Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
File: axBPHkq67B7_gPJixi-WwlQ4yOE.mft (raw, json)
Hash identifier: /po+QA0MtZFJKwsmmVyLWyQOGTlPc3TN6dI9T5G5eXA=
Subject key identifier: B4:72:6A:F0:CB:05:C3:59:B7:37:2A:CD:7D:15:54:66:CF:E1:EE:4D
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial: 019F8FB54613C7D613F5EC6C3644C336CFE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
Manifest number: 1207
Signing time: Thu 23 Jul 2026 16:00:49 +0000
Manifest this update: Thu 23 Jul 2026 16:00:49 +0000
Manifest next update: Fri 24 Jul 2026 16:00:49 +0000
Files and hashes: 1: 0H1fWdcgbIVkDrtIX60zLRSDmfk.asa (hash: m+WvR7qD+ymh6yt2x5AGaH23y1MbYzEZgWfbmCnzaQw=)
2: DT0PQm3KFAOHbbVUZ17DY8HvvFE.asa (hash: BarfhuAuoCRLDCgvqKuWLXb1LEEPOJ8pteMWw1ACFFU=)
3: IMoGaiROnW6LTILmyh94FF46a9s.roa (hash: YGEQqYNkK01s4h4tP2/taaUxOF3aULWqQu6lncXBybs=)
4: Q6nx47WK-TIPeGJfoAcbD3_cmuA.asa (hash: YsbIxuDdlulN9sTEsjlvvtUQ0EWP8MmMnGxaWWzj4YU=)
5: Xe0J2fy4oVg3QXL7klruWZtuHvw.roa (hash: YXUiQPNKd3l5WjbM/fjv6lhaHwQbFJ0v83be14OVndw=)
6: axBPHkq67B7_gPJixi-WwlQ4yOE.crl (hash: 3MNpCc/rMidbZSr7VeAR2oYfIIVj3inWU/ucT309Gkw=)
7: epCD7ULJHywW7ElNPu9kKqQ44Js.roa (hash: LqD+bmgIRqQGH06YIbpEzuPq7WjpnQb7KbHalEBo4nk=)
8: q0WTkteUjice7A7HxM9H09oezsI.roa (hash: lfgBegUoN1X7J69hWCSBOlVFuWF7yV6CuCLUK0Dd7TA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:46:13:c7:d6:13:f5:ec:6c:36:44:c3:36:cf:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Validity
Not Before: Jul 23 16:00:49 2026 GMT
Not After : Jul 24 16:00:49 2026 GMT
Subject: CN=b4726af0cb05c359b7372acd7d155466cfe1ee4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:48:8c:33:56:db:25:6b:30:ec:6f:40:97:6e:
a0:98:32:be:40:71:25:e4:e8:e0:cd:d0:d2:be:5c:
80:26:73:e6:41:75:7f:1b:62:3a:9b:01:b9:29:00:
4d:b2:7e:a7:c6:a9:f2:19:9b:c4:f5:0c:89:24:79:
1c:31:db:28:22:1d:8a:37:9f:31:22:e0:b9:19:1c:
d8:47:0c:94:79:41:71:8b:6b:8c:e9:1d:3c:25:6f:
43:26:26:08:8a:46:30:a1:c6:47:57:11:34:bc:3d:
35:48:33:5b:34:80:f6:8e:e8:93:1b:29:c1:58:c0:
49:38:b8:e1:d7:63:9d:26:52:0d:09:28:7d:1a:4b:
f7:5f:7b:31:9b:48:86:24:5d:59:3d:e3:23:e2:24:
72:5d:96:80:78:11:84:c2:7c:41:0a:8d:cc:f8:67:
e2:cd:c2:cc:0e:e6:2b:a0:4e:31:26:af:78:36:69:
39:98:83:56:a7:f8:98:bb:30:a4:5d:83:e5:81:47:
5b:a4:83:85:10:27:31:e6:04:3b:a1:28:5b:85:e4:
f1:31:01:62:0d:13:85:85:7b:d7:b7:25:b9:84:27:
46:2c:2a:03:a0:ca:b8:d4:e5:8d:26:b5:d4:c6:ee:
51:42:99:41:23:83:13:99:81:f6:6b:47:49:f2:9d:
ae:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:72:6A:F0:CB:05:C3:59:B7:37:2A:CD:7D:15:54:66:CF:E1:EE:4D
X509v3 Authority Key Identifier:
keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f9:14:b2:2a:0f:f9:48:08:a3:01:4b:ff:b7:76:ea:6f:0b:
11:32:ce:48:5a:9b:d1:5d:16:27:b7:7e:97:b1:80:9f:ac:d2:
ca:74:5c:50:39:ee:0e:62:14:58:fa:61:54:f6:6c:24:08:7c:
2c:21:5c:b4:76:d1:38:ce:d1:b6:ee:75:68:ad:26:60:92:d8:
e0:4d:3a:2b:52:14:e8:49:51:95:d8:bf:46:1f:6e:05:4b:fe:
78:06:58:96:e8:2d:1d:15:46:fd:46:ad:d0:48:13:26:99:c7:
ff:b0:b8:bb:e1:42:a3:dd:8e:1c:13:10:05:26:99:dc:6d:17:
e0:d5:85:32:bc:f8:22:bd:8a:5b:f1:35:51:fe:89:d0:4b:e4:
b2:b3:18:66:7b:d0:ce:6e:4c:f7:67:90:bb:4f:72:16:64:4a:
c1:27:d6:4e:b5:fa:3f:de:b5:4a:e7:0a:2a:61:0a:f5:3b:c7:
7d:b9:17:b6:11:30:0d:cd:6c:1f:7a:a8:9b:c1:22:cf:27:85:
75:7c:88:76:58:f6:f5:94:24:f1:05:1f:1b:0f:24:27:4a:b9:
4d:a6:d7:a1:78:83:28:fa:c8:2d:88:6b:d4:21:ca:c3:87:5f:
09:45:86:6a:fe:c6:c8:3f:07:42:52:0f:d1:40:de:da:6b:15:
52:46:7f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:11:26 2026 by rpki-client