Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
File: 3AXfbkBO-SDmpZKNiWPmpfjWESA.mft (raw, json)
Hash identifier: 5IJSTOyH5QotK7sZPSGcI9CyQu2Xbh7DAqXNX3/InJs=
Subject key identifier: 68:7A:94:4C:B8:E3:F3:2E:53:ED:79:2A:C9:5D:45:D7:57:43:7B:BF
Authority key identifier: DC:05:DF:6E:40:4E:F9:20:E6:A5:92:8D:89:63:E6:A5:F8:D6:11:20
Certificate issuer: /CN=dc05df6e404ef920e6a5928d8963e6a5f8d61120
Certificate serial: 01A1822BDB6F53D2C589B62B2D47D576858A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
Manifest number: 1AC9
Signing time: Wed 28 Oct 2026 11:01:14 +0000
Manifest this update: Wed 28 Oct 2026 11:01:14 +0000
Manifest next update: Thu 29 Oct 2026 11:01:14 +0000
Files and hashes: 1: 3AXfbkBO-SDmpZKNiWPmpfjWESA.crl (hash: ydxfcjmKcTcVrzs9c0iN6d43tD4nGxzdjUqR3nVAkA0=)
2: WLGZfCZKmxfMTTmHvuZLK2OwTpM.roa (hash: o/3DvFAKUtiQSitJNR+MpNrJR84HlaGWEw9iU7EJXWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:2b:db:6f:53:d2:c5:89:b6:2b:2d:47:d5:76:85:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc05df6e404ef920e6a5928d8963e6a5f8d61120
Validity
Not Before: Oct 28 11:01:14 2026 GMT
Not After : Oct 29 11:01:14 2026 GMT
Subject: CN=687a944cb8e3f32e53ed792ac95d45d757437bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ce:5e:f1:dd:8d:fa:4b:37:5e:dd:53:6e:e9:
f2:47:67:c6:28:b9:48:18:01:57:e8:25:0c:fd:d1:
25:a7:a1:03:90:8c:e0:23:64:6b:8e:cc:93:4d:a0:
9b:ac:cc:d9:34:89:9c:6f:ce:76:38:d6:4f:7d:4c:
9e:4d:91:48:a1:0a:44:dc:1f:45:e6:32:8c:10:59:
d0:43:c1:68:5e:c9:b3:eb:19:28:ca:20:83:63:c9:
0d:69:2e:42:04:f2:c0:79:80:86:6d:3b:59:e7:0d:
3e:49:d3:ba:17:07:23:4f:a5:15:bf:4f:cd:7d:06:
7f:52:c5:94:c9:52:34:a8:bb:b2:b4:ac:66:a5:d0:
39:90:ec:03:30:ef:5f:b7:5c:83:21:30:9f:17:df:
66:73:3f:d4:24:cc:12:42:de:59:d6:23:e8:04:e0:
83:6e:d7:51:78:b9:8f:9e:be:3e:f0:16:16:2a:58:
b1:c2:70:8c:62:80:80:1b:75:ec:4d:9e:fc:c2:25:
02:ca:2e:37:d1:23:dd:c1:e8:91:a1:d1:06:57:89:
d6:45:3b:02:eb:cf:48:c1:17:ef:74:13:61:f0:50:
21:6e:8e:b4:2f:3f:47:f9:0d:e8:26:21:29:b8:c5:
1a:d5:0d:0c:f8:76:b0:69:b1:6a:43:66:3e:fd:a1:
a6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:7A:94:4C:B8:E3:F3:2E:53:ED:79:2A:C9:5D:45:D7:57:43:7B:BF
X509v3 Authority Key Identifier:
keyid:DC:05:DF:6E:40:4E:F9:20:E6:A5:92:8D:89:63:E6:A5:F8:D6:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:64:58:79:73:ab:97:c8:31:24:7e:f0:a7:c4:d0:34:51:c5:
