Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
File: 3AKxj1iKULknT-NGn_i9ShZJ100.mft (raw, json)
Hash identifier: axHIE1HcaQ392tSHnulZ/wbh1IinUKC6nunCE3ITIZc=
Subject key identifier: 0C:3A:17:BC:6C:B0:0F:F0:72:18:13:DC:2B:D3:03:EF:66:05:7F:2F
Authority key identifier: DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
Certificate issuer: /CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Certificate serial: 019D9C9A72C4A2B37C318D2016A29E8D2D13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
Manifest number: 18E1
Signing time: Fri 17 Apr 2026 18:01:00 +0000
Manifest this update: Fri 17 Apr 2026 18:01:00 +0000
Manifest next update: Sat 18 Apr 2026 18:01:00 +0000
Files and hashes: 1: 3AKxj1iKULknT-NGn_i9ShZJ100.crl (hash: Z5j3AQNviqQMc/0OyR1Y10uhh3wMseU8PMAPeETzUZQ=)
2: 5MACIMLMvtPjGpSWrTYPYy_0oeU.roa (hash: EJ2Ys+JT+kVU1P9zpwQaUVwemNt/L+f0Ob7zlEMUJBU=)
3: FqC8RktCc6qY8oz3rsiy732Ts4M.roa (hash: mdIDtx+4TjAohQu4FVCDn+GhhrjJpOPYnS4XF8UoaSY=)
4: PoFDIU-GQDMslzRKtEfKc0Rn8wA.roa (hash: ralmG0z6Jbcj96LF3CDF1zDKHmm0v2Ba5LksOkUYKg0=)
5: S66f2Gul6I0fFXwc0F6Uwsxne9U.roa (hash: NavMROKg+QjDM1u2vWxChfQLt+8NvkpuOrMKOryHnhk=)
6: Tk4BECob0wzGz8tktoazFqndFEA.roa (hash: vMnbx4+7QIXDr3/1NvPZgl+14y+ZGEXmNQb8sHi4+W0=)
7: VTLJBTDTIQ6Ju5e9btomtcWeLMo.roa (hash: yTXCJ9BMk8u2/KPcWBkJ56YpIjPo0JdRR1lnpXanzc8=)
8: geCL9RPAUHreYWx88VAnuY9Du5o.roa (hash: KsOAsqATMB5faX+K34f0JpwdheSXfw1xCfbke6T4Rxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:72:c4:a2:b3:7c:31:8d:20:16:a2:9e:8d:2d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Validity
Not Before: Apr 17 18:01:00 2026 GMT
Not After : Apr 18 18:01:00 2026 GMT
Subject: CN=0c3a17bc6cb00ff0721813dc2bd303ef66057f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ce:f3:e9:fe:c2:e3:a2:b1:4b:08:fd:31:d4:
b0:f4:cc:87:9e:93:ec:46:d5:64:8e:2b:1f:1d:6b:
d9:c2:57:65:3b:4c:f1:09:bb:74:ab:d3:16:e7:cd:
a4:04:17:68:36:d0:86:8f:be:aa:c6:fa:a0:d6:91:
1f:ef:85:59:4e:a0:10:fc:7d:2a:dd:56:bb:e2:5d:
67:34:3c:ab:b5:0e:56:8a:dc:26:07:3e:fd:8c:e0:
a8:17:bf:a7:ea:8b:1d:ef:b8:a0:19:e7:59:2b:c7:
3f:60:4f:cf:34:62:0a:82:10:46:4f:ae:82:81:ba:
5c:07:b5:8e:5c:b7:57:27:17:a8:b2:3e:cd:e7:ee:
d3:02:f6:a3:45:c3:e3:8e:31:d0:1d:e6:1c:b7:2d:
26:a6:82:17:0e:2f:dc:6a:61:58:55:28:2f:57:fa:
f5:7b:55:ea:8e:f9:10:b0:2e:b2:23:97:33:ed:ea:
8d:66:8e:01:15:66:1e:ed:f9:ba:f2:c7:fa:d2:f1:
79:3e:67:af:6e:f2:7b:94:d4:e1:6e:ed:22:bc:39:
e7:24:f4:8a:78:82:3a:91:0c:1c:b1:76:41:60:57:
91:a0:ef:c3:b0:cb:47:59:d3:8d:1e:71:e6:9f:75:
69:bc:54:b2:59:c9:82:d7:19:2b:1b:59:ea:d5:af:
d2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:3A:17:BC:6C:B0:0F:F0:72:18:13:DC:2B:D3:03:EF:66:05:7F:2F
X509v3 Authority Key Identifier:
keyid:DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:fb:44:a4:56:f4:45:23:f7:1b:93:80:72:ed:2b:4a:fe:be:
2b:38:b7:a8:a8:1b:30:f7:aa:b1:2e:2c:e9:a8:18:a3:63:f2:
fe:55:82:9d:5f:6c:2e:12:66:4d:c9:dc:68:42:e8:44:6f:e7:
fd:70:3d:a8:7c:b2:09:f1:da:70:12:e0:a8:3c:99:a7:c6:3f:
6d:74:95:a7:0f:e2:2d:3a:56:2f:17:51:8f:c2:e0:78:f2:4e:
63:54:22:cb:be:f9:ac:ce:b9:91:a1:1b:76:c2:07:6a:bf:9b:
52:2b:75:ef:b3:7d:80:e2:a1:50:3b:f3:a0:d5:14:36:d0:97:
71:c5:05:64:7f:d3:d5:08:3a:42:21:a3:68:d7:ce:db:f0:2b:
66:73:a4:eb:2c:6c:42:c0:69:e7:dc:c8:9d:f2:0d:84:1e:2c:
50:f8:2d:c8:8f:ae:65:18:dc:ea:16:60:e2:c7:cb:68:20:c3:
a5:7a:82:19:c1:db:75:ea:1b:b6:b1:21:b0:a7:b0:c4:fb:f6:
b8:82:21:ee:df:ee:d4:fd:e2:e1:5b:97:b7:05:20:7d:e5:ad:
5f:ea:42:15:bc:78:7b:45:04:c9:2d:87:93:88:10:6f:bc:51:
d0:63:83:67:40:99:63:39:c2:96:b7:ce:4d:b9:67:44:88:98:
97:91:4f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:26:45 2026 by rpki-client