Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
File: 3AKxj1iKULknT-NGn_i9ShZJ100.mft (raw, json)
Hash identifier: 0BrQlCX+l3VtNL5pKB6q59lc9dkSURivGXab9SMjXHo=
Subject key identifier: 0B:67:89:FD:32:DF:72:96:69:12:39:7E:07:0B:A4:F1:70:2E:1F:AC
Authority key identifier: DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
Certificate issuer: /CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Certificate serial: 019D9AAC41593E6EE51F2C0482E3927C9A2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
Manifest number: 18E0
Signing time: Fri 17 Apr 2026 09:01:13 +0000
Manifest this update: Fri 17 Apr 2026 09:01:13 +0000
Manifest next update: Sat 18 Apr 2026 09:01:13 +0000
Files and hashes: 1: 3AKxj1iKULknT-NGn_i9ShZJ100.crl (hash: iydTN2ioXpe6N4obg7eYw4w7ieBir4DV/IjJrzm+Z78=)
2: 5MACIMLMvtPjGpSWrTYPYy_0oeU.roa (hash: EJ2Ys+JT+kVU1P9zpwQaUVwemNt/L+f0Ob7zlEMUJBU=)
3: FqC8RktCc6qY8oz3rsiy732Ts4M.roa (hash: mdIDtx+4TjAohQu4FVCDn+GhhrjJpOPYnS4XF8UoaSY=)
4: PoFDIU-GQDMslzRKtEfKc0Rn8wA.roa (hash: ralmG0z6Jbcj96LF3CDF1zDKHmm0v2Ba5LksOkUYKg0=)
5: S66f2Gul6I0fFXwc0F6Uwsxne9U.roa (hash: NavMROKg+QjDM1u2vWxChfQLt+8NvkpuOrMKOryHnhk=)
6: Tk4BECob0wzGz8tktoazFqndFEA.roa (hash: vMnbx4+7QIXDr3/1NvPZgl+14y+ZGEXmNQb8sHi4+W0=)
7: VTLJBTDTIQ6Ju5e9btomtcWeLMo.roa (hash: yTXCJ9BMk8u2/KPcWBkJ56YpIjPo0JdRR1lnpXanzc8=)
8: geCL9RPAUHreYWx88VAnuY9Du5o.roa (hash: KsOAsqATMB5faX+K34f0JpwdheSXfw1xCfbke6T4Rxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:41:59:3e:6e:e5:1f:2c:04:82:e3:92:7c:9a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Validity
Not Before: Apr 17 09:01:13 2026 GMT
Not After : Apr 18 09:01:13 2026 GMT
Subject: CN=0b6789fd32df72966912397e070ba4f1702e1fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0e:5f:bd:80:94:d7:01:15:80:78:4e:f8:03:
29:72:8d:f4:d9:f1:03:cf:7e:69:8f:12:8c:c3:59:
95:3f:55:ea:36:50:ce:16:ce:b1:b4:83:13:3d:5b:
36:d2:99:56:62:b5:8a:f6:89:fa:2f:c1:d2:af:3d:
2c:0b:6e:bd:98:e0:54:33:b2:83:01:61:90:4f:dc:
ab:98:01:91:0f:7e:2e:fa:86:21:54:ce:9b:c1:19:
e7:3a:3e:88:e5:af:4a:9b:f1:f0:55:86:df:97:6d:
ea:fc:10:bf:10:d2:be:9c:3e:65:0d:2f:8c:b2:59:
a3:18:f8:83:ce:1f:a1:93:32:e9:c0:db:94:26:8e:
d7:1e:42:93:49:cd:73:3f:37:32:4e:3b:a3:01:d4:
4a:30:bf:f7:cd:cf:27:e9:56:21:ab:1d:e9:d4:36:
c1:f4:0d:c1:30:f9:2e:fc:bf:3d:2c:58:df:f4:41:
2a:27:ea:5f:f0:26:47:4b:36:f1:69:ed:f2:98:fe:
02:2c:af:a5:8e:72:bb:e7:23:1a:41:a7:92:b5:ca:
44:ad:c8:59:7b:36:dd:97:fd:e4:e8:42:b9:12:5a:
bc:4a:28:13:ff:80:57:a8:b8:4e:21:e1:55:4e:e0:
40:0f:00:24:a0:62:3b:a6:db:0e:99:57:b6:21:b4:
48:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:67:89:FD:32:DF:72:96:69:12:39:7E:07:0B:A4:F1:70:2E:1F:AC
