Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
File: 3AKxj1iKULknT-NGn_i9ShZJ100.mft (raw, json)
Hash identifier: bN3KdMP7/W/tDSiqS63b/kwMwjkgEjDKv7PuEWB6Bdk=
Subject key identifier: 81:5B:8D:56:DF:4A:7C:4B:79:06:7B:C2:1B:D3:5C:01:93:01:24:B4
Authority key identifier: DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
Certificate issuer: /CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Certificate serial: 01A0103D65A3C5E448CA84404D31CF3B6EBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
Manifest number: 1A26
Signing time: Mon 17 Aug 2026 15:00:54 +0000
Manifest this update: Mon 17 Aug 2026 15:00:54 +0000
Manifest next update: Tue 18 Aug 2026 15:00:54 +0000
Files and hashes: 1: 3AKxj1iKULknT-NGn_i9ShZJ100.crl (hash: Qeoy/HYO5E+HNmy59QZhRoxp7oiLVPLNnODCSto01Ek=)
2: 5MACIMLMvtPjGpSWrTYPYy_0oeU.roa (hash: EJ2Ys+JT+kVU1P9zpwQaUVwemNt/L+f0Ob7zlEMUJBU=)
3: FqC8RktCc6qY8oz3rsiy732Ts4M.roa (hash: mdIDtx+4TjAohQu4FVCDn+GhhrjJpOPYnS4XF8UoaSY=)
4: PoFDIU-GQDMslzRKtEfKc0Rn8wA.roa (hash: ralmG0z6Jbcj96LF3CDF1zDKHmm0v2Ba5LksOkUYKg0=)
5: S66f2Gul6I0fFXwc0F6Uwsxne9U.roa (hash: NavMROKg+QjDM1u2vWxChfQLt+8NvkpuOrMKOryHnhk=)
6: Tk4BECob0wzGz8tktoazFqndFEA.roa (hash: vMnbx4+7QIXDr3/1NvPZgl+14y+ZGEXmNQb8sHi4+W0=)
7: VTLJBTDTIQ6Ju5e9btomtcWeLMo.roa (hash: yTXCJ9BMk8u2/KPcWBkJ56YpIjPo0JdRR1lnpXanzc8=)
8: geCL9RPAUHreYWx88VAnuY9Du5o.roa (hash: KsOAsqATMB5faX+K34f0JpwdheSXfw1xCfbke6T4Rxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:10:3d:65:a3:c5:e4:48:ca:84:40:4d:31:cf:3b:6e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Validity
Not Before: Aug 17 15:00:54 2026 GMT
Not After : Aug 18 15:00:54 2026 GMT
Subject: CN=815b8d56df4a7c4b79067bc21bd35c01930124b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:25:f1:bd:67:ac:c1:fb:ea:76:af:00:89:24:
b5:88:c6:7e:7b:90:79:ff:84:2c:18:8b:9c:ac:bb:
71:13:e6:e0:c6:2b:5f:05:25:89:cd:ea:b7:5a:7c:
bd:7b:61:b7:b5:0f:cc:4a:c5:94:02:92:6b:4c:d7:
e1:14:44:07:c9:eb:23:26:c6:b1:e1:b5:1f:60:51:
3b:5e:bb:cb:6a:96:da:ee:94:67:81:cb:2a:8a:07:
14:1d:da:b5:c6:8a:c1:75:86:db:eb:0a:5d:53:9c:
03:f3:b2:25:24:12:f2:9f:bd:60:91:e4:b1:8a:08:
99:b2:43:49:44:8c:c4:dc:85:b1:e3:44:e1:a2:de:
c1:f2:64:b9:c3:4c:1e:91:69:a9:19:85:24:d3:5e:
62:22:a9:28:94:2f:ab:ee:4e:9b:0e:4b:7c:ae:0a:
f8:47:f2:3a:99:05:b3:b3:a2:4b:66:15:fa:87:b1:
c3:ed:f0:bc:3c:ad:b6:d9:91:d5:13:e5:dc:5e:1e:
bd:d6:cf:3e:b0:c2:32:bf:73:a7:e4:09:c8:9e:96:
54:2c:98:73:ff:fa:85:4c:2f:b3:87:8a:36:c3:44:
ee:40:ee:34:1a:00:51:fc:91:c4:d0:45:52:b8:b0:
60:e7:d0:1b:b9:54:e6:86:e4:41:3b:a2:75:78:2c:
fc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:5B:8D:56:DF:4A:7C:4B:79:06:7B:C2:1B:D3:5C:01:93:01:24:B4
