Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
File: 3AKxj1iKULknT-NGn_i9ShZJ100.mft (raw, json)
Hash identifier: iA48WZIHMiygiDp9cHKGO3akrGuPzSJH/A0oR5S5208=
Subject key identifier: C2:74:85:7E:3B:64:B9:FB:82:45:4C:CB:A3:9A:8F:4D:27:D6:66:7D
Authority key identifier: DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
Certificate issuer: /CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Certificate serial: 019CAB3477026609FF630827349E1466CDBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
Manifest number: 1864
Signing time: Sun 01 Mar 2026 21:01:08 +0000
Manifest this update: Sun 01 Mar 2026 21:01:08 +0000
Manifest next update: Mon 02 Mar 2026 21:01:08 +0000
Files and hashes: 1: 3AKxj1iKULknT-NGn_i9ShZJ100.crl (hash: 7ANlVykAerXOMm22Fd9Bz6mJhq/2z7jmC4JMCvElefU=)
2: 5MACIMLMvtPjGpSWrTYPYy_0oeU.roa (hash: EJ2Ys+JT+kVU1P9zpwQaUVwemNt/L+f0Ob7zlEMUJBU=)
3: FqC8RktCc6qY8oz3rsiy732Ts4M.roa (hash: mdIDtx+4TjAohQu4FVCDn+GhhrjJpOPYnS4XF8UoaSY=)
4: PoFDIU-GQDMslzRKtEfKc0Rn8wA.roa (hash: ralmG0z6Jbcj96LF3CDF1zDKHmm0v2Ba5LksOkUYKg0=)
5: S66f2Gul6I0fFXwc0F6Uwsxne9U.roa (hash: NavMROKg+QjDM1u2vWxChfQLt+8NvkpuOrMKOryHnhk=)
6: Tk4BECob0wzGz8tktoazFqndFEA.roa (hash: vMnbx4+7QIXDr3/1NvPZgl+14y+ZGEXmNQb8sHi4+W0=)
7: VTLJBTDTIQ6Ju5e9btomtcWeLMo.roa (hash: yTXCJ9BMk8u2/KPcWBkJ56YpIjPo0JdRR1lnpXanzc8=)
8: geCL9RPAUHreYWx88VAnuY9Du5o.roa (hash: KsOAsqATMB5faX+K34f0JpwdheSXfw1xCfbke6T4Rxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:77:02:66:09:ff:63:08:27:34:9e:14:66:cd:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Validity
Not Before: Mar 1 21:01:08 2026 GMT
Not After : Mar 2 21:01:08 2026 GMT
Subject: CN=c274857e3b64b9fb82454ccba39a8f4d27d6667d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fb:ff:fa:6b:91:12:50:c2:82:e7:8f:61:d3:
1b:88:fe:0b:07:3a:bb:a7:11:fc:23:bd:ec:9c:43:
47:c8:f6:fb:2a:fd:06:e7:be:9e:0a:cd:a3:b2:18:
d5:78:5c:13:18:a8:69:c3:61:0f:4e:98:93:26:16:
eb:a7:c3:81:6a:0a:76:fc:55:5f:76:93:2a:4c:d1:
0e:d1:5e:c7:c1:78:66:e0:43:43:71:0a:76:28:c7:
5d:47:ac:31:04:6d:d1:53:57:eb:c4:d6:59:ef:5c:
3d:6e:81:e7:6e:7b:63:9a:3b:9c:49:3f:87:b6:81:
36:fe:6f:71:85:cb:12:d2:14:0a:77:52:65:34:bb:
5e:66:7f:16:f6:44:9e:db:63:f7:24:0d:fc:77:6b:
5e:ab:c4:bc:25:47:ab:0f:f9:23:d9:40:8c:a9:f4:
f1:7c:67:f6:05:9d:8e:43:cf:41:99:14:28:4b:33:
64:43:d0:31:c3:ef:85:d6:c2:21:84:e6:6a:07:83:
49:01:eb:e8:d3:ac:c7:ca:b5:da:51:cc:40:60:59:
7e:80:d3:da:a1:07:3e:6d:28:5e:5d:b4:60:92:0d:
4a:ed:21:1a:20:92:09:e9:ec:cd:e2:33:4a:92:d3:
f5:51:5e:56:9f:ee:09:69:47:6e:af:38:f0:5a:7e:
ff:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:74:85:7E:3B:64:B9:FB:82:45:4C:CB:A3:9A:8F:4D:27:D6:66:7D
X509v3 Authority Key Identifier:
keyid:DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:38:70:d8:6f:93:f2:a8:47:66:d2:5a:d2:ea:14:82:89:cf:
0c:5e:b2:0d:66:19:98:ec:f6:84:a0:53:2f:59:79:8d:39:b2:
37:af:58:02:17:61:5a:ae:18:66:31:11:b5:38:cc:d8:8b:17:
97:5e:c3:de:bf:5f:96:15:4b:8e:7f:fa:e0:21:d5:3e:5b:d5:
7d:aa:45:09:a4:3a:b4:6e:e9:ac:6f:6b:de:9c:35:2c:4b:3b:
64:81:04:1a:70:2e:43:9c:d0:b2:28:aa:e9:c5:6a:83:16:49:
ab:b9:2e:36:f3:64:0b:b8:dd:e9:a4:98:ea:28:3f:cb:69:8d:
6c:ff:61:84:c2:64:c4:8e:70:48:ec:02:95:6f:02:a0:fb:43:
9b:83:f4:d4:ae:09:74:e8:f5:98:4d:c8:4b:a0:b5:ed:6d:97:
dc:e3:cc:53:66:24:50:cf:70:94:cf:50:49:0f:12:6f:26:93:
5a:a5:3e:ad:b5:cd:1c:bc:f4:92:e9:fc:d2:eb:73:2b:cc:7c:
a7:9d:95:f4:8c:62:c2:6a:4d:01:4b:a7:d8:45:77:ea:4e:d1:
ae:9d:9c:0b:22:c9:f4:ae:a2:dd:ca:12:ca:c8:06:c0:4f:40:
c0:9c:17:68:2b:ac:9a:b0:e8:25:b8:b4:8a:14:9f:92:6d:a4:
dd:ab:2e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:39:28 2026 by rpki-client