Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
File: 3AXfbkBO-SDmpZKNiWPmpfjWESA.mft (raw, json)
Hash identifier: 2h+8yOJ+89HRe+CKvZ1Px93KcZVhmBVg5w4GYvvYqUA=
Subject key identifier: 52:1E:82:EE:FD:5B:C8:8E:16:AF:06:F0:00:30:7C:89:7B:E2:8F:22
Authority key identifier: DC:05:DF:6E:40:4E:F9:20:E6:A5:92:8D:89:63:E6:A5:F8:D6:11:20
Certificate issuer: /CN=dc05df6e404ef920e6a5928d8963e6a5f8d61120
Certificate serial: 01A0C6D85D6624F509322F88DAB1BEAE2C50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
Manifest number: 1A68
Signing time: Tue 22 Sep 2026 02:01:03 +0000
Manifest this update: Tue 22 Sep 2026 02:01:03 +0000
Manifest next update: Wed 23 Sep 2026 02:01:03 +0000
Files and hashes: 1: 3AXfbkBO-SDmpZKNiWPmpfjWESA.crl (hash: ez6GxerhpivzuhzmUoxVYBHgWBOT9QiXzzmhYfz4dkE=)
2: WLGZfCZKmxfMTTmHvuZLK2OwTpM.roa (hash: o/3DvFAKUtiQSitJNR+MpNrJR84HlaGWEw9iU7EJXWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 02:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d8:5d:66:24:f5:09:32:2f:88:da:b1:be:ae:2c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc05df6e404ef920e6a5928d8963e6a5f8d61120
Validity
Not Before: Sep 22 02:01:03 2026 GMT
Not After : Sep 23 02:01:03 2026 GMT
Subject: CN=521e82eefd5bc88e16af06f000307c897be28f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:77:8f:87:8d:64:ed:c1:33:39:e7:88:05:41:
2a:8e:4c:16:ca:04:4d:3c:29:e0:aa:ec:61:7e:d3:
63:84:7f:db:4f:ed:40:07:e7:bc:51:0b:eb:fb:c8:
9d:1f:0b:f2:8c:b9:3e:46:33:85:ac:f6:dc:60:75:
fc:53:a4:a6:5d:a3:36:ce:8c:c6:5a:af:da:02:77:
25:f4:4e:2b:d4:31:bc:e4:cb:f9:a1:56:c2:b2:b3:
95:f2:f7:05:59:77:4d:a5:22:5f:e0:d3:b4:c0:39:
88:01:96:98:e8:73:3d:78:c2:c3:e2:28:16:48:2b:
66:bd:87:b1:61:f3:9d:9c:29:e7:e4:fc:d3:7d:36:
5a:e0:0b:2e:96:a3:46:df:af:b4:ac:29:fd:fa:5a:
fe:b2:32:5b:ef:02:b8:ab:93:92:b6:39:29:9f:1d:
8c:8d:12:6a:dc:38:2f:50:ed:f9:86:00:da:98:84:
d6:f6:f0:7e:ca:90:df:15:b2:cc:fc:dd:66:64:35:
e0:0e:c1:9d:71:7d:f8:aa:b0:af:f7:2c:d2:12:b8:
f0:6c:b9:22:51:45:2f:21:96:27:3c:72:9e:cc:14:
d8:41:71:56:c6:94:c9:12:53:c0:2b:4a:74:52:75:
a3:41:99:c1:90:4c:bb:5c:ca:2c:45:e6:8e:44:c4:
77:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:1E:82:EE:FD:5B:C8:8E:16:AF:06:F0:00:30:7C:89:7B:E2:8F:22
X509v3 Authority Key Identifier:
keyid:DC:05:DF:6E:40:4E:F9:20:E6:A5:92:8D:89:63:E6:A5:F8:D6:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:5f:9c:24:6c:c7:6e:56:c1:59:69:17:55:c7:58:03:c8:73:
ea:d4:83:06:8c:63:82:6b:30:21:f9:59:59:15:f2:bb:06:e6:
98:e2:59:b3:57:7f:23:e5:47:b6:72:84:b0:d3:0c:dc:04:db:
af:c1:ec:e2:08:1d:8c:b0:68:37:09:36:a6:9b:e1:6b:61:5b:
3b:9d:db:15:64:ea:e6:d8:57:6b:2e:98:92:e3:60:37:75:33:
34:9a:3a:59:ad:a2:a9:78:6f:6c:8b:76:9b:2f:ef:a2:16:a3:
7e:ab:11:ec:93:1b:bb:1a:73:d2:0c:76:8f:00:1d:16:4d:46:
5d:93:93:89:15:6e:a7:15:7a:19:e6:40:9c:c4:ad:e9:f9:75:
c8:b0:c8:b3:0f:f2:a7:f8:9a:63:87:88:5e:74:ce:9b:c8:91:
29:74:31:2f:f8:7a:21:ae:02:92:cb:ff:a8:4e:3b:37:c0:5d:
5e:20:a3:73:ef:95:1b:93:02:0c:3e:d7:90:e0:ce:29:9a:4b:
e1:0a:ea:ce:2f:63:7f:52:10:db:ef:11:b8:e5:af:e0:3a:ac:
50:ad:ae:e7:52:64:97:a9:61:0c:ce:ba:6d:80:f6:97:83:49:
25:cf:e2:7c:13:91:e5:08:4d:d5:b7:11:68:79:bd:38:ff:79:
4d:b9:40:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:35:44 2026 by rpki-client