X509v3 Authority Key Identifier:
keyid:DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ca:7b:82:1c:3c:10:5a:1e:12:34:ab:7f:8e:bb:77:5c:94:
f4:14:7c:f4:bd:3d:bb:71:62:a8:e7:4d:64:f0:9f:cf:0b:f2:
a6:55:95:b6:f3:54:45:18:22:33:b8:e4:73:47:84:09:a1:e0:
c4:2f:ef:7f:ad:fd:74:e7:a8:8a:1d:bb:28:04:18:d4:26:84:
24:45:ba:50:bd:eb:7d:74:10:6c:3f:1b:05:94:d9:05:1e:31:
1f:a8:8f:8a:c6:9f:34:eb:c5:6c:a0:02:cb:b1:bb:68:2c:db:
60:70:82:19:9e:9f:44:80:8e:33:e1:01:8a:be:30:86:56:11:
ab:14:fb:40:19:c5:23:ee:34:c3:bd:64:b7:d0:8c:fb:76:0d:
ff:0a:a1:78:ad:72:f9:76:c1:c5:8d:c9:2a:df:c1:79:c8:41:
f7:19:48:f8:fd:ca:5d:7b:36:d4:5f:60:39:5d:2a:3d:89:a6:
cc:e5:aa:ec:87:05:23:3c:3b:2c:e3:da:a4:f8:79:f0:35:4e:
3e:18:29:54:0c:f0:50:ca:1c:b3:b8:08:6e:8b:06:03:51:68:
2c:85:81:2e:00:63:94:50:73:55:8a:71:fd:8f:a5:16:1d:0a:
5d:56:5b:b9:22:9c:67:21:a5:31:14:f8:20:70:72:6f:6e:dd:
ef:64:a8:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAQPWWjxeRIyoRATTHPO268MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMDJiMThmNTg4YTUwYjkyNzRmZTM0NjlmZjhiZDRhMTY0
OWQ3NGQwHhcNMjYwODE3MTUwMDU0WhcNMjYwODE4MTUwMDU0WjAzMTEwLwYDVQQD
Eyg4MTViOGQ1NmRmNGE3YzRiNzkwNjdiYzIxYmQzNWMwMTkzMDEyNGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5SXxvWeswfvqdq8AiSS1iMZ+e5B5
/4QsGIucrLtxE+bgxitfBSWJzeq3Wny9e2G3tQ/MSsWUApJrTNfhFEQHyesjJsax
4bUfYFE7XrvLapba7pRngcsqigcUHdq1xorBdYbb6wpdU5wD87IlJBLyn71gkeSx
igiZskNJRIzE3IWx40Thot7B8mS5w0wekWmpGYUk015iIqkolC+r7k6bDkt8rgr4
R/I6mQWzs6JLZhX6h7HD7fC8PK222ZHVE+XcXh691s8+sMIyv3On5AnInpZULJhz
//qFTC+zh4o2w0TuQO40GgBR/JHE0EVSuLBg59AbuVTmhuRBO6J1eCz8TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIFbjVbfSnxLeQZ7whvTXAGTASS0MB8GA1UdIwQY
MBaAFNwCsY9YilC5J0/jRp/4vUoWSddNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0FLeGoxaUtVTGtuVC1OR25faTlTaFpKMTAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jODYxYzgtYzg5YS00MDQzLWEwMmQt
NjY0ZjA0ZDJhNjhkLzEvM0FLeGoxaUtVTGtuVC1OR25faTlTaFpKMTAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9jODYxYzgtYzg5YS00MDQzLWEwMmQtNjY0ZjA0ZDJhNjhk
LzEvM0FLeGoxaUtVTGtuVC1OR25faTlTaFpKMTAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQMp7ghw8
EFoeEjSrf467d1yU9BR89L09u3FiqOdNZPCfzwvyplWVtvNURRgiM7jkc0eECaHg
xC/vf639dOeoih27KAQY1CaEJEW6UL3rfXQQbD8bBZTZBR4xH6iPisafNOvFbKAC
y7G7aCzbYHCCGZ6fRICOM+EBir4whlYRqxT7QBnFI+40w71kt9CM+3YN/wqheK1y
+XbBxY3JKt/BechB9xlI+P3KXXs21F9gOV0qPYmmzOWq7IcFIzw7LOPapPh58DVO
PhgpVAzwUMocs7gIbosGA1FoLIWBLgBjlFBzVYpx/Y+lFh0KXVZbuSKcZyGlMRT4
IHByb27d72So5w==
-----END CERTIFICATE-----
Generated at Mon Aug 17 21:18:22 2026 by rpki-client