b5:41:a4:51:79:7d:6c:63:9e:
7a:74:2a:6b:59:79:63:74:98:ec:cd:74:fc:4a:8c:
49:26:3e:d3:2f:22:fb:7c:19:eb:b4:72:a5:fe:b8:
2f:9c:63:37:6b:c0:0c:43:bb:15:31:dc:f9:41:32:
1a:74:04:15:72:07:46:ec:3b:58:fd:68:82:8d:e4:
ff:7c:26:9e:88:8a:0d:98:c0:bb:2d:22:c3:6a:56:
fb:0d:c9:a0:72:43:fa:ea:84:1a:9b:d8:de:b2:2b:
bb:4f:0a:ba:4e:c8:08:b9:24:66:df:cd:2d:59:14:
df:68:44:68:8c:f2:ca:8d:62:ea:12:f3:10:38:cf:
18:c2:99:e1:a5:ad:82:29:3f:05:3a:6d:77:da:a7:
19:8f:23:dd:9f:56:aa:f2:46:4b:e7:2c:97:5a:db:
94:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D8:89:D7:32:F4:F4:F8:66:60:09:B5:3B:56:C2:73:52:CE:8C:BA
X509v3 Authority Key Identifier:
keyid:DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:53:9c:91:8f:58:7a:4e:60:7d:29:b5:20:5e:8f:cd:26:1f:
cf:e8:87:ed:d1:fa:59:55:d3:fc:1f:ee:22:bf:36:b1:d7:27:
43:6f:46:de:23:9b:d1:d0:1a:1e:83:10:3f:a9:80:1f:27:85:
4a:05:3e:3e:c9:40:25:40:1c:12:eb:75:e2:9e:75:6c:6d:0a:
40:84:4a:ee:81:e5:3d:6b:bb:b5:c0:30:73:6b:1a:58:65:72:
dc:fe:17:53:1c:88:73:6f:52:ee:57:9c:d9:19:29:89:7e:ef:
72:0f:35:5a:69:2b:4f:c1:07:11:aa:a5:af:09:19:37:cc:8a:
5a:15:32:b9:26:7c:37:18:c3:3a:f4:12:50:77:46:b9:2c:c1:
68:a8:b7:a6:63:59:0a:01:9f:f4:c2:09:20:a9:a0:5c:8b:94:
96:9d:9d:53:26:4e:45:1f:e4:f7:d2:a8:ec:92:6d:22:39:2f:
00:fe:f7:06:61:0a:75:10:cb:17:45:15:f1:19:7c:a5:08:1b:
f3:d6:b1:97:b8:d3:9a:b9:d9:ff:2f:84:82:cc:52:71:96:99:
3f:2a:ca:81:fd:89:df:7b:3b:ae:d6:2f:78:d5:fb:ee:16:6a:
87:51:d4:d1:e6:61:64:7c:e9:f8:ef:cd:c9:c2:75:6a:4a:2f:
1c:f3:0d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:06:10 2026 by rpki-client