X509v3 Authority Key Identifier:
keyid:DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:50:e8:4b:aa:ad:fd:f6:91:d5:53:0b:15:91:60:14:af:90:
03:16:24:a9:64:30:1e:38:f2:5d:ec:ae:11:c9:d0:26:ed:11:
0e:bd:be:b3:69:e4:94:ef:d5:1e:b9:0a:2c:86:a5:08:e5:02:
6f:ae:ce:97:0e:c6:09:33:75:89:a2:3d:d6:de:fa:2d:42:58:
78:4f:be:56:3c:6f:46:6a:38:6a:8b:d6:bb:3f:da:2c:ed:e6:
98:e0:a3:7d:46:b6:1a:e0:e4:96:56:b0:80:15:93:ed:fc:0b:
23:03:ae:33:d7:bd:b1:17:a5:43:5a:a2:75:81:0d:83:1d:a4:
e8:8d:fb:b5:02:5b:cc:91:07:00:ac:d7:e3:52:e9:64:ef:e5:
46:c9:0f:b2:0a:b0:c1:02:ff:9e:0b:4a:81:0a:7d:dc:a3:73:
e1:89:c8:66:1b:90:cd:48:bc:e1:9f:e2:99:23:5a:90:fc:0f:
69:09:45:b2:24:09:c2:a5:31:bf:6d:11:fa:84:35:3c:d4:80:
1b:3d:dd:6d:0f:34:17:4c:d2:82:05:17:88:29:36:99:d3:7a:
e6:eb:a2:3a:23:be:af:5c:d5:62:23:76:b7:ff:90:87:8a:68:
ca:56:53:83:c9:0e:97:91:69:ef:e8:93:33:63:1e:c7:8f:03:
0c:03:4f:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2arEFZPm7lHywEguOSfJosMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMDJiMThmNTg4YTUwYjkyNzRmZTM0NjlmZjhiZDRhMTY0
OWQ3NGQwHhcNMjYwNDE3MDkwMTEzWhcNMjYwNDE4MDkwMTEzWjAzMTEwLwYDVQQD
EygwYjY3ODlmZDMyZGY3Mjk2NjkxMjM5N2UwNzBiYTRmMTcwMmUxZmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAow5fvYCU1wEVgHhO+AMpco302fED
z35pjxKMw1mVP1XqNlDOFs6xtIMTPVs20plWYrWK9on6L8HSrz0sC269mOBUM7KD
AWGQT9yrmAGRD34u+oYhVM6bwRnnOj6I5a9Km/HwVYbfl23q/BC/ENK+nD5lDS+M
slmjGPiDzh+hkzLpwNuUJo7XHkKTSc1zPzcyTjujAdRKML/3zc8n6VYhqx3p1DbB
9A3BMPku/L89LFjf9EEqJ+pf8CZHSzbxae3ymP4CLK+ljnK75yMaQaeStcpErchZ
ezbdl/3k6EK5Elq8SigT/4BXqLhOIeFVTuBADwAkoGI7ptsOmVe2IbRICwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAtnif0y33KWaRI5fgcLpPFwLh+sMB8GA1UdIwQY
MBaAFNwCsY9YilC5J0/jRp/4vUoWSddNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0FLeGoxaUtVTGtuVC1OR25faTlTaFpKMTAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jODYxYzgtYzg5YS00MDQzLWEwMmQt
NjY0ZjA0ZDJhNjhkLzEvM0FLeGoxaUtVTGtuVC1OR25faTlTaFpKMTAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9jODYxYzgtYzg5YS00MDQzLWEwMmQtNjY0ZjA0ZDJhNjhk
LzEvM0FLeGoxaUtVTGtuVC1OR25faTlTaFpKMTAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQlDoS6qt
/faR1VMLFZFgFK+QAxYkqWQwHjjyXeyuEcnQJu0RDr2+s2nklO/VHrkKLIalCOUC
b67Olw7GCTN1iaI91t76LUJYeE++VjxvRmo4aovWuz/aLO3mmOCjfUa2GuDkllaw
gBWT7fwLIwOuM9e9sRelQ1qidYENgx2k6I37tQJbzJEHAKzX41LpZO/lRskPsgqw
wQL/ngtKgQp93KNz4YnIZhuQzUi84Z/imSNakPwPaQlFsiQJwqUxv20R+oQ1PNSA
Gz3dbQ80F0zSggUXiCk2mdN65uuiOiO+r1zVYiN2t/+Qh4poylZTg8kOl5Fp7+iT
M2Mex48DDANPtg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:43:59 2026 by rpki-client