Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
File: 3AXfbkBO-SDmpZKNiWPmpfjWESA.mft (raw, json)
Hash identifier: sbqJNVH4kb8qkjupzTK85YyY5PkORlaVKhAjuIW1uhU=
Subject key identifier: EE:66:93:B3:BB:B9:96:AD:17:A1:4D:B4:91:14:F6:A2:D1:AB:09:CB
Authority key identifier: DC:05:DF:6E:40:4E:F9:20:E6:A5:92:8D:89:63:E6:A5:F8:D6:11:20
Certificate issuer: /CN=dc05df6e404ef920e6a5928d8963e6a5f8d61120
Certificate serial: 019F91DB04EB341C1A951B08852CD2238868
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 02:01:17 +0000
Manifest this update: Fri 24 Jul 2026 02:01:17 +0000
Manifest next update: Sat 25 Jul 2026 02:01:17 +0000
Files and hashes: 1: 3AXfbkBO-SDmpZKNiWPmpfjWESA.crl (hash: IR3nCG8jgwNLewJLXt3d1XfHISULwU2LLoNslaBZ/2s=)
2: WLGZfCZKmxfMTTmHvuZLK2OwTpM.roa (hash: o/3DvFAKUtiQSitJNR+MpNrJR84HlaGWEw9iU7EJXWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:db:04:eb:34:1c:1a:95:1b:08:85:2c:d2:23:88:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc05df6e404ef920e6a5928d8963e6a5f8d61120
Validity
Not Before: Jul 24 02:01:17 2026 GMT
Not After : Jul 25 02:01:17 2026 GMT
Subject: CN=ee6693b3bbb996ad17a14db49114f6a2d1ab09cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b8:08:70:87:87:97:e0:d0:29:f9:17:54:51:
ea:b0:5e:75:20:b1:83:9f:06:dd:5b:1d:19:45:32:
1c:89:10:e6:c5:ba:fc:ec:88:b4:9d:54:12:f0:83:
a6:0a:8e:ab:48:38:d9:b4:9b:9f:55:e6:c7:9d:c3:
0f:0c:05:de:ef:d2:28:57:8b:b9:0d:a3:30:48:78:
38:9a:eb:21:44:c1:c0:6e:1a:7c:bb:f3:d9:4a:bb:
1a:af:61:17:25:c3:d7:ee:b8:42:bf:9e:78:83:42:
d4:fc:c1:31:cc:20:2f:1c:23:3f:b6:53:78:09:44:
86:35:b3:5d:24:e7:68:fd:7c:78:83:a9:a3:23:b2:
7c:69:04:ff:5e:ff:54:6a:2c:8e:b4:9f:3a:bc:e9:
e4:23:9d:ea:a0:49:2b:b9:ad:71:f9:db:3e:5c:f4:
2c:e4:63:8c:e1:6e:68:30:66:df:66:ab:28:d7:a1:
11:55:7d:0d:9a:a7:45:1f:06:ab:69:9b:fd:f8:b5:
a5:31:fc:27:b4:52:8b:76:25:48:e5:c6:b0:d5:9d:
16:9f:01:ea:4b:ff:59:c6:98:74:6d:bd:bf:1d:f3:
cb:07:dd:e6:07:89:f1:6b:40:7a:ca:b7:e3:95:21:
8f:fd:29:d3:ac:a7:4a:af:f4:c7:e6:94:44:12:2e:
e8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:66:93:B3:BB:B9:96:AD:17:A1:4D:B4:91:14:F6:A2:D1:AB:09:CB
X509v3 Authority Key Identifier:
keyid:DC:05:DF:6E:40:4E:F9:20:E6:A5:92:8D:89:63:E6:A5:F8:D6:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:b2:84:8c:a2:f3:ac:1d:d3:4e:5e:c4:b1:7b:32:50:b1:5c:
a3:e6:e8:8f:b0:1c:51:81:31:e9:1f:91:55:da:52:04:da:05:
