Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft
File: Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft (raw, json)
Hash identifier: qHFp6dF1n9v1+IFlAcEcyd+MW4quUkxRmNzwmkuDoHg=
Subject key identifier: 29:E8:FA:90:74:9B:EA:9D:29:7D:F0:5F:EB:16:80:42:54:96:6B:ED
Authority key identifier: 03:1D:03:15:F7:7B:95:49:5F:60:DC:62:B3:58:E4:C1:B3:FB:5D:C0
Certificate issuer: /CN=031d0315f77b95495f60dc62b358e4c1b3fb5dc0
Certificate serial: 01A0CFDB494C99C58FFAECD1A5A29ADA851F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ax0DFfd7lUlfYNxis1jkwbP7XcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft
Manifest number: 0277
Signing time: Wed 23 Sep 2026 20:00:49 +0000
Manifest this update: Wed 23 Sep 2026 20:00:49 +0000
Manifest next update: Thu 24 Sep 2026 20:00:49 +0000
Files and hashes: 1: 273CJOloMHCNr40TZUcFVxeZFms.asa (hash: tOqMGrNI4l0VYDU+tVPacc01C6txXDyN4W2pPE0sHCs=)
2: Ax0DFfd7lUlfYNxis1jkwbP7XcA.crl (hash: AjZebG4bR+K5Tf3VSnX19RhpI6Q0CdIKUXp2Kdkjv4I=)
3: WfIBNFBJCmDGiwOF58LkEkU6i_k.asa (hash: M5LpZEXgCwgBFWCXLQ6KoLhrTqWESWDvJESM0Dp+OEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ax0DFfd7lUlfYNxis1jkwbP7XcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:db:49:4c:99:c5:8f:fa:ec:d1:a5:a2:9a:da:85:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=031d0315f77b95495f60dc62b358e4c1b3fb5dc0
Validity
Not Before: Sep 23 20:00:49 2026 GMT
Not After : Sep 24 20:00:49 2026 GMT
Subject: CN=29e8fa90749bea9d297df05feb16804254966bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:cf:2f:ca:6c:61:b8:b6:5b:ce:f5:f4:eb:6f:
16:39:21:0d:78:7d:53:1f:26:28:9e:d7:17:0d:c2:
02:3d:fc:49:9d:d1:23:97:fa:10:14:dd:25:38:fd:
ad:c8:3a:a6:40:39:d5:1f:8e:12:3d:3a:2b:4f:d1:
65:f6:05:38:83:cd:50:60:d5:d4:87:67:8e:87:ac:
03:79:9b:42:81:96:c5:d1:4e:ff:26:11:28:79:ee:
74:93:ed:59:cd:33:b6:c7:c6:4e:6d:ea:ed:86:f4:
22:5b:54:8d:d9:74:65:1c:bf:3f:dc:fe:8a:74:62:
0c:0f:96:91:05:ce:18:5d:29:1e:8c:12:c7:b2:01:
3a:cf:f3:0d:79:14:b3:b9:3b:7f:0d:88:db:ef:20:
e6:61:ec:c9:ad:cf:d0:da:b3:48:fa:3d:20:bb:eb:
3d:ef:ac:de:c9:c2:ad:b6:e2:4e:6d:86:29:ce:d6:
7b:ec:46:9e:27:31:97:5f:80:79:8e:cb:1c:6a:cc:
d9:5f:68:cc:c0:f2:0e:a0:5d:e1:21:f9:e4:d5:12:
c5:96:f8:0d:26:fb:c1:61:1b:2a:d0:86:7c:f8:30:
96:47:ae:51:27:8c:52:68:b8:68:cb:7b:f2:12:13:
0d:fd:5a:0c:a7:83:27:42:88:8f:df:29:d0:94:49:
43:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E8:FA:90:74:9B:EA:9D:29:7D:F0:5F:EB:16:80:42:54:96:6B:ED
X509v3 Authority Key Identifier:
keyid:03:1D:03:15:F7:7B:95:49:5F:60:DC:62:B3:58:E4:C1:B3:FB:5D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ax0DFfd7lUlfYNxis1jkwbP7XcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:01:e2:2a:cd:65:d3:d7:2f:63:ec:db:e6:08:bc:83:f4:7e:
8a:02:e8:73:e6:3a:fa:ed:fd:a6:00:40:8c:0f:b3:84:a3:d7:
7a:fc:e2:b8:02:31:b1:8c:28:c4:56:e3:d6:66:4d:95:2f:dd:
b4:b8:94:2d:5d:cb:17:47:41:4c:93:a7:f4:6f:45:f6:85:14:
27:fe:65:7b:04:6f:7d:ac:c1:a7:c7:99:af:5d:f1:e7:d3:e8:
4f:d6:df:a1:f8:0e:89:f9:21:7f:7b:d4:db:29:a9:71:fe:78:
7e:98:36:c4:5a:e5:c7:ec:49:2b:01:ce:24:05:ab:79:ad:41:
41:d8:d2:8d:f4:b7:ca:9d:94:d5:8f:b1:4a:cc:b1:ee:73:60:
6d:94:45:51:54:ec:41:0d:e9:d4:04:2f:8a:39:a4:07:ab:6e:
90:84:6c:20:db:64:6c:a6:ee:e4:8d:ec:d2:bf:9f:b6:a8:60:
d8:32:7f:e2:5c:ef:a9:47:62:11:3a:ce:c6:be:7e:cd:f8:da:
f2:8e:f8:7b:f0:f3:30:50:d6:b6:e8:89:a7:14:b9:35:ab:74:
7e:14:d7:2a:55:6c:62:f3:14:c4:b2:00:48:77:bd:3d:0d:07:
f8:5a:66:43:8a:90:a7:6b:4a:fe:3f:7c:91:61:1f:f6:f2:45:
b2:44:6f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:07:27 2026 by rpki-client