Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
File: 3AXfbkBO-SDmpZKNiWPmpfjWESA.mft (raw, json)
Hash identifier: pDUB/RqcRq2275SKAKD6WdKFYuKgp/33mwA/APSVN04=
Subject key identifier: 50:74:4B:5A:2E:13:59:B3:55:89:0C:EA:B0:64:DF:AB:25:3F:13:43
Authority key identifier: DC:05:DF:6E:40:4E:F9:20:E6:A5:92:8D:89:63:E6:A5:F8:D6:11:20
Certificate issuer: /CN=dc05df6e404ef920e6a5928d8963e6a5f8d61120
Certificate serial: 01A08CE979F56EB08080AEFCE6F977E3D1DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
Manifest number: 1A4A
Signing time: Thu 10 Sep 2026 20:01:46 +0000
Manifest this update: Thu 10 Sep 2026 20:01:46 +0000
Manifest next update: Fri 11 Sep 2026 20:01:46 +0000
Files and hashes: 1: 3AXfbkBO-SDmpZKNiWPmpfjWESA.crl (hash: akpTsdq/bqthJ4zUTIvLZBH2NJNsHECgzb23M5DpD5s=)
2: WLGZfCZKmxfMTTmHvuZLK2OwTpM.roa (hash: o/3DvFAKUtiQSitJNR+MpNrJR84HlaGWEw9iU7EJXWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 20:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:e9:79:f5:6e:b0:80:80:ae:fc:e6:f9:77:e3:d1:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc05df6e404ef920e6a5928d8963e6a5f8d61120
Validity
Not Before: Sep 10 20:01:46 2026 GMT
Not After : Sep 11 20:01:46 2026 GMT
Subject: CN=50744b5a2e1359b355890ceab064dfab253f1343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ff:10:4c:9b:5a:6b:c3:f6:92:70:52:b9:c1:7e:
99:fe:37:4a:33:4a:3d:45:41:b4:95:61:58:75:b9:
47:3b:a5:1e:d9:a2:0a:59:99:34:5b:ce:6c:0a:fe:
88:f3:8b:a6:99:64:4e:d2:6f:fe:3c:9a:f3:aa:00:
e3:74:7f:71:e4:c1:dc:86:95:78:9d:04:bf:3a:79:
70:2c:af:af:fe:34:bd:84:3e:0c:b9:e8:e7:48:f5:
41:4d:58:fd:dc:fc:06:d1:d5:22:e1:e7:46:ea:dd:
d6:17:97:3c:3d:7b:5b:5b:73:db:37:3b:12:11:9f:
b0:52:33:5c:0e:c2:3c:a6:af:38:2d:62:19:5d:29:
c2:2a:59:d3:25:3c:e7:55:b9:fc:ae:46:db:48:97:
27:64:68:92:20:a8:32:3f:9e:db:30:b3:98:97:5b:
6b:c6:2a:3b:7f:dc:f8:b4:d0:53:82:ea:6d:60:5f:
e8:80:3d:87:d5:9c:49:03:0c:05:74:b6:52:a5:13:
f1:cb:31:aa:34:51:8d:63:e7:b8:e8:47:a7:6c:26:
f7:03:31:f5:9b:ec:c5:c3:6a:67:ca:67:96:9a:2c:
a2:3c:dd:be:79:0b:17:d2:58:fd:56:77:44:16:d2:
20:2d:20:75:90:06:73:fd:86:b9:17:85:d0:30:c8:
6c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:74:4B:5A:2E:13:59:B3:55:89:0C:EA:B0:64:DF:AB:25:3F:13:43
X509v3 Authority Key Identifier:
keyid:DC:05:DF:6E:40:4E:F9:20:E6:A5:92:8D:89:63:E6:A5:F8:D6:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:91:0c:e1:b8:61:2c:3e:3d:00:6b:01:bb:63:aa:4f:4d:48:
a1:85:c0:14:14:4d:3c:93:68:b9:75:3a:17:ab:33:65:e9:76:
30:36:35:2d:cd:aa:dd:ce:22:db:44:07:71:4d:27:09:3e:b0:
fa:05:a5:f7:1f:e9:c1:f3:13:50:dc:0e:9b:d8:e8:26:97:37:
fc:0f:5f:22:99:02:57:8f:85:46:cf:2c:4b:87:f1:83:21:29:
39:ba:fc:79:d9:8e:77:d8:19:3e:2b:8c:a4:86:8c:87:eb:a4:
87:85:53:5c:bf:3b:88:00:fb:29:2b:09:db:e5:66:d7:ce:e7:
79:bc:56:5a:9e:f3:a7:ec:46:1c:46:27:42:42:58:0a:d6:91:
16:09:a6:85:b3:b6:99:39:56:6a:09:9f:3b:8a:9b:36:52:09:
4c:f6:af:2a:28:28:27:92:dc:0d:f0:67:48:fb:72:8c:09:78:
9c:11:e8:92:d5:6b:50:50:a2:61:5e:44:60:75:48:13:e4:dc:
ed:0c:1c:a4:15:a1:3d:8b:7a:fb:d4:6d:7a:9b:2b:9b:aa:9c:
7e:63:a2:d7:a1:24:af:74:5c:9a:95:7c:43:31:b8:10:63:f4:
f6:eb:08:25:10:8e:1f:99:b2:2e:e5:2f:5b:92:00:fd:48:6a:
33:91:22:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:31:47 2026 by rpki-client