Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft
File: Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft (raw, json)
Hash identifier: 9fYOdRmmljHLGzQYFss/1GlE6enOiSZS4NDxvhyMAPQ=
Subject key identifier: E4:08:EB:64:B3:11:51:77:C2:A2:37:8D:36:86:8F:AA:B5:C3:62:F4
Authority key identifier: 03:1D:03:15:F7:7B:95:49:5F:60:DC:62:B3:58:E4:C1:B3:FB:5D:C0
Certificate issuer: /CN=031d0315f77b95495f60dc62b358e4c1b3fb5dc0
Certificate serial: 019E1C7D95526453A31A2D98D694BA107665
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ax0DFfd7lUlfYNxis1jkwbP7XcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft
Manifest number: 0111
Signing time: Tue 12 May 2026 14:00:52 +0000
Manifest this update: Tue 12 May 2026 14:00:52 +0000
Manifest next update: Wed 13 May 2026 14:00:52 +0000
Files and hashes: 1: 273CJOloMHCNr40TZUcFVxeZFms.asa (hash: tOqMGrNI4l0VYDU+tVPacc01C6txXDyN4W2pPE0sHCs=)
2: Ax0DFfd7lUlfYNxis1jkwbP7XcA.crl (hash: FuhiZ5aOdQ+eVhRl7V2kgokLKmyH5f5jQkAUWXmLvIM=)
3: WfIBNFBJCmDGiwOF58LkEkU6i_k.asa (hash: M5LpZEXgCwgBFWCXLQ6KoLhrTqWESWDvJESM0Dp+OEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ax0DFfd7lUlfYNxis1jkwbP7XcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:95:52:64:53:a3:1a:2d:98:d6:94:ba:10:76:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=031d0315f77b95495f60dc62b358e4c1b3fb5dc0
Validity
Not Before: May 12 14:00:52 2026 GMT
Not After : May 13 14:00:52 2026 GMT
Subject: CN=e408eb64b3115177c2a2378d36868faab5c362f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c8:32:d2:cc:ed:99:0e:03:2f:58:52:ba:ac:
20:21:61:8a:a9:40:75:ca:8f:17:b5:a9:44:92:9b:
f1:4e:6f:65:25:b2:9b:4e:92:50:2e:25:da:18:13:
55:88:44:2a:da:be:39:c3:a2:5a:85:c2:dd:1b:8d:
73:de:93:56:9b:b9:cd:b5:09:11:0c:16:18:ea:fb:
39:8d:ef:ce:dd:d5:2b:2f:a3:e7:1f:c3:11:b2:4a:
a0:bd:9f:5c:1a:e7:5b:38:b9:ea:47:d7:38:22:3d:
d6:f3:63:3f:92:76:26:9f:aa:9c:05:ed:a3:d5:ae:
7b:e8:f9:18:1d:01:25:3e:f4:18:be:41:bc:af:e9:
89:ca:c2:79:2d:b4:f9:1c:59:88:43:a1:8f:25:f4:
c0:3a:aa:9c:fc:60:bb:10:48:b3:e8:18:f6:0c:e2:
92:7d:79:8d:7a:c6:f3:ff:aa:f5:8c:12:d9:d0:66:
90:15:03:8b:0c:a4:23:5f:21:97:02:f3:1f:ad:05:
3a:66:eb:37:de:9b:6e:e3:4a:bc:58:e7:b0:3c:08:
c3:fc:7c:26:6e:de:55:40:78:b4:df:99:a8:2f:b8:
bd:03:76:6b:51:cb:e0:13:16:3f:05:6b:9b:22:5d:
1d:ec:8b:a9:ff:11:ca:fc:9e:03:5f:77:c6:a7:af:
3e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:08:EB:64:B3:11:51:77:C2:A2:37:8D:36:86:8F:AA:B5:C3:62:F4
X509v3 Authority Key Identifier:
keyid:03:1D:03:15:F7:7B:95:49:5F:60:DC:62:B3:58:E4:C1:B3:FB:5D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ax0DFfd7lUlfYNxis1jkwbP7XcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:2d:e8:94:b2:5d:9c:0f:00:ed:36:09:2c:29:bf:2c:22:80:
52:a2:4f:ba:71:a7:91:d4:45:43:af:bd:de:aa:da:66:90:96:
74:e5:92:a9:94:4f:70:b9:c6:70:ba:ca:b3:38:8f:2e:95:32:
c2:4d:e9:01:75:4e:e6:cb:8c:72:e4:6d:bd:ea:71:72:4e:e6:
33:40:4e:a5:52:41:47:08:a5:18:a9:b1:63:ba:92:6b:3e:d3:
ec:6f:47:e7:b5:e7:a8:95:55:6e:44:e0:66:47:d2:ea:cd:2e:
84:28:46:21:50:6b:88:e1:3e:c9:0d:1b:d8:25:22:ec:12:e9:
5f:cd:45:a5:28:fe:3b:91:ef:4a:84:a9:25:64:da:d4:62:22:
e0:e1:21:5e:3b:2d:ad:d1:de:44:3d:d5:42:ed:7b:27:96:0f:
b7:ab:89:22:7f:99:7a:ed:73:c4:0e:da:8d:da:65:c0:e0:a7:
d7:9c:34:48:0c:89:09:94:3b:00:8c:16:bd:52:18:a2:e4:25:
7a:5d:08:d2:0e:3a:38:d5:44:a8:56:72:3c:f8:ab:02:3f:05:
a2:83:da:22:48:a2:fa:5e:30:3e:33:ff:51:a9:4a:f8:8d:8f:
82:f6:ad:62:64:13:4b:3d:4f:c2:57:1e:6e:6d:4a:ab:0e:cb:
c1:16:6c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:56 2026 by rpki-client