Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
File: 3AXfbkBO-SDmpZKNiWPmpfjWESA.mft (raw, json)
Hash identifier: Uo1BABuU+MwDNFE0IKE1H5Y6hg5Eq8uP3WgnqIwyXx0=
Subject key identifier: A5:45:D4:35:03:4B:E6:74:AF:36:46:5F:94:7B:AE:3D:D4:91:AF:0F
Authority key identifier: DC:05:DF:6E:40:4E:F9:20:E6:A5:92:8D:89:63:E6:A5:F8:D6:11:20
Certificate issuer: /CN=dc05df6e404ef920e6a5928d8963e6a5f8d61120
Certificate serial: 019F93C99474C16B93FCD050A6F41873015C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 11:01:29 +0000
Manifest this update: Fri 24 Jul 2026 11:01:29 +0000
Manifest next update: Sat 25 Jul 2026 11:01:29 +0000
Files and hashes: 1: 3AXfbkBO-SDmpZKNiWPmpfjWESA.crl (hash: BVD4cmIDehHb4sMEa8nwXn5jLu3V8RswwMceIDT+b4s=)
2: WLGZfCZKmxfMTTmHvuZLK2OwTpM.roa (hash: o/3DvFAKUtiQSitJNR+MpNrJR84HlaGWEw9iU7EJXWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:94:74:c1:6b:93:fc:d0:50:a6:f4:18:73:01:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc05df6e404ef920e6a5928d8963e6a5f8d61120
Validity
Not Before: Jul 24 11:01:29 2026 GMT
Not After : Jul 25 11:01:29 2026 GMT
Subject: CN=a545d435034be674af36465f947bae3dd491af0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:30:f6:d7:1a:5b:0f:4d:33:15:95:56:1f:38:
21:5a:65:df:c4:6a:9f:3f:ec:03:8b:2a:c3:4c:7a:
b9:c6:75:36:0c:e2:27:e7:2a:50:2e:9b:41:15:06:
1d:ee:be:5a:da:07:5b:dc:88:83:76:26:7b:c8:39:
d3:06:24:d5:db:35:f6:86:ec:f1:f8:e5:fb:31:ad:
0f:dd:16:4c:88:62:84:8c:eb:5c:08:dc:0b:b2:6d:
c9:dc:b8:72:96:a7:63:11:8c:14:54:b5:7c:bb:b6:
1b:82:84:46:0d:b3:2a:ff:45:5f:aa:78:d5:cf:5a:
cb:f7:17:3c:5a:58:a5:03:6b:3d:93:57:18:54:ba:
0c:d1:d4:69:a6:c9:0f:35:97:85:fc:69:b7:43:28:
c5:7c:a8:5b:da:7d:27:fc:dd:10:a9:25:3b:c7:d2:
f1:ef:60:48:a7:4c:6f:8a:0c:93:bf:5f:d1:df:bd:
22:12:c1:65:91:f5:a8:09:30:37:53:0f:e6:48:c2:
db:79:d6:0b:40:e4:75:e5:99:c2:76:12:fd:db:fa:
54:ca:f0:cf:5c:3f:98:79:8c:87:e2:26:dd:ca:34:
d6:53:21:99:ba:ae:e5:5d:3c:48:e1:50:72:cf:5e:
01:5a:52:45:b4:84:9c:31:a4:01:57:8f:86:bc:34:
f0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:45:D4:35:03:4B:E6:74:AF:36:46:5F:94:7B:AE:3D:D4:91:AF:0F
X509v3 Authority Key Identifier:
keyid:DC:05:DF:6E:40:4E:F9:20:E6:A5:92:8D:89:63:E6:A5:F8:D6:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:d7:f9:b9:56:d7:aa:a6:f4:03:6c:bc:bf:70:a1:2f:e2:51:
be:ad:aa:9d:d9:59:86:56:a1:ad:73:68:3c:1e:11:0f:c0:da:
a0:df:a3:74:16:c0:85:27:10:f5:05:11:bd:05:86:60:7c:b4:
51:7b:cb:1e:ea:4d:36:1e:67:ad:e8:fe:fb:9a:b8:09:01:cd:
87:70:62:49:1a:1e:2e:68:39:b5:03:dc:41:aa:0c:a9:e9:9b:
8d:dd:44:d8:fe:01:56:f7:5c:ff:13:63:59:6a:35:35:8e:72:
d3:fe:5c:3f:7d:a0:1a:a5:76:b5:2b:75:29:6c:b4:9f:87:05:
39:a8:17:16:e1:16:51:15:30:9f:3c:d7:e1:2f:82:9d:56:fc:
d8:f0:02:e4:f7:08:7d:84:7f:c0:f0:91:56:a6:79:52:65:0c:
51:6e:6c:bb:40:af:90:35:a3:d4:28:69:49:af:a3:00:31:dc:
95:8d:c9:10:bc:45:7b:b5:dc:07:d1:e5:78:7e:6c:6b:3d:1f:
1b:65:3f:06:c7:86:09:0e:6b:50:0f:f7:9f:56:b3:fa:4f:dd:
39:27:d2:82:c9:55:68:b3:7a:6d:a9:0e:40:15:7b:57:6c:d1:
c4:ac:7d:a0:59:11:5d:b3:24:90:93:4d:11:58:be:6a:cc:9c:
96:e6:3d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:20:57 2026 by rpki-client