Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
File: 3AXfbkBO-SDmpZKNiWPmpfjWESA.mft (raw, json)
Hash identifier: veDISPqRkyCMQCs6B5d3t9+8jgKIlzQ4v4tWZvN1soU=
Subject key identifier: 37:AD:DF:6D:13:11:2A:74:28:77:54:92:A0:4D:A3:4E:7E:11:76:3E
Authority key identifier: DC:05:DF:6E:40:4E:F9:20:E6:A5:92:8D:89:63:E6:A5:F8:D6:11:20
Certificate issuer: /CN=dc05df6e404ef920e6a5928d8963e6a5f8d61120
Certificate serial: 019E30720A5DF0BBEFB77752E041BD811EFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
Manifest number: 1911
Signing time: Sat 16 May 2026 11:00:40 +0000
Manifest this update: Sat 16 May 2026 11:00:40 +0000
Manifest next update: Sun 17 May 2026 11:00:40 +0000
Files and hashes: 1: 3AXfbkBO-SDmpZKNiWPmpfjWESA.crl (hash: 6OCIveED46qjUSQ4LZyt+G5gJY3+9cXWbeKXBKVLnmw=)
2: WLGZfCZKmxfMTTmHvuZLK2OwTpM.roa (hash: o/3DvFAKUtiQSitJNR+MpNrJR84HlaGWEw9iU7EJXWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:0a:5d:f0:bb:ef:b7:77:52:e0:41:bd:81:1e:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc05df6e404ef920e6a5928d8963e6a5f8d61120
Validity
Not Before: May 16 11:00:40 2026 GMT
Not After : May 17 11:00:40 2026 GMT
Subject: CN=37addf6d13112a7428775492a04da34e7e11763e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c0:f9:f2:f6:79:96:0e:cc:59:d3:3d:5d:ed:
3b:4b:51:00:ea:9b:80:90:ee:4a:7f:11:56:89:2d:
ef:e4:d4:4a:d9:ca:a5:45:02:34:ce:95:f4:58:a9:
49:9c:07:39:09:9e:d5:76:bf:f1:ac:03:15:2b:cd:
17:db:4a:42:66:86:8b:fe:d3:b9:85:54:98:e7:d7:
4e:fb:70:a1:01:d0:9b:c5:7c:16:e5:db:d0:3f:f0:
3b:3b:06:ce:cd:8d:6f:b5:bc:93:57:a5:22:04:0e:
4b:8b:a3:97:4c:03:75:d2:3f:d6:7c:9b:14:66:af:
ae:84:6f:5b:2a:43:23:c9:84:30:07:3f:08:e2:c7:
aa:81:1a:2f:a8:56:cd:e7:e9:d8:1b:e1:59:e8:c5:
db:54:c3:11:8c:86:b0:8f:e5:79:28:03:c0:a5:b1:
9b:31:75:7b:32:2f:98:7c:dd:9b:a6:f6:a7:f5:25:
cf:a9:ab:db:48:3b:79:a9:00:34:54:f0:d8:29:34:
5b:11:d6:f3:df:cb:6d:2d:55:d6:72:70:f2:05:85:
65:a6:de:5d:9d:f6:70:10:d2:01:99:3d:3e:1a:ba:
0e:ad:cc:4e:cb:0f:a5:bf:2a:f4:c4:3b:be:b4:81:
b9:08:63:0f:d2:63:60:1d:50:5f:2c:46:00:1b:0c:
3c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:AD:DF:6D:13:11:2A:74:28:77:54:92:A0:4D:A3:4E:7E:11:76:3E
X509v3 Authority Key Identifier:
keyid:DC:05:DF:6E:40:4E:F9:20:E6:A5:92:8D:89:63:E6:A5:F8:D6:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:87:93:e8:21:7e:e3:25:b9:a4:5f:5b:7b:06:20:51:a2:d6:
ea:fc:5f:9f:0b:c7:d1:b8:8f:f7:20:64:5e:b7:e8:9c:e4:6a:
84:6e:f2:82:d5:ae:a1:a4:3a:66:08:c4:7a:6b:d0:15:88:9e:
d8:d9:10:32:24:a9:6f:a0:4c:89:11:f3:d8:02:b7:5f:c0:3a:
01:f1:6a:c6:fc:df:0c:99:8c:60:ea:b5:27:c0:e5:5b:b3:16:
a3:99:19:32:e8:18:59:e1:9b:74:d6:94:4b:fa:35:6d:4a:d1:
b9:7c:10:0d:43:14:1a:a1:c9:f0:97:55:70:08:ae:f6:51:c1:
a3:53:64:81:a2:94:35:3a:74:83:8c:0f:d1:2a:70:14:8a:26:
54:34:5d:08:c6:7e:66:0a:d3:cc:f4:dd:78:cb:ce:96:07:db:
12:40:e6:2a:2a:16:53:be:0d:80:c7:b2:78:05:b7:73:a4:8f:
58:47:ba:5b:5b:df:fe:00:01:95:ac:75:8b:5e:58:40:c5:2f:
e5:5c:22:49:8a:4a:be:5e:10:18:7d:31:a5:4f:6f:ce:e1:c0:
95:bf:e0:cb:bc:a8:4a:8e:ba:ee:77:c9:c1:c6:e0:a6:58:bb:
6f:a4:90:e3:34:30:e3:ec:11:3b:13:8a:0d:02:f3:0d:ff:c8:
64:75:2a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:30:56 2026 by rpki-client