Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
File: 3AKxj1iKULknT-NGn_i9ShZJ100.mft (raw, json)
Hash identifier: aLqZqNsNzqRFz9ACUlt1aDDUyeg7muTbV/fnhXt7OZo=
Subject key identifier: 6D:45:2A:63:50:9B:83:F4:7A:4F:FE:8F:B3:95:EC:83:89:FB:D2:64
Authority key identifier: DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
Certificate issuer: /CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Certificate serial: 019EC224C6B7B8916A1615E5E1C75BB3BCAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
Manifest number: 1979
Signing time: Sat 13 Jun 2026 18:00:50 +0000
Manifest this update: Sat 13 Jun 2026 18:00:50 +0000
Manifest next update: Sun 14 Jun 2026 18:00:50 +0000
Files and hashes: 1: 3AKxj1iKULknT-NGn_i9ShZJ100.crl (hash: 4nzXBEYeay44/QFDR8Jr0sBTEiFC72ifYYGTVzMjxQE=)
2: 5MACIMLMvtPjGpSWrTYPYy_0oeU.roa (hash: EJ2Ys+JT+kVU1P9zpwQaUVwemNt/L+f0Ob7zlEMUJBU=)
3: FqC8RktCc6qY8oz3rsiy732Ts4M.roa (hash: mdIDtx+4TjAohQu4FVCDn+GhhrjJpOPYnS4XF8UoaSY=)
4: PoFDIU-GQDMslzRKtEfKc0Rn8wA.roa (hash: ralmG0z6Jbcj96LF3CDF1zDKHmm0v2Ba5LksOkUYKg0=)
5: S66f2Gul6I0fFXwc0F6Uwsxne9U.roa (hash: NavMROKg+QjDM1u2vWxChfQLt+8NvkpuOrMKOryHnhk=)
6: Tk4BECob0wzGz8tktoazFqndFEA.roa (hash: vMnbx4+7QIXDr3/1NvPZgl+14y+ZGEXmNQb8sHi4+W0=)
7: VTLJBTDTIQ6Ju5e9btomtcWeLMo.roa (hash: yTXCJ9BMk8u2/KPcWBkJ56YpIjPo0JdRR1lnpXanzc8=)
8: geCL9RPAUHreYWx88VAnuY9Du5o.roa (hash: KsOAsqATMB5faX+K34f0JpwdheSXfw1xCfbke6T4Rxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:24:c6:b7:b8:91:6a:16:15:e5:e1:c7:5b:b3:bc:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Validity
Not Before: Jun 13 18:00:50 2026 GMT
Not After : Jun 14 18:00:50 2026 GMT
Subject: CN=6d452a63509b83f47a4ffe8fb395ec8389fbd264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b3:02:21:39:56:b4:cf:e2:0d:45:a8:25:db:
b8:df:cf:50:31:10:d6:eb:3b:73:d7:c7:e9:e5:7d:
0b:28:b0:23:0f:96:2a:3e:75:20:be:5e:48:3c:2d:
54:cf:02:ac:68:31:5b:c2:e5:4a:02:13:08:20:5e:
cf:11:2f:b3:08:e1:e5:00:49:cb:4e:10:bc:d0:b3:
eb:b1:cc:10:0a:67:10:48:22:6e:02:45:3c:a9:8a:
d7:41:13:42:9f:1a:14:11:7b:91:dd:72:42:2c:66:
90:ec:35:2a:56:2c:79:c8:ce:f8:c6:b9:22:5e:2d:
4e:f2:66:31:d8:bf:5f:79:de:1a:f5:ac:f4:d5:a7:
b4:b4:8e:9f:5e:db:e3:38:3d:6f:0c:5b:23:63:9d:
17:46:0d:0a:2a:56:c8:56:2b:12:7b:1c:cb:64:9a:
cc:8b:38:43:d9:ce:93:27:ea:ba:86:32:f4:52:9c:
23:90:a1:e2:93:2e:65:96:fd:c7:31:69:bd:25:23:
ab:85:e1:a1:c6:5b:e3:c2:72:a7:67:19:c6:d5:7f:
b1:90:ac:a3:56:21:60:12:74:10:49:76:99:ec:33:
d6:e1:97:08:56:71:d5:78:0d:b4:65:68:88:38:f5:
23:0c:09:94:27:a8:aa:7c:70:3a:bf:46:35:ee:93:
a9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:45:2A:63:50:9B:83:F4:7A:4F:FE:8F:B3:95:EC:83:89:FB:D2:64
X509v3 Authority Key Identifier:
keyid:DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:3a:00:39:6f:87:04:ea:ef:22:1f:85:12:b8:8e:85:77:6f:
e9:37:85:7b:29:90:55:f4:e0:fe:6d:17:3a:5a:eb:bf:19:07:
28:11:43:a1:73:b1:cf:86:bc:5f:22:35:06:f0:d0:75:dd:4b:
f4:85:0c:41:99:db:64:4a:34:08:ec:f2:88:0f:26:61:7b:cc:
bc:7c:de:a6:55:a3:86:7a:5f:72:57:f7:d9:c4:0b:5f:3b:80:
e1:a3:a1:1a:a9:b9:b8:47:ac:2d:b0:71:79:8f:f1:ee:17:00:
ed:9a:43:5c:5f:f4:5b:a3:78:22:77:24:5f:e1:ca:bc:6c:54:
9c:0a:73:8e:e1:1d:c5:f0:1b:f2:51:dd:3b:ec:f6:25:32:5f:
27:d9:2d:55:23:ec:b5:65:28:0d:12:b2:d9:98:84:63:09:d1:
a6:cb:b3:49:0e:2e:37:fb:9b:53:71:81:18:ea:02:9c:7f:1d:
24:9b:23:97:64:07:ea:3a:56:b0:68:23:4b:d0:d4:29:83:33:
7e:d2:b6:46:2c:c9:d1:a5:75:c5:5e:92:33:e3:d0:47:b0:ce:
ca:b8:c2:ac:05:dd:5d:00:55:76:77:b2:ab:0e:43:e8:c0:8a:
bd:1b:8a:c3:49:05:76:71:93:29:a6:40:00:7b:44:9e:fc:38:
ec:1c:34:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:48:41 2026 by rpki-client