Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
File: 3AKxj1iKULknT-NGn_i9ShZJ100.mft (raw, json)
Hash identifier: 8Q4U+Cqgcg8Pvl8Rvhtf9pbyHI5kcszooK6TP+DYCTQ=
Subject key identifier: 26:A2:8C:DC:7E:D1:2C:10:6E:9E:69:B1:B5:CE:63:17:E7:74:50:32
Authority key identifier: DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
Certificate issuer: /CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Certificate serial: 01A1058086D1011C5DB3EA80D77CB918F410
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
Manifest number: 1AA5
Signing time: Sun 04 Oct 2026 06:01:11 +0000
Manifest this update: Sun 04 Oct 2026 06:01:11 +0000
Manifest next update: Mon 05 Oct 2026 06:01:11 +0000
Files and hashes: 1: 3AKxj1iKULknT-NGn_i9ShZJ100.crl (hash: 0oKs9dc2Gb79bYG6cWZ85Nx9tfY9Tu+q8KvrPHqZzcE=)
2: 5MACIMLMvtPjGpSWrTYPYy_0oeU.roa (hash: EJ2Ys+JT+kVU1P9zpwQaUVwemNt/L+f0Ob7zlEMUJBU=)
3: FqC8RktCc6qY8oz3rsiy732Ts4M.roa (hash: mdIDtx+4TjAohQu4FVCDn+GhhrjJpOPYnS4XF8UoaSY=)
4: PoFDIU-GQDMslzRKtEfKc0Rn8wA.roa (hash: ralmG0z6Jbcj96LF3CDF1zDKHmm0v2Ba5LksOkUYKg0=)
5: S66f2Gul6I0fFXwc0F6Uwsxne9U.roa (hash: NavMROKg+QjDM1u2vWxChfQLt+8NvkpuOrMKOryHnhk=)
6: Tk4BECob0wzGz8tktoazFqndFEA.roa (hash: vMnbx4+7QIXDr3/1NvPZgl+14y+ZGEXmNQb8sHi4+W0=)
7: VTLJBTDTIQ6Ju5e9btomtcWeLMo.roa (hash: yTXCJ9BMk8u2/KPcWBkJ56YpIjPo0JdRR1lnpXanzc8=)
8: geCL9RPAUHreYWx88VAnuY9Du5o.roa (hash: KsOAsqATMB5faX+K34f0JpwdheSXfw1xCfbke6T4Rxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:80:86:d1:01:1c:5d:b3:ea:80:d7:7c:b9:18:f4:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Validity
Not Before: Oct 4 06:01:11 2026 GMT
Not After : Oct 5 06:01:11 2026 GMT
Subject: CN=26a28cdc7ed12c106e9e69b1b5ce6317e7745032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:54:78:f8:7b:3c:7c:88:82:09:1c:fc:8f:55:
a2:87:6e:6d:cb:23:52:67:0b:a6:7d:94:f6:fa:3f:
81:7c:e6:c4:b8:4b:3c:af:ab:f4:d1:ed:1f:f7:9d:
c7:91:6f:39:8e:3c:72:11:36:9c:c4:e9:50:90:4d:
e1:38:a6:d0:64:e5:f7:1d:ef:ce:bb:c1:8d:cc:4f:
44:67:f6:3f:52:50:fa:dc:be:4c:cb:74:46:b0:98:
60:b9:95:ee:16:5b:5c:b6:88:f5:dd:df:cd:2c:b3:
c8:90:1c:fb:7e:65:3e:26:71:f9:9c:ce:28:45:bf:
71:a7:aa:f9:ae:05:dd:ff:c8:82:02:9a:6f:27:11:
d2:7b:f0:f5:2e:b1:62:22:06:47:2e:02:8d:2d:48:
2c:89:cf:df:b3:05:c0:c5:f9:73:2d:d4:3c:51:d6:
a2:14:87:e6:79:d1:c9:bb:3b:c2:46:62:cd:52:41:
f3:c9:e7:53:cf:96:d2:94:22:5d:a4:7a:34:76:b6:
f6:b1:74:e9:bd:e9:1e:00:ca:82:d5:55:bb:53:f3:
db:96:19:9d:3b:b5:b5:3e:a7:87:f5:e4:4d:2b:f9:
bc:9b:31:90:cc:72:ef:0b:15:49:3d:e8:b4:b0:9d:
8e:7c:36:25:0f:68:81:56:51:bb:f9:35:8e:48:2a:
28:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A2:8C:DC:7E:D1:2C:10:6E:9E:69:B1:B5:CE:63:17:E7:74:50:32
X509v3 Authority Key Identifier:
keyid:DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:71:67:c8:39:fc:5a:6f:87:f0:b4:cf:60:e0:d2:0a:0b:e9:
7e:ac:c4:43:58:07:0a:c0:b1:4e:d8:87:e4:95:00:06:b9:11:
8e:39:31:19:f3:e4:d5:ae:05:fc:e4:a4:e8:38:a9:d8:61:02:
6b:1d:de:fd:7a:fc:3c:ba:f9:0a:5d:bb:3b:86:ff:9a:05:53:
4f:71:70:b9:c5:68:d6:01:10:cf:72:7e:eb:cc:49:0f:6c:07:
d3:ec:61:32:df:3b:2d:e5:22:8a:25:d6:5f:ef:d5:34:9e:c2:
60:14:ea:11:ab:fe:a4:9f:b9:1d:9b:45:68:8e:a6:4d:76:88:
80:df:d0:3a:31:ad:78:68:6a:71:29:ba:9c:93:5e:73:93:56:
f6:6f:41:8c:3b:1b:4d:0a:a1:c5:c1:32:52:e9:75:2d:9e:c5:
31:50:b0:e9:55:e1:4a:f0:14:8a:e3:30:b5:01:11:d8:e7:00:
f9:99:8f:b7:5a:a6:ad:d7:41:46:75:8a:ae:f3:f0:f1:a1:c7:
57:2d:f6:35:35:bd:2e:b7:15:ed:e2:b3:3d:0f:9b:51:9d:27:
13:dd:77:18:96:9b:03:9f:a6:da:5b:4c:9a:d4:c6:3a:ac:39:
6a:3b:06:fb:1a:17:b4:2b:95:36:91:c3:84:8f:c8:65:2f:66:
78:38:df:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:24:13 2026 by rpki-client