Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft
File: Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft (raw, json)
Hash identifier: Z8zpOs3aasB8kDwMC5yiJmyj6fJlgxw7oiw+jazBBJo=
Subject key identifier: AA:09:AE:E2:D3:8C:08:12:60:2A:C2:15:13:C4:0C:C1:E3:2F:DC:F7
Authority key identifier: 03:1D:03:15:F7:7B:95:49:5F:60:DC:62:B3:58:E4:C1:B3:FB:5D:C0
Certificate issuer: /CN=031d0315f77b95495f60dc62b358e4c1b3fb5dc0
Certificate serial: 019F8F471153FC6B462934B5B22EE65C7A2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ax0DFfd7lUlfYNxis1jkwbP7XcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft
Manifest number: 01D1
Signing time: Thu 23 Jul 2026 14:00:27 +0000
Manifest this update: Thu 23 Jul 2026 14:00:27 +0000
Manifest next update: Fri 24 Jul 2026 14:00:27 +0000
Files and hashes: 1: 273CJOloMHCNr40TZUcFVxeZFms.asa (hash: tOqMGrNI4l0VYDU+tVPacc01C6txXDyN4W2pPE0sHCs=)
2: Ax0DFfd7lUlfYNxis1jkwbP7XcA.crl (hash: 72wiC7mO5SOUQkKJt7HHwBq8HXWxmmqwJjugM6qpn0c=)
3: WfIBNFBJCmDGiwOF58LkEkU6i_k.asa (hash: M5LpZEXgCwgBFWCXLQ6KoLhrTqWESWDvJESM0Dp+OEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ax0DFfd7lUlfYNxis1jkwbP7XcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:11:53:fc:6b:46:29:34:b5:b2:2e:e6:5c:7a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=031d0315f77b95495f60dc62b358e4c1b3fb5dc0
Validity
Not Before: Jul 23 14:00:27 2026 GMT
Not After : Jul 24 14:00:27 2026 GMT
Subject: CN=aa09aee2d38c0812602ac21513c40cc1e32fdcf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:dd:7f:96:59:f7:1c:3e:e2:bb:94:50:e6:fd:
c7:f2:65:d4:98:3f:76:25:ee:0c:07:0b:ce:4d:5e:
bf:c2:d1:68:0f:84:af:fc:14:d3:d9:2a:2f:09:fa:
50:7d:0a:f5:6d:30:93:9a:95:72:f5:d1:83:14:59:
11:37:ce:0c:22:d7:28:24:41:f7:dc:44:f0:12:6c:
72:a5:d7:ce:6c:9e:d5:8a:a6:30:bb:82:b9:e2:dd:
fd:b3:76:6a:f8:6e:a1:67:dc:e1:3b:a8:e4:1e:8c:
d6:71:dd:89:48:ac:fa:de:15:4a:ba:b3:18:e2:6b:
e9:bb:fd:4c:90:3a:57:11:bb:c5:12:b6:31:04:78:
d3:4c:66:aa:f9:c1:e1:b8:8c:0b:e2:52:95:03:1e:
45:ab:9c:2f:f6:05:7b:95:60:72:f6:be:29:54:9c:
f4:4c:0f:96:0d:cf:f5:8a:07:89:49:14:de:de:55:
85:8a:b7:b0:f1:92:14:7b:c9:74:e9:07:18:cc:13:
49:f9:a5:7d:c0:98:67:fb:db:6c:91:68:34:68:9b:
43:87:56:f7:be:ea:93:94:af:b0:cb:d2:02:b6:ec:
56:7b:8f:6b:4f:a2:01:5a:d2:78:66:9e:c3:75:61:
c4:78:af:ab:a8:46:fe:0f:d7:0b:da:34:66:4c:8a:
33:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:09:AE:E2:D3:8C:08:12:60:2A:C2:15:13:C4:0C:C1:E3:2F:DC:F7
X509v3 Authority Key Identifier:
keyid:03:1D:03:15:F7:7B:95:49:5F:60:DC:62:B3:58:E4:C1:B3:FB:5D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ax0DFfd7lUlfYNxis1jkwbP7XcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:1d:4a:98:07:b2:45:e3:af:2e:f0:e3:de:ff:6d:f6:33:94:
6c:ed:9e:a0:a8:06:91:e8:96:f3:31:67:8c:02:84:ed:d6:55:
34:74:ee:0e:7f:14:96:f3:43:9c:32:18:2b:fd:f7:b4:6e:a1:
73:61:32:c7:7f:ca:02:95:65:39:80:f1:57:cc:77:8e:c0:9b:
35:04:35:f9:7a:35:a7:0a:91:1b:85:8f:63:be:69:50:41:f7:
ad:08:a4:cc:61:61:33:ec:80:28:63:92:68:33:8d:4b:47:4a:
54:43:9f:44:d4:6b:54:0c:6c:8f:60:90:ff:48:6c:58:df:a4:
f7:b3:dc:cb:e3:4b:19:f5:80:11:50:dd:65:ff:1b:65:5c:c9:
cc:16:fc:e4:ce:65:96:7d:07:2a:ec:00:8e:4d:6c:f0:0a:58:
94:aa:d6:2b:a2:37:23:0f:8d:21:b6:a5:6e:3f:cb:2b:cd:3b:
52:b5:2b:2a:aa:db:80:a9:5a:2b:97:b4:68:c7:b3:81:52:9b:
0a:33:b2:5c:5a:7c:cc:3a:ca:b0:9f:02:e7:da:78:21:98:42:
89:01:c2:be:aa:98:38:e6:31:31:cd:78:b7:8b:66:bd:55:8b:
a7:0c:5a:01:8d:56:65:db:2a:f8:46:7c:13:68:11:67:b6:78:
a1:f2:41:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:44:00 2026 by rpki-client