Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
File: 3AXfbkBO-SDmpZKNiWPmpfjWESA.mft (raw, json)
Hash identifier: dl9F2wmdYFhn+FoaoixsPTJaB2oTn+BQG7Tcwj5IXuQ=
Subject key identifier: 39:6C:4D:2B:11:89:10:A1:EE:9D:14:D3:B5:B7:D3:97:05:CC:25:77
Authority key identifier: DC:05:DF:6E:40:4E:F9:20:E6:A5:92:8D:89:63:E6:A5:F8:D6:11:20
Certificate issuer: /CN=dc05df6e404ef920e6a5928d8963e6a5f8d61120
Certificate serial: 01A1DEDE7428C1891303523307869EFB281C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
Manifest number: 1AF9
Signing time: Sun 15 Nov 2026 11:01:23 +0000
Manifest this update: Sun 15 Nov 2026 11:01:23 +0000
Manifest next update: Mon 16 Nov 2026 11:01:23 +0000
Files and hashes: 1: 3AXfbkBO-SDmpZKNiWPmpfjWESA.crl (hash: WYae0oEdwDHCsD+T0GDFtuqTTiWUxWRybTjrDXDeL/w=)
2: WLGZfCZKmxfMTTmHvuZLK2OwTpM.roa (hash: o/3DvFAKUtiQSitJNR+MpNrJR84HlaGWEw9iU7EJXWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 11:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:74:28:c1:89:13:03:52:33:07:86:9e:fb:28:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc05df6e404ef920e6a5928d8963e6a5f8d61120
Validity
Not Before: Nov 15 11:01:23 2026 GMT
Not After : Nov 16 11:01:23 2026 GMT
Subject: CN=396c4d2b118910a1ee9d14d3b5b7d39705cc2577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2e:88:8b:bc:0a:90:53:20:2e:eb:12:1b:af:
a9:69:47:00:e7:35:ad:02:a6:5a:1a:97:a2:d7:c1:
d4:68:0c:04:7e:32:06:9a:a7:8d:cb:ce:66:47:bb:
82:24:b8:78:34:ab:5f:83:82:61:a6:c6:f8:f3:1e:
71:63:5d:21:57:87:93:7e:c6:b0:6b:46:10:25:45:
20:de:fc:53:14:b8:78:d9:49:95:47:28:ad:ac:bb:
39:0d:0f:e2:ed:d2:01:42:86:18:ad:7d:97:1b:6d:
4c:a6:97:0a:7e:f0:23:98:ce:86:75:ef:8c:9f:3a:
9b:8b:a2:14:07:9c:b4:29:d5:5d:88:8a:fd:c0:2e:
cb:f8:4b:e9:f7:dc:67:e5:dd:b3:9b:a2:41:18:35:
11:9f:9a:a6:04:b4:2b:94:56:7f:f1:db:72:98:c4:
07:73:80:94:c8:2f:c9:54:31:a5:dd:9f:1f:58:54:
73:26:75:2e:29:41:a9:4f:9d:4c:dd:98:d7:94:37:
8c:73:61:c7:db:08:3e:d9:c4:18:9a:0c:40:10:06:
7d:6d:ef:5e:8c:1a:3b:72:b5:16:d0:db:64:f1:07:
99:65:31:b0:09:a8:ad:6e:9f:24:b1:82:9f:ac:94:
00:6d:3a:63:86:5c:6d:91:2e:5c:52:2b:b1:d4:09:
95:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:6C:4D:2B:11:89:10:A1:EE:9D:14:D3:B5:B7:D3:97:05:CC:25:77
X509v3 Authority Key Identifier:
keyid:DC:05:DF:6E:40:4E:F9:20:E6:A5:92:8D:89:63:E6:A5:F8:D6:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:05:b7:75:bc:29:1a:be:07:60:0d:76:0e:d3:09:e1:c2:7c:
ab:e3:9f:32:12:1d:1e:d6:ad:d2:ce:9a:29:07:6f:30:ab:b4:
d5:a2:4f:7c:e0:3f:73:17:a9:9b:00:50:f2:03:73:21:19:89:
df:ae:88:8f:82:20:e6:b9:11:f6:f9:c6:9c:e2:01:0c:ae:b6:
cf:8f:00:9e:3b:1a:c4:c5:b3:ba:d6:e7:4d:f9:2a:6a:4e:98:
87:af:59:d3:15:bf:d3:c9:c8:50:75:7a:79:6f:a2:d1:e2:9e:
b9:c0:9e:ca:11:5b:f0:4f:94:89:ae:5b:8b:2f:2c:e3:ff:35:
bf:31:ec:8b:b7:94:09:c7:90:d7:39:dd:11:77:56:4d:4c:4d:
29:00:59:9a:92:9a:ce:d2:e6:0d:9d:40:7e:67:bc:35:d0:4e:
22:16:f6:5a:e4:d1:01:af:9c:83:72:91:25:57:b0:52:1e:e4:
ec:fe:b7:b8:8a:dc:59:2e:bb:28:27:a9:95:58:19:0a:29:35:
d2:d7:c2:61:e4:ab:30:64:e3:82:a8:93:27:5b:a8:aa:e5:dc:
d0:75:9f:39:ba:22:58:6d:f5:92:12:28:c9:80:e7:b3:51:ce:
b1:f9:64:a5:1f:10:2b:d6:e4:54:31:a8:c0:22:ec:5b:cd:be:
d1:a8:92:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:44:43 2026 by rpki-client