Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
File: 3AXfbkBO-SDmpZKNiWPmpfjWESA.mft (raw, json)
Hash identifier: L9S4BR0l8vMhg/mO7+d3knGvDSGEJKLP6QZNKEIUU/c=
Subject key identifier: FE:6E:85:25:38:F2:7A:CD:77:1B:37:57:3D:04:85:51:3D:A5:61:34
Authority key identifier: DC:05:DF:6E:40:4E:F9:20:E6:A5:92:8D:89:63:E6:A5:F8:D6:11:20
Certificate issuer: /CN=dc05df6e404ef920e6a5928d8963e6a5f8d61120
Certificate serial: 019E1F10E412F8EEBE7E20769B614F54B714
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 02:01:01 +0000
Manifest this update: Wed 13 May 2026 02:01:01 +0000
Manifest next update: Thu 14 May 2026 02:01:01 +0000
Files and hashes: 1: 3AXfbkBO-SDmpZKNiWPmpfjWESA.crl (hash: anUvtWAA7/8kL7zM2LXb3g5kGrkc/oWuOlMZ8x9fUlw=)
2: WLGZfCZKmxfMTTmHvuZLK2OwTpM.roa (hash: o/3DvFAKUtiQSitJNR+MpNrJR84HlaGWEw9iU7EJXWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:e4:12:f8:ee:be:7e:20:76:9b:61:4f:54:b7:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc05df6e404ef920e6a5928d8963e6a5f8d61120
Validity
Not Before: May 13 02:01:01 2026 GMT
Not After : May 14 02:01:01 2026 GMT
Subject: CN=fe6e852538f27acd771b37573d0485513da56134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:44:5f:c3:85:ad:b6:3c:97:e5:0d:8e:7a:5a:
af:e7:46:c1:af:22:1e:36:fe:3f:98:be:81:33:85:
57:7e:0c:a3:2c:9d:c7:45:ce:03:6d:af:21:61:0c:
50:09:f5:5d:84:5f:d8:f8:e5:f8:4f:e6:a2:15:bd:
56:b9:41:0c:c7:9c:12:cc:19:ea:6e:43:db:b8:18:
c3:48:72:64:0a:8b:a0:08:de:52:ab:d8:aa:4d:55:
60:b2:93:09:33:ce:fb:06:c7:c5:be:85:3e:f0:94:
08:eb:95:65:1a:eb:5a:5a:e3:a7:dc:e2:95:3b:f5:
53:37:84:21:09:8d:55:71:32:39:29:d7:20:33:b2:
d5:f6:c5:05:a3:4f:f7:06:6a:bd:59:91:fd:3f:97:
9a:4c:21:55:21:9b:ce:ab:91:ae:6f:5d:63:45:b7:
0b:7b:7d:34:91:1e:bf:d1:b2:91:a1:f8:15:41:e1:
e5:8f:c6:a6:32:db:b1:5d:eb:0f:3d:9b:aa:fe:fd:
5a:5b:cd:95:51:7b:09:2e:88:2c:b8:0e:00:f4:a0:
9c:9a:53:ed:06:28:b2:bd:9b:fe:85:e7:41:2c:8e:
10:3d:29:4c:56:b9:06:4e:41:10:3b:d2:bb:3d:c4:
2e:92:86:dd:a1:48:d2:94:1b:8e:2e:71:7d:09:b7:
09:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:6E:85:25:38:F2:7A:CD:77:1B:37:57:3D:04:85:51:3D:A5:61:34
X509v3 Authority Key Identifier:
keyid:DC:05:DF:6E:40:4E:F9:20:E6:A5:92:8D:89:63:E6:A5:F8:D6:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:26:0d:63:a6:5d:58:9d:b2:6a:f0:cf:87:5b:2f:af:bd:2a:
cd:05:9d:a4:9d:7a:5f:b0:c8:ad:50:69:45:72:ca:db:b8:5d:
27:86:cf:17:ec:b1:79:dd:96:55:b2:15:c4:a6:cc:fc:fd:6b:
9e:82:b9:79:de:e3:8c:fa:78:d0:f5:66:ad:cc:2a:d5:e6:69:
70:33:c5:96:44:20:34:a3:ae:2f:92:02:7d:24:13:23:74:40:
cb:07:ea:8a:a3:62:94:2c:77:2b:da:4b:82:5d:c5:36:4d:40:
a3:ef:38:36:2f:3e:f6:67:06:49:50:14:cd:11:af:66:69:57:
e2:73:f0:d8:56:1d:e7:3f:7b:9a:88:70:fd:fa:8a:92:c7:9c:
c9:00:2c:57:63:2e:2e:c3:c9:d5:84:2c:4d:f3:29:84:fa:61:
79:3f:fe:f0:e1:fc:36:a4:fd:a3:9b:bd:87:ba:f4:25:eb:c3:
e4:59:a7:af:7a:30:40:ac:32:54:36:f7:d0:8d:96:e5:cc:71:
a3:66:58:a6:34:97:4d:99:c9:20:3a:52:b2:23:87:f6:a8:c3:
bc:fe:77:01:d7:b9:48:18:8d:39:85:d7:a8:48:63:0b:be:a5:
e1:e5:2b:25:1a:07:81:98:d7:f9:f0:c6:9f:21:1e:9d:9c:26:
1b:ba:25:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:33:52 2026 by rpki-client