Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
File: 3AXfbkBO-SDmpZKNiWPmpfjWESA.mft (raw, json)
Hash identifier: FYL0+vlHQrhMqf6sxa1sP4epQFEPqATXLfkDEfKaK/I=
Subject key identifier: 82:7E:2D:9A:44:CA:88:B2:02:59:DA:79:51:CE:E5:86:9D:41:B1:AC
Authority key identifier: DC:05:DF:6E:40:4E:F9:20:E6:A5:92:8D:89:63:E6:A5:F8:D6:11:20
Certificate issuer: /CN=dc05df6e404ef920e6a5928d8963e6a5f8d61120
Certificate serial: 019D3940AD25136FCF3A8392EA11C903A959
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 11:00:33 +0000
Manifest this update: Sun 29 Mar 2026 11:00:33 +0000
Manifest next update: Mon 30 Mar 2026 11:00:33 +0000
Files and hashes: 1: 3AXfbkBO-SDmpZKNiWPmpfjWESA.crl (hash: I1fEIAF5OYKsZsHm3UFrsq1PnYPLbcfGKQlztHlx8aU=)
2: WLGZfCZKmxfMTTmHvuZLK2OwTpM.roa (hash: o/3DvFAKUtiQSitJNR+MpNrJR84HlaGWEw9iU7EJXWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:ad:25:13:6f:cf:3a:83:92:ea:11:c9:03:a9:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc05df6e404ef920e6a5928d8963e6a5f8d61120
Validity
Not Before: Mar 29 11:00:33 2026 GMT
Not After : Mar 30 11:00:33 2026 GMT
Subject: CN=827e2d9a44ca88b20259da7951cee5869d41b1ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3a:f2:cf:e4:07:ee:ac:5c:06:a2:a8:99:c1:
fa:30:68:2f:e9:b6:7b:6c:c7:25:cb:3a:6d:78:4c:
8b:b9:8f:68:0b:ef:cd:9e:85:35:b6:fb:dd:69:8d:
5d:73:66:13:45:44:c6:71:5f:85:21:e1:e9:82:8d:
ca:29:2d:e9:42:f4:d8:4c:70:c2:a0:d8:19:1f:b6:
8e:c8:93:75:6d:1f:9d:dc:30:65:11:88:1e:af:03:
52:97:50:e5:5e:77:43:bd:43:08:a4:b8:0d:80:4f:
f8:bf:e0:2a:ea:27:f1:8a:32:71:12:86:a6:7f:b0:
20:e8:fd:37:af:a5:55:b7:b9:83:ee:8e:02:7c:37:
cf:d9:14:cf:41:10:75:a0:9f:56:02:78:9c:75:66:
41:32:ff:ba:82:b6:4c:75:3a:42:e8:bf:9e:a2:fe:
56:05:a0:62:06:8e:81:9d:f1:29:03:87:ee:be:a8:
47:cf:f3:af:36:30:d2:44:ee:06:0e:fb:37:f2:ba:
f5:36:bb:82:62:56:55:75:82:3b:bb:82:7e:8f:f0:
c7:51:dd:07:7e:71:73:a2:00:6f:c3:38:0a:0f:0b:
e9:62:e7:87:f8:93:e9:81:0a:a7:20:79:49:45:4c:
61:ae:14:66:35:b5:fa:7a:3f:5b:1c:eb:8b:2b:79:
a5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:7E:2D:9A:44:CA:88:B2:02:59:DA:79:51:CE:E5:86:9D:41:B1:AC
X509v3 Authority Key Identifier:
keyid:DC:05:DF:6E:40:4E:F9:20:E6:A5:92:8D:89:63:E6:A5:F8:D6:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:38:ba:0e:d9:50:2b:6f:fb:8b:d0:d3:e6:66:6d:52:57:dd:
c4:32:bf:6d:7d:4c:a8:64:29:42:f4:fc:b6:2f:b8:a1:e0:cb:
