Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
File: 3AXfbkBO-SDmpZKNiWPmpfjWESA.mft (raw, json)
Hash identifier: KBpYuaZtVb5hJR+mvNV6NoCbUsjssWh0VLHjfSFJOOI=
Subject key identifier: 0B:8B:41:82:D6:4A:3D:55:FC:CA:E9:5D:BC:87:F5:30:84:29:10:EB
Authority key identifier: DC:05:DF:6E:40:4E:F9:20:E6:A5:92:8D:89:63:E6:A5:F8:D6:11:20
Certificate issuer: /CN=dc05df6e404ef920e6a5928d8963e6a5f8d61120
Certificate serial: 019FA14D9D8559049DF1A30C4695515E12FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
Manifest number: 19D0
Signing time: Mon 27 Jul 2026 02:00:46 +0000
Manifest this update: Mon 27 Jul 2026 02:00:46 +0000
Manifest next update: Tue 28 Jul 2026 02:00:46 +0000
Files and hashes: 1: 3AXfbkBO-SDmpZKNiWPmpfjWESA.crl (hash: Oa32C7MbCplqJnRLt5Wo2k+xBl7KK/xxq4MXp37/htw=)
2: WLGZfCZKmxfMTTmHvuZLK2OwTpM.roa (hash: o/3DvFAKUtiQSitJNR+MpNrJR84HlaGWEw9iU7EJXWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:9d:85:59:04:9d:f1:a3:0c:46:95:51:5e:12:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc05df6e404ef920e6a5928d8963e6a5f8d61120
Validity
Not Before: Jul 27 02:00:46 2026 GMT
Not After : Jul 28 02:00:46 2026 GMT
Subject: CN=0b8b4182d64a3d55fccae95dbc87f530842910eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:79:2c:de:84:f5:3d:7b:5a:05:7e:b4:e0:dd:
c7:96:b7:24:20:f6:96:d6:0f:2d:62:23:bf:03:09:
44:2c:67:da:01:24:66:95:ad:70:3a:de:25:94:1a:
ed:ad:b1:4a:ed:d9:82:26:7a:f2:9c:b3:4a:75:2d:
f4:07:39:a8:86:5f:1d:20:0f:41:dc:86:83:29:08:
19:b1:77:42:a0:45:d2:a9:cb:82:96:c5:5a:86:86:
a2:ca:1e:1a:18:88:db:76:ac:30:ae:03:74:9b:aa:
64:12:c8:d2:81:26:50:7b:ae:62:87:5b:31:39:b5:
86:06:a7:c6:a0:43:b0:77:4d:e7:42:ad:90:ba:ac:
a6:76:fc:39:4d:d9:ef:04:5f:69:93:d6:64:01:73:
c7:18:5b:8e:f5:67:a2:7d:cf:d9:f1:6a:dc:63:b6:
8b:c6:a9:fa:57:8e:e9:8c:a0:2b:50:a3:de:09:41:
8e:96:97:01:de:d4:bd:14:24:38:cc:5f:5b:0e:77:
17:be:19:ec:2e:61:1d:7b:8e:a8:17:dc:7d:1d:5a:
7f:16:f1:8e:30:4e:6f:de:20:22:08:00:47:78:64:
f6:31:15:69:25:ce:86:5a:af:b2:99:75:6d:11:11:
ef:da:81:d2:7a:7d:da:28:c7:ce:74:01:70:b3:6e:
c2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:8B:41:82:D6:4A:3D:55:FC:CA:E9:5D:BC:87:F5:30:84:29:10:EB
X509v3 Authority Key Identifier:
keyid:DC:05:DF:6E:40:4E:F9:20:E6:A5:92:8D:89:63:E6:A5:F8:D6:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:51:bb:e1:97:e8:4d:6b:75:62:1c:cc:de:9b:ae:5a:82:cc:
33:53:59:3b:81:09:b4:fd:36:38:36:7f:13:a2:66:57:13:0a:
03:ab:f9:75:67:aa:75:07:a8:10:69:c0:8d:3f:27:a3:87:c4:
61:dd:5c:16:4f:d6:24:b5:1c:24:55:06:a9:04:98:dc:c9:ab:
44:0b:9d:c4:19:50:5a:e5:e3:5f:c3:ac:4b:c0:70:41:82:5a:
7a:cf:34:53:dc:97:c9:cd:08:67:4e:69:f3:b5:75:1f:aa:20:
f7:31:af:45:43:5e:06:00:1c:d7:e2:96:35:7e:3e:4c:7a:47:
17:8b:e1:cb:0d:f3:65:d8:59:1f:33:0e:d4:e0:b7:ab:74:e4:
ff:84:97:d2:f8:c8:86:e9:9e:a7:3b:cf:14:77:f1:bc:a6:06:
3c:11:8d:a7:ba:de:e6:f6:a6:c2:6a:21:6b:8b:29:b7:fa:4d:
7b:40:6f:16:28:78:0b:f3:54:c4:12:1f:15:8b:ee:af:db:3b:
23:50:e8:c4:73:de:d1:8e:19:07:d0:64:66:e8:cd:f3:3b:a3:
96:e9:56:86:a9:bc:4d:ee:43:25:03:57:04:95:b7:b7:0d:be:
86:26:6c:af:28:59:06:38:0d:c9:d8:09:0c:8c:4d:2d:53:d0:
03:a5:c3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 12:01:58 2026 by rpki-client