Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
File: 3AKxj1iKULknT-NGn_i9ShZJ100.mft (raw, json)
Hash identifier: sZ2oFKu6ax7dtvUch9xXfBADmE1u2e3trwyrvma/CUI=
Subject key identifier: 18:80:2B:85:B3:B2:6F:E7:BE:7C:2B:D0:35:9A:B7:50:30:E8:ED:1B
Authority key identifier: DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
Certificate issuer: /CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Certificate serial: 019EC035F21332EFFB378B049761306BF716
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
Manifest number: 1978
Signing time: Sat 13 Jun 2026 09:00:21 +0000
Manifest this update: Sat 13 Jun 2026 09:00:21 +0000
Manifest next update: Sun 14 Jun 2026 09:00:21 +0000
Files and hashes: 1: 3AKxj1iKULknT-NGn_i9ShZJ100.crl (hash: FFySeirkLN3RiBFCHkDvKv9oulJ6j1ap9x+K07LuWSE=)
2: 5MACIMLMvtPjGpSWrTYPYy_0oeU.roa (hash: EJ2Ys+JT+kVU1P9zpwQaUVwemNt/L+f0Ob7zlEMUJBU=)
3: FqC8RktCc6qY8oz3rsiy732Ts4M.roa (hash: mdIDtx+4TjAohQu4FVCDn+GhhrjJpOPYnS4XF8UoaSY=)
4: PoFDIU-GQDMslzRKtEfKc0Rn8wA.roa (hash: ralmG0z6Jbcj96LF3CDF1zDKHmm0v2Ba5LksOkUYKg0=)
5: S66f2Gul6I0fFXwc0F6Uwsxne9U.roa (hash: NavMROKg+QjDM1u2vWxChfQLt+8NvkpuOrMKOryHnhk=)
6: Tk4BECob0wzGz8tktoazFqndFEA.roa (hash: vMnbx4+7QIXDr3/1NvPZgl+14y+ZGEXmNQb8sHi4+W0=)
7: VTLJBTDTIQ6Ju5e9btomtcWeLMo.roa (hash: yTXCJ9BMk8u2/KPcWBkJ56YpIjPo0JdRR1lnpXanzc8=)
8: geCL9RPAUHreYWx88VAnuY9Du5o.roa (hash: KsOAsqATMB5faX+K34f0JpwdheSXfw1xCfbke6T4Rxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:35:f2:13:32:ef:fb:37:8b:04:97:61:30:6b:f7:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Validity
Not Before: Jun 13 09:00:21 2026 GMT
Not After : Jun 14 09:00:21 2026 GMT
Subject: CN=18802b85b3b26fe7be7c2bd0359ab75030e8ed1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:26:fc:38:d4:46:8f:e7:16:f1:d4:6a:92:1c:
77:f0:f4:b3:a2:9e:85:93:15:47:9a:50:92:66:af:
b2:d3:71:e0:0d:c5:e3:4d:64:61:8c:c1:5e:a1:69:
e8:ac:3b:0f:64:05:6d:17:dc:bc:a3:ad:3c:bc:dd:
e9:bd:85:e3:83:ea:d0:04:ea:bb:4d:1b:c7:21:fc:
65:ee:db:a7:02:01:5f:91:14:c5:41:08:b1:7d:03:
72:ad:89:f6:ac:2a:02:58:6d:d3:4c:c1:3b:fe:da:
ca:6d:2f:62:d7:c0:43:cf:e2:7c:6a:b4:7a:d1:5f:
48:9f:7d:74:5e:0f:37:b1:4e:9a:8c:65:6e:02:65:
5f:62:5e:e3:5c:0b:b5:86:c4:de:4b:0e:f9:c5:e9:
90:8d:a0:7a:8c:7b:35:c3:bb:37:cf:07:52:33:da:
fd:3a:59:28:dd:f0:f4:cd:f6:11:09:1e:00:59:fb:
82:c4:17:98:78:1e:01:b6:53:da:37:c6:01:63:9f:
05:2d:32:82:f8:68:2a:8b:8d:a4:b0:d2:8e:70:b8:
73:df:56:bf:82:25:7b:3a:23:90:15:4d:c1:7f:19:
b2:e6:e9:9f:d0:8f:08:e7:d6:b0:2c:0f:ff:3a:1f:
c3:e3:f4:c4:f6:50:f2:cd:ca:d9:fb:f3:ad:15:d6:
ac:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:80:2B:85:B3:B2:6F:E7:BE:7C:2B:D0:35:9A:B7:50:30:E8:ED:1B
X509v3 Authority Key Identifier:
keyid:DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:b4:65:99:38:70:d6:71:81:0d:cf:3f:06:ea:e7:41:58:cd:
b8:ac:88:da:57:e2:36:be:b6:e7:2f:65:fa:d1:f2:d5:cb:0a:
af:db:99:c2:21:03:62:90:e3:7c:c7:d0:e1:75:1f:92:c8:2e:
e6:38:36:cf:3e:5c:cf:d8:ab:d9:d7:ac:d8:5c:74:22:44:3e:
c5:6b:46:f3:2d:54:25:84:17:ef:35:61:51:20:a3:73:30:7e:
92:cc:f0:c8:53:a6:53:99:2d:37:b0:1a:d7:9d:31:a5:d1:9c:
30:12:6f:8a:1b:29:e6:99:49:7d:c0:63:85:35:6d:0b:9f:18:
1a:66:43:58:b7:83:6f:60:6c:6c:55:d6:2d:c6:b3:4a:70:69:
1f:2f:66:db:f2:2f:20:3a:04:aa:c7:8a:75:42:7a:a4:20:52:
25:91:93:7a:e6:44:46:3e:21:25:09:53:65:0c:51:a1:bf:02:
b0:e8:51:50:07:4b:f8:a2:77:a2:3b:fc:c8:01:f1:15:f7:90:
3f:31:1b:62:99:67:89:9b:dc:f6:52:24:db:75:e2:ad:e9:68:
ce:87:41:2c:d0:65:09:94:3d:96:ad:cd:64:66:c4:58:0c:a5:
00:3d:d5:e6:ee:b8:b6:48:5c:95:cb:93:e1:0e:35:cf:ea:42:
c6:7d:5c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:58:09 2026 by rpki-client