8e:f9:3d:c1:29:d1:18:0c:87:19:5b:7c:0f:5b:76:e3:48:2a:
85:bc:91:8c:ac:fa:fb:8e:26:59:bd:6c:80:7b:11:5f:93:2e:
1c:2c:fb:ba:5a:b5:70:df:4b:f5:bd:f1:df:01:d3:02:bf:af:
7a:d1:96:ac:fc:db:4c:5d:78:94:4d:a1:0e:cc:da:bd:bd:50:
15:5a:86:02:e2:01:d7:fe:2d:c4:dc:50:21:f3:96:16:98:67:
13:0f:e4:a6:1d:11:6e:66:93:6a:4d:00:82:e1:3e:f0:29:3e:
c5:90:39:46:02:7c:90:b1:a0:46:35:3b:71:60:35:df:b3:65:
bb:e4:9f:b5:49:e0:9d:21:29:74:ae:4e:82:a4:ac:b1:ee:84:
5a:ef:96:ee:93:d4:c9:b5:d6:f5:f1:99:4a:eb:28:65:95:3e:
4c:4e:41:b9:f0:17:a2:5b:97:9a:71:1d:15:98:ec:af:b2:a2:
53:c1:b8:14:56:17:24:b8:b7:01:d5:87:56:11:96:10:d4:85:
f1:10:ad:f1:c3:04:41:58:21:86:35:3f:7a:e4:a9:03:c4:56:
48:91:8b:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QK0lE2/POoOS6hHJA6lZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMDVkZjZlNDA0ZWY5MjBlNmE1OTI4ZDg5NjNlNmE1Zjhk
NjExMjAwHhcNMjYwMzI5MTEwMDMzWhcNMjYwMzMwMTEwMDMzWjAzMTEwLwYDVQQD
Eyg4MjdlMmQ5YTQ0Y2E4OGIyMDI1OWRhNzk1MWNlZTU4NjlkNDFiMWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zryz+QH7qxcBqKomcH6MGgv6bZ7
bMclyzpteEyLuY9oC+/NnoU1tvvdaY1dc2YTRUTGcV+FIeHpgo3KKS3pQvTYTHDC
oNgZH7aOyJN1bR+d3DBlEYgerwNSl1DlXndDvUMIpLgNgE/4v+Aq6ifxijJxEoam
f7Ag6P03r6VVt7mD7o4CfDfP2RTPQRB1oJ9WAnicdWZBMv+6grZMdTpC6L+eov5W
BaBiBo6BnfEpA4fuvqhHz/OvNjDSRO4GDvs38rr1NruCYlZVdYI7u4J+j/DHUd0H
fnFzogBvwzgKDwvpYueH+JPpgQqnIHlJRUxhrhRmNbX6ej9bHOuLK3ml5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIJ+LZpEyoiyAlnaeVHO5YadQbGsMB8GA1UdIwQY
MBaAFNwF325ATvkg5qWSjYlj5qX41hEgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0FYZmJrQk8tU0RtcFpLTmlXUG1wZmpXRVNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8wYzM4ODYtYTMyZC00NDM1LWFiNzQt
YmNlOTM0MjA1YWU4LzEvM0FYZmJrQk8tU0RtcFpLTmlXUG1wZmpXRVNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8wYzM4ODYtYTMyZC00NDM1LWFiNzQtYmNlOTM0MjA1YWU4
LzEvM0FYZmJrQk8tU0RtcFpLTmlXUG1wZmpXRVNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYji6DtlQ
K2/7i9DT5mZtUlfdxDK/bX1MqGQpQvT8ti+4oeDLjvk9wSnRGAyHGVt8D1t240gq
hbyRjKz6+44mWb1sgHsRX5MuHCz7ulq1cN9L9b3x3wHTAr+vetGWrPzbTF14lE2h
Dszavb1QFVqGAuIB1/4txNxQIfOWFphnEw/kph0RbmaTak0AguE+8Ck+xZA5RgJ8
kLGgRjU7cWA137Nlu+SftUngnSEpdK5OgqSsse6EWu+W7pPUybXW9fGZSusoZZU+
TE5BufAXoluXmnEdFZjsr7KiU8G4FFYXJLi3AdWHVhGWENSF8RCt8cMEQVghhjU/
euSpA8RWSJGLgg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:56 2026 by rpki-client