d5:d1:d2:30:5c:08:3a:a2:8c:60:11:9c:65:59:d2:79:84:11:
69:17:61:04:2b:b9:e8:4f:0f:f0:65:d6:e0:30:b2:fe:73:dc:
3f:6c:0a:00:0c:4a:e9:10:63:c9:38:d5:e5:a6:a4:f0:5e:f7:
a1:65:c2:d3:c3:4a:d3:19:b9:71:9b:0e:9c:b9:64:f1:b6:5d:
7a:62:e7:b3:c7:a0:6a:cf:54:91:5c:83:e1:ff:21:92:7d:0f:
66:34:df:d9:9e:08:84:af:ce:ac:00:e1:98:c8:49:5e:f7:d9:
31:52:2a:38:4c:bc:e1:ab:64:59:09:e9:13:86:1e:8f:9f:ca:
9b:3c:52:e5:17:6b:5c:5a:b5:df:f6:44:81:6e:df:1f:cf:a9:
ff:cd:db:6e:5d:c3:8b:fb:ec:d6:73:ed:a8:57:56:58:82:20:
45:b8:67:f6:0d:4a:f4:f8:53:9b:fe:63:ec:f4:11:81:0c:31:
f6:4f:e3:dc:37:15:c1:0d:75:bf:51:4a:a1:72:01:2e:d0:ba:
e7:60:da:65:c0:c8:f5:7c:8a:38:05:56:44:ac:54:d4:37:c3:
32:ac:b9:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+R2wTrNBwalRsIhSzSI4hoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMDVkZjZlNDA0ZWY5MjBlNmE1OTI4ZDg5NjNlNmE1Zjhk
NjExMjAwHhcNMjYwNzI0MDIwMTE3WhcNMjYwNzI1MDIwMTE3WjAzMTEwLwYDVQQD
EyhlZTY2OTNiM2JiYjk5NmFkMTdhMTRkYjQ5MTE0ZjZhMmQxYWIwOWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrgIcIeHl+DQKfkXVFHqsF51ILGD
nwbdWx0ZRTIciRDmxbr87Ii0nVQS8IOmCo6rSDjZtJufVebHncMPDAXe79IoV4u5
DaMwSHg4mushRMHAbhp8u/PZSrsar2EXJcPX7rhCv554g0LU/MExzCAvHCM/tlN4
CUSGNbNdJOdo/Xx4g6mjI7J8aQT/Xv9UaiyOtJ86vOnkI53qoEkrua1x+ds+XPQs
5GOM4W5oMGbfZqso16ERVX0NmqdFHwaraZv9+LWlMfwntFKLdiVI5caw1Z0WnwHq
S/9Zxph0bb2/HfPLB93mB4nxa0B6yrfjlSGP/SnTrKdKr/TH5pREEi7owwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO5mk7O7uZatF6FNtJEU9qLRqwnLMB8GA1UdIwQY
MBaAFNwF325ATvkg5qWSjYlj5qX41hEgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0FYZmJrQk8tU0RtcFpLTmlXUG1wZmpXRVNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8wYzM4ODYtYTMyZC00NDM1LWFiNzQt
YmNlOTM0MjA1YWU4LzEvM0FYZmJrQk8tU0RtcFpLTmlXUG1wZmpXRVNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8wYzM4ODYtYTMyZC00NDM1LWFiNzQtYmNlOTM0MjA1YWU4
LzEvM0FYZmJrQk8tU0RtcFpLTmlXUG1wZmpXRVNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYbKEjKLz
rB3TTl7EsXsyULFco+boj7AcUYEx6R+RVdpSBNoF1dHSMFwIOqKMYBGcZVnSeYQR
aRdhBCu56E8P8GXW4DCy/nPcP2wKAAxK6RBjyTjV5aak8F73oWXC08NK0xm5cZsO
nLlk8bZdemLns8egas9UkVyD4f8hkn0PZjTf2Z4IhK/OrADhmMhJXvfZMVIqOEy8
4atkWQnpE4Yej5/KmzxS5RdrXFq13/ZEgW7fH8+p/83bbl3Di/vs1nPtqFdWWIIg
Rbhn9g1K9PhTm/5j7PQRgQwx9k/j3DcVwQ11v1FKoXIBLtC652DaZcDI9XyKOAVW
RKxU1DfDMqy5fg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:03:33 2026 by rpki-client