Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
File: 3AKxj1iKULknT-NGn_i9ShZJ100.mft (raw, json)
Hash identifier: Xqqg64XJuSB2jv2HeT0izKQMG9Ol+pj51y0ENsyNUmE=
Subject key identifier: 74:A6:4A:A1:A4:0A:31:25:C1:79:8E:68:71:AE:C3:94:3B:81:7B:F6
Authority key identifier: DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
Certificate issuer: /CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Certificate serial: 019F287F99233E8061003F776132904FCE4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
Manifest number: 19AE
Signing time: Fri 03 Jul 2026 15:01:18 +0000
Manifest this update: Fri 03 Jul 2026 15:01:18 +0000
Manifest next update: Sat 04 Jul 2026 15:01:18 +0000
Files and hashes: 1: 3AKxj1iKULknT-NGn_i9ShZJ100.crl (hash: FIqTQ17rsRu745wdMQ7n037M2wAiM6t3Q2cfjU/Wipk=)
2: 5MACIMLMvtPjGpSWrTYPYy_0oeU.roa (hash: EJ2Ys+JT+kVU1P9zpwQaUVwemNt/L+f0Ob7zlEMUJBU=)
3: FqC8RktCc6qY8oz3rsiy732Ts4M.roa (hash: mdIDtx+4TjAohQu4FVCDn+GhhrjJpOPYnS4XF8UoaSY=)
4: PoFDIU-GQDMslzRKtEfKc0Rn8wA.roa (hash: ralmG0z6Jbcj96LF3CDF1zDKHmm0v2Ba5LksOkUYKg0=)
5: S66f2Gul6I0fFXwc0F6Uwsxne9U.roa (hash: NavMROKg+QjDM1u2vWxChfQLt+8NvkpuOrMKOryHnhk=)
6: Tk4BECob0wzGz8tktoazFqndFEA.roa (hash: vMnbx4+7QIXDr3/1NvPZgl+14y+ZGEXmNQb8sHi4+W0=)
7: VTLJBTDTIQ6Ju5e9btomtcWeLMo.roa (hash: yTXCJ9BMk8u2/KPcWBkJ56YpIjPo0JdRR1lnpXanzc8=)
8: geCL9RPAUHreYWx88VAnuY9Du5o.roa (hash: KsOAsqATMB5faX+K34f0JpwdheSXfw1xCfbke6T4Rxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:28:7f:99:23:3e:80:61:00:3f:77:61:32:90:4f:ce:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Validity
Not Before: Jul 3 15:01:18 2026 GMT
Not After : Jul 4 15:01:18 2026 GMT
Subject: CN=74a64aa1a40a3125c1798e6871aec3943b817bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3a:48:86:43:8b:df:35:15:b2:0e:fe:ba:d2:
03:b2:61:e0:b1:d9:68:47:ad:25:54:8d:51:ea:f8:
31:54:27:c0:ca:9b:99:80:49:b3:a9:c8:ba:ca:a9:
55:f2:1c:f6:4a:37:75:5e:96:fa:05:41:d7:e3:b7:
e5:d0:2f:fd:c2:b3:a7:54:d3:bb:88:00:d7:15:7c:
eb:65:1f:9f:a2:84:a2:32:9a:7e:7c:6a:94:2d:db:
ac:fb:12:52:db:f1:d7:ef:31:6e:04:ae:9c:98:bc:
18:4a:dd:81:5f:84:b9:f4:10:90:c2:02:78:ac:f9:
48:b6:94:8b:20:c7:c5:d4:18:8f:1c:f0:82:74:ab:
3e:4e:32:4a:02:b7:81:de:34:cf:9e:b2:42:7d:fb:
f9:fb:62:e1:1e:2a:a6:a8:46:83:9c:d5:83:2c:b7:
33:2a:ea:69:4e:1e:01:99:14:26:07:ad:18:26:b9:
45:91:74:0e:7a:4e:24:0e:ab:90:5d:4a:5a:0a:d1:
61:c1:57:1e:c5:26:e7:6c:55:4b:fa:5c:dd:e7:c5:
09:7e:f8:e5:62:52:bc:63:30:f4:7c:ec:60:7c:07:
6b:a0:5c:d0:57:3b:7a:89:bd:2f:19:87:b4:7e:8e:
7f:6d:68:cf:4a:f2:61:ab:cc:3d:f6:16:85:3b:3d:
31:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A6:4A:A1:A4:0A:31:25:C1:79:8E:68:71:AE:C3:94:3B:81:7B:F6
X509v3 Authority Key Identifier:
keyid:DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:d0:7b:4e:c0:e8:59:57:e9:24:16:91:a2:e4:80:6e:58:f5:
e5:d8:bf:a1:e5:c7:0a:d8:28:87:10:44:bc:61:ca:de:bb:59:
cc:f9:e5:38:84:f9:9c:bd:65:86:b9:2b:5f:d5:40:59:9f:23:
82:64:00:8e:a3:4e:b4:58:55:7b:71:5a:04:7e:ca:49:46:e6:
19:82:1c:57:b1:ea:eb:07:7d:19:dc:61:ac:08:2d:ba:aa:b2:
df:9d:6c:7f:d3:86:ec:b1:8b:9e:2a:fa:e0:43:54:f6:20:40:
4b:61:12:ca:b4:c1:75:0d:aa:e7:f7:a7:2c:0a:42:0e:f8:25:
35:53:61:d7:13:84:59:0f:d4:b7:62:6c:55:ee:99:f9:db:09:
e7:24:d2:6d:63:b1:8e:09:d2:e4:6a:fd:80:be:c4:7a:cc:a2:
a9:24:04:9f:e4:fd:31:83:e8:07:78:45:4a:0f:9b:7b:da:7d:
9d:cd:53:08:c2:9c:45:d0:92:11:d1:49:38:db:f9:cb:92:a9:
60:8e:e1:1f:25:a0:46:fc:fb:bf:70:34:0e:88:6f:33:5b:c0:
e5:6f:ce:f8:c0:31:d4:53:78:c2:42:22:f4:16:ce:1d:75:6e:
1b:08:99:80:0b:66:52:fa:5d:cb:53:0b:e3:8e:f9:15:c2:ac:
f0:ad:ef:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 17:38:58 2026 by rpki-client