Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
File: 3AXfbkBO-SDmpZKNiWPmpfjWESA.mft (raw, json)
Hash identifier: Uii0JqVfB4Ft7YhbLu1pVC8i9Mwi7NFcxaqnpoKWAIs=
Subject key identifier: CB:A6:86:5A:3E:47:E8:E8:3C:53:68:B5:C8:34:AF:9F:35:26:FD:31
Authority key identifier: DC:05:DF:6E:40:4E:F9:20:E6:A5:92:8D:89:63:E6:A5:F8:D6:11:20
Certificate issuer: /CN=dc05df6e404ef920e6a5928d8963e6a5f8d61120
Certificate serial: 019D25F1AACFC8727D611DDEAB3D6204C9A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 17:01:27 +0000
Manifest this update: Wed 25 Mar 2026 17:01:27 +0000
Manifest next update: Thu 26 Mar 2026 17:01:27 +0000
Files and hashes: 1: 3AXfbkBO-SDmpZKNiWPmpfjWESA.crl (hash: exHUTYVy/2gFBwq6kXr/Ncch4XpT2g79kuRfK8HDJS8=)
2: WLGZfCZKmxfMTTmHvuZLK2OwTpM.roa (hash: o/3DvFAKUtiQSitJNR+MpNrJR84HlaGWEw9iU7EJXWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:aa:cf:c8:72:7d:61:1d:de:ab:3d:62:04:c9:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc05df6e404ef920e6a5928d8963e6a5f8d61120
Validity
Not Before: Mar 25 17:01:27 2026 GMT
Not After : Mar 26 17:01:27 2026 GMT
Subject: CN=cba6865a3e47e8e83c5368b5c834af9f3526fd31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a5:9f:ef:1d:d9:44:ca:25:4d:89:40:d2:63:
de:b3:5d:78:b0:4e:71:d7:9c:ae:5d:97:49:4a:21:
a7:c2:05:4d:0b:b3:c9:6c:96:00:61:e2:87:30:66:
c0:14:52:ee:3e:8f:e8:5f:bf:09:6c:24:a3:f9:f0:
3c:27:32:3b:53:75:dd:b8:7c:07:e6:8b:22:a9:99:
09:a3:da:7c:65:b9:cd:e2:5b:31:aa:bb:4a:e9:3d:
5f:37:dc:c4:01:3a:37:ab:eb:49:11:30:96:62:02:
3a:57:ea:da:c6:0e:e6:e2:48:53:0e:d1:55:75:f2:
b6:b8:50:c1:bd:f1:f3:e2:22:9b:15:63:6a:73:16:
86:94:16:32:96:3b:ee:3e:43:b0:de:85:59:69:fd:
4b:53:57:c3:ca:88:9c:20:8d:a7:d2:e5:f2:92:c9:
d4:3f:4b:4f:72:7c:a7:95:31:a0:ee:5b:78:7d:fa:
f1:81:2c:3b:ba:83:7e:f4:2e:e4:60:be:32:35:fc:
f0:91:9e:35:2c:5d:a7:0b:de:c4:55:e3:0b:8f:b7:
18:fe:85:0e:27:45:41:b4:50:27:59:9c:82:1f:c2:
c1:17:90:14:ed:85:2e:1b:58:df:56:e6:f1:2e:51:
b3:be:89:cf:c1:ee:37:29:24:6f:22:5a:88:46:d2:
07:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A6:86:5A:3E:47:E8:E8:3C:53:68:B5:C8:34:AF:9F:35:26:FD:31
X509v3 Authority Key Identifier:
keyid:DC:05:DF:6E:40:4E:F9:20:E6:A5:92:8D:89:63:E6:A5:F8:D6:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:dd:79:d8:8f:23:0d:9a:c0:9e:f9:c1:e9:12:44:2d:50:70:
40:ea:31:7a:9e:d7:b2:f5:f6:20:a4:e6:28:ec:4d:5e:c1:9a:
29:ad:11:0e:99:98:e7:d7:a0:80:bf:c3:69:ae:4f:f0:c1:4d:
5d:ba:99:26:e5:c1:34:c3:4e:1d:5c:62:99:9a:3b:6b:d5:96:
7c:a8:6e:a7:96:a2:53:22:7c:dc:3a:ce:06:4e:0f:46:3f:7c:
92:20:49:43:9b:d0:ae:46:55:b1:8d:2b:b6:73:8a:2c:62:50:
7e:d3:a1:59:c9:b8:c2:16:2d:f5:73:10:5f:9d:1c:93:53:7d:
b4:63:00:c9:05:3c:cc:ba:73:46:3d:21:06:da:e3:b0:c5:8b:
b3:c7:9f:e8:98:f0:14:51:1f:7f:ce:35:b1:30:13:7a:52:e9:
b1:6e:7d:b7:a6:52:c8:f6:79:9a:fc:9e:f3:5d:f3:9c:fa:d9:
6a:74:a9:2e:66:6a:fe:33:e2:d6:22:b7:8d:5e:d8:13:eb:2b:
e4:68:93:50:33:e1:6c:fe:2c:52:6b:07:f9:69:f2:13:68:ea:
8b:77:c5:3f:cd:01:e3:33:20:66:54:02:2b:5e:08:72:f7:43:
7e:8e:8c:00:c8:4a:87:0f:c4:de:9d:88:d4:89:cf:72:29:8c:
12:b6:65:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:05:11 2026 by rpki-client