Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
File: 3AXfbkBO-SDmpZKNiWPmpfjWESA.mft (raw, json)
Hash identifier: uDZyLHDLTj5kDZnEYKhI7i/6CtNk+sFXOsuKidXXRqw=
Subject key identifier: 22:01:AA:A1:B4:AE:96:A5:69:EC:27:AC:CF:51:2F:80:5D:49:B5:98
Authority key identifier: DC:05:DF:6E:40:4E:F9:20:E6:A5:92:8D:89:63:E6:A5:F8:D6:11:20
Certificate issuer: /CN=dc05df6e404ef920e6a5928d8963e6a5f8d61120
Certificate serial: 01A0D07F64012E2E558BEB1AABC72A616F0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
Manifest number: 1A6D
Signing time: Wed 23 Sep 2026 23:00:04 +0000
Manifest this update: Wed 23 Sep 2026 23:00:04 +0000
Manifest next update: Thu 24 Sep 2026 23:00:04 +0000
Files and hashes: 1: 3AXfbkBO-SDmpZKNiWPmpfjWESA.crl (hash: i7LNz6BBseGzl8p4NLeXnew2Cs0lym/PEH8NNQuQdoo=)
2: WLGZfCZKmxfMTTmHvuZLK2OwTpM.roa (hash: o/3DvFAKUtiQSitJNR+MpNrJR84HlaGWEw9iU7EJXWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:7f:64:01:2e:2e:55:8b:eb:1a:ab:c7:2a:61:6f:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc05df6e404ef920e6a5928d8963e6a5f8d61120
Validity
Not Before: Sep 23 23:00:04 2026 GMT
Not After : Sep 24 23:00:04 2026 GMT
Subject: CN=2201aaa1b4ae96a569ec27accf512f805d49b598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c0:55:df:72:9d:00:1a:c5:da:81:51:85:87:
72:a2:28:01:2f:20:57:f5:57:15:32:c7:c6:fb:d3:
56:4b:9f:4a:60:ea:27:d8:f5:08:3f:72:20:20:fa:
83:74:6b:b2:38:ad:dd:74:f8:af:69:f5:37:76:4b:
46:0d:5f:42:c2:dd:b3:7f:83:c3:d0:04:ef:2b:d1:
d2:e2:85:a1:92:58:09:a7:d2:72:c6:db:40:6c:de:
10:84:6a:86:23:ee:67:b4:17:82:77:2b:33:d0:2d:
45:34:3a:ba:2c:12:3c:3e:e1:d8:30:bc:15:57:05:
04:8b:3d:bf:cb:a0:dc:d9:c3:04:c6:1f:ee:12:2b:
98:c8:38:66:e9:d2:11:5a:a1:ce:97:e6:21:42:9d:
2d:83:70:ee:df:f8:cf:a4:7c:aa:09:f1:98:30:a1:
19:a8:63:6d:05:b6:6c:c2:fd:01:1d:7a:3d:94:72:
ed:b1:79:24:68:d8:1f:c5:74:6c:2f:c1:98:d2:82:
60:a1:01:4c:61:fa:dc:1c:ee:ee:ad:aa:dd:12:e8:
1a:67:b1:b9:ee:ae:42:10:2a:95:e8:42:aa:d5:38:
6f:42:a0:8f:22:fb:f8:c8:29:5d:7e:e1:92:ee:c2:
1c:b7:9b:6b:d8:e4:0e:db:2d:8b:44:09:96:c1:3a:
53:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:01:AA:A1:B4:AE:96:A5:69:EC:27:AC:CF:51:2F:80:5D:49:B5:98
X509v3 Authority Key Identifier:
keyid:DC:05:DF:6E:40:4E:F9:20:E6:A5:92:8D:89:63:E6:A5:F8:D6:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:05:3b:e3:ee:e1:19:84:77:84:e2:43:9c:be:be:25:02:4d:
7f:91:c8:1b:fe:d5:b2:59:4c:86:7f:42:f7:89:3f:89:dc:18:
a8:b9:b6:ab:78:3c:4e:8f:b1:26:5d:19:77:d9:77:c5:79:57:
29:95:47:f2:90:a8:c5:88:9e:eb:0e:e4:19:27:d2:90:4f:df:
07:73:dc:54:8d:ea:10:d1:be:b4:2f:6c:d2:ea:94:a9:79:a6:
12:0c:9b:20:94:ca:92:c1:f5:5d:6b:2e:ce:2c:5f:17:e7:d1:
60:64:27:3a:f4:04:f0:f7:d7:43:19:45:6c:b4:3a:5b:16:ea:
1f:e4:7c:8a:e2:5a:40:df:f9:a2:1c:03:cb:fe:28:e8:0e:72:
42:3a:a6:64:b8:df:28:19:f8:b3:51:ff:bf:a4:be:b4:ec:96:
d3:23:f6:d8:c6:8a:b8:d6:40:aa:b5:5a:82:81:2b:45:e9:60:
40:21:93:23:1b:5e:49:9c:11:d4:56:1b:1b:b1:f6:0f:65:c8:
fa:b5:5b:b8:19:b0:93:99:ac:6f:6a:9f:66:32:71:33:b2:74:
5f:49:b4:82:b8:94:59:33:1b:c6:13:72:f8:0d:d4:65:45:8d:
0d:68:ae:18:ba:87:f3:2b:a5:61:8e:fd:0c:af:00:83:bb:09:
40:38:e8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:44:13 2026 by rpki-client