Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
File: 3AKxj1iKULknT-NGn_i9ShZJ100.mft (raw, json)
Hash identifier: 724FyxD1Lit8z85yEnKM62dyGtFi6k88GMBS8LjjWdg=
Subject key identifier: 84:A7:2E:96:92:49:EC:0A:9F:DC:E4:40:EA:69:F8:93:F4:0B:0E:4D
Authority key identifier: DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
Certificate issuer: /CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Certificate serial: 01A1130531DB9FFE8E7EB2D491A64981227D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
Manifest number: 1AAC
Signing time: Tue 06 Oct 2026 21:01:09 +0000
Manifest this update: Tue 06 Oct 2026 21:01:09 +0000
Manifest next update: Wed 07 Oct 2026 21:01:09 +0000
Files and hashes: 1: 3AKxj1iKULknT-NGn_i9ShZJ100.crl (hash: Wr5oQy4b1SHx5TFX7kKD0TmAo5glH1JvPp8XQ0n3NsQ=)
2: 5MACIMLMvtPjGpSWrTYPYy_0oeU.roa (hash: EJ2Ys+JT+kVU1P9zpwQaUVwemNt/L+f0Ob7zlEMUJBU=)
3: FqC8RktCc6qY8oz3rsiy732Ts4M.roa (hash: mdIDtx+4TjAohQu4FVCDn+GhhrjJpOPYnS4XF8UoaSY=)
4: PoFDIU-GQDMslzRKtEfKc0Rn8wA.roa (hash: ralmG0z6Jbcj96LF3CDF1zDKHmm0v2Ba5LksOkUYKg0=)
5: S66f2Gul6I0fFXwc0F6Uwsxne9U.roa (hash: NavMROKg+QjDM1u2vWxChfQLt+8NvkpuOrMKOryHnhk=)
6: Tk4BECob0wzGz8tktoazFqndFEA.roa (hash: vMnbx4+7QIXDr3/1NvPZgl+14y+ZGEXmNQb8sHi4+W0=)
7: VTLJBTDTIQ6Ju5e9btomtcWeLMo.roa (hash: yTXCJ9BMk8u2/KPcWBkJ56YpIjPo0JdRR1lnpXanzc8=)
8: geCL9RPAUHreYWx88VAnuY9Du5o.roa (hash: KsOAsqATMB5faX+K34f0JpwdheSXfw1xCfbke6T4Rxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 21:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:13:05:31:db:9f:fe:8e:7e:b2:d4:91:a6:49:81:22:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Validity
Not Before: Oct 6 21:01:09 2026 GMT
Not After : Oct 7 21:01:09 2026 GMT
Subject: CN=84a72e969249ec0a9fdce440ea69f893f40b0e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c5:7c:b1:cc:36:bd:97:4e:63:77:56:87:3f:
39:e8:c4:22:b7:3d:7c:17:2e:b0:6d:c5:fc:07:fd:
d0:83:d6:f7:81:e6:dc:ba:cc:71:f9:fa:91:19:49:
c6:ed:77:94:92:7e:84:c2:ed:30:3a:9a:36:ad:14:
d0:1d:ce:b7:95:10:b5:8e:95:2f:64:fa:c4:d1:9b:
9e:d1:45:b9:c2:c3:bf:0c:19:1c:44:3d:84:48:30:
08:4e:d0:8d:56:e2:4f:c8:61:0c:72:14:55:d1:09:
68:7e:ef:3d:7b:7c:d9:06:05:80:89:37:25:d2:02:
61:88:71:4c:c6:fd:be:2f:8b:14:9e:1c:9c:21:0b:
28:4f:f8:c7:eb:0b:bf:9d:a9:fc:e0:f0:e0:7d:d4:
ab:36:c5:1f:1d:cd:64:97:cc:6d:9d:3e:06:c5:b1:
03:e2:5b:ed:4c:1e:a5:c1:60:56:e9:0d:06:7c:86:
43:a9:26:1e:e8:b6:38:ef:f3:a7:d9:1a:f6:9c:04:
9b:fd:05:e5:74:1f:ce:cc:c6:20:1b:87:85:cb:25:
92:df:07:ba:b4:2a:51:6f:7e:f2:51:0c:8d:fd:5a:
a8:a0:91:84:d5:69:67:94:0f:05:57:ff:48:68:bb:
7e:61:16:96:09:c1:2a:c1:30:0e:04:75:ca:5f:36:
88:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A7:2E:96:92:49:EC:0A:9F:DC:E4:40:EA:69:F8:93:F4:0B:0E:4D
X509v3 Authority Key Identifier:
keyid:DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:5b:67:75:a3:7a:1f:95:a5:99:43:78:3c:eb:cc:a2:ad:88:
51:84:b7:24:45:1e:39:95:74:e6:d9:14:32:ef:fb:fd:18:78:
cc:d5:b6:d6:fe:35:25:1a:ad:01:f4:b5:49:bb:3b:3a:36:be:
62:e7:58:eb:3a:96:dd:fb:51:79:81:57:bf:bd:b0:40:66:6a:
ba:15:7b:f6:7f:80:64:e3:47:9c:5a:7c:23:15:e0:d5:ef:b1:
01:82:b7:bb:5e:e7:0a:37:88:b2:cb:17:51:b1:17:0c:23:02:
d3:32:f0:8e:1a:01:23:2e:d7:bf:7e:c7:9a:83:df:25:28:6d:
d4:7b:9b:41:03:5c:83:f2:27:41:b2:59:70:e9:65:3f:71:b2:
b0:8d:0d:30:0e:f7:01:00:fa:17:5e:50:cc:ea:0c:ae:29:da:
cc:e4:c9:ba:5c:21:e2:4e:23:1b:a6:4f:24:31:85:ec:e7:0b:
a3:2f:4e:50:b7:43:9a:21:ff:d0:8e:a7:37:0f:69:ef:ba:f1:
d6:c5:bb:57:aa:1f:a8:69:bd:f9:7f:c9:f7:59:1b:0b:3c:1f:
95:ce:72:17:26:f9:ce:f9:63:51:b4:f5:90:9f:c9:29:00:dc:
29:6d:15:d2:08:57:0f:a6:d0:03:05:f6:ab:4f:a8:b9:42:ce:
34:d8:2f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 02:36:16 2026 by rpki-client