64:89:c6:08:38:ef:3b:8a:91:ce:0f:eb:c1:6e:b3:d4:4e:b6:
31:1e:a3:8a:c8:20:fa:ae:18:bf:a4:d8:9e:d1:be:ad:6f:8e:
a5:f4:4c:42:bd:9a:b9:8f:cd:31:db:8b:c0:89:22:51:de:de:
c5:b4:a4:64:c8:f0:1d:bc:15:bc:bb:dc:39:f9:d5:29:ec:26:
ad:b2:67:2e:a6:49:cb:3b:cd:40:e6:aa:56:dc:e5:af:7f:4b:
cc:30:6b:02:ff:a6:73:35:c5:34:78:0f:4c:40:76:2d:2e:d2:
d3:49:97:ee:8b:22:59:05:32:44:cc:e9:41:83:af:ca:f7:f3:
ce:df:d5:62:a2:21:a5:33:98:ef:e9:85:1e:7b:26:6c:2c:e7:
29:a0:64:58:00:47:ab:49:e6:4a:90:ea:22:a6:ea:60:69:f4:
d8:2c:60:ec:b8:0f:61:fd:1e:0c:bf:15:cc:27:8b:23:16:6e:
72:78:ec:a8:03:d7:d3:6c:0b:93:33:61:8a:c1:50:1b:7a:d7:
26:bb:7b:1c:eb:a5:27:9f:96:26:62:7e:5e:4f:ce:8b:4d:74:
63:b6:2b:1d:b3:ca:9a:0c:56:78:57:29:27:59:58:80:cb:16:
fd:a3:e3:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGCK9tvU9LFibYrLUfVdoWKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMDVkZjZlNDA0ZWY5MjBlNmE1OTI4ZDg5NjNlNmE1Zjhk
NjExMjAwHhcNMjYxMDI4MTEwMTE0WhcNMjYxMDI5MTEwMTE0WjAzMTEwLwYDVQQD
Eyg2ODdhOTQ0Y2I4ZTNmMzJlNTNlZDc5MmFjOTVkNDVkNzU3NDM3YmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtc5e8d2N+ks3Xt1TbunyR2fGKLlI
GAFX6CUM/dElp6EDkIzgI2RrjsyTTaCbrMzZNImcb852ONZPfUyeTZFIoQpE3B9F
5jKMEFnQQ8FoXsmz6xkoyiCDY8kNaS5CBPLAeYCGbTtZ5w0+SdO6FwcjT6UVv0/N
fQZ/UsWUyVI0qLuytKxmpdA5kOwDMO9ft1yDITCfF99mcz/UJMwSQt5Z1iPoBOCD
btdReLmPnr4+8BYWKlixwnCMYoCAG3XsTZ78wiUCyi430SPdweiRodEGV4nWRTsC
689IwRfvdBNh8FAhbo60Lz9H+Q3oJiEpuMUa1Q0M+HawabFqQ2Y+/aGmswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGh6lEy44/MuU+15KsldRddXQ3u/MB8GA1UdIwQY
MBaAFNwF325ATvkg5qWSjYlj5qX41hEgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0FYZmJrQk8tU0RtcFpLTmlXUG1wZmpXRVNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8wYzM4ODYtYTMyZC00NDM1LWFiNzQt
YmNlOTM0MjA1YWU4LzEvM0FYZmJrQk8tU0RtcFpLTmlXUG1wZmpXRVNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8wYzM4ODYtYTMyZC00NDM1LWFiNzQtYmNlOTM0MjA1YWU4
LzEvM0FYZmJrQk8tU0RtcFpLTmlXUG1wZmpXRVNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACmRYeXOr
l8gxJH7wp8TQNFHFZInGCDjvO4qRzg/rwW6z1E62MR6jisgg+q4Yv6TYntG+rW+O
pfRMQr2auY/NMduLwIkiUd7exbSkZMjwHbwVvLvcOfnVKewmrbJnLqZJyzvNQOaq
Vtzlr39LzDBrAv+mczXFNHgPTEB2LS7S00mX7osiWQUyRMzpQYOvyvfzzt/VYqIh
pTOY7+mFHnsmbCznKaBkWABHq0nmSpDqIqbqYGn02Cxg7LgPYf0eDL8VzCeLIxZu
cnjsqAPX02wLkzNhisFQG3rXJrt7HOulJ5+WJmJ+Xk/Oi010Y7YrHbPKmgxWeFcp
J1lYgMsW/aPjjA==
-----END CERTIFICATE-----
Generated at Wed Oct 28 16:31:42 2026 by rpki-client