Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft
File: Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft (raw, json)
Hash identifier: HWoAPt9JrNsLqPqNOKdZw8NmBJEUWw+tS9rJ5VN2sY8=
Subject key identifier: D4:BE:33:DC:6D:F2:10:67:2A:68:24:28:AE:28:AC:2E:7D:35:8A:68
Authority key identifier: 03:1D:03:15:F7:7B:95:49:5F:60:DC:62:B3:58:E4:C1:B3:FB:5D:C0
Certificate issuer: /CN=031d0315f77b95495f60dc62b358e4c1b3fb5dc0
Certificate serial: 019D254C9618727DA1C038ADC3ADABA40927
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ax0DFfd7lUlfYNxis1jkwbP7XcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft
Manifest number: 91
Signing time: Wed 25 Mar 2026 14:01:09 +0000
Manifest this update: Wed 25 Mar 2026 14:01:09 +0000
Manifest next update: Thu 26 Mar 2026 14:01:09 +0000
Files and hashes: 1: 273CJOloMHCNr40TZUcFVxeZFms.asa (hash: tOqMGrNI4l0VYDU+tVPacc01C6txXDyN4W2pPE0sHCs=)
2: Ax0DFfd7lUlfYNxis1jkwbP7XcA.crl (hash: 5TZaWHD6NqrDsX2qNXwXQHrocmy2YZOlgUp2tOF4Ta4=)
3: WfIBNFBJCmDGiwOF58LkEkU6i_k.asa (hash: M5LpZEXgCwgBFWCXLQ6KoLhrTqWESWDvJESM0Dp+OEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ax0DFfd7lUlfYNxis1jkwbP7XcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:96:18:72:7d:a1:c0:38:ad:c3:ad:ab:a4:09:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=031d0315f77b95495f60dc62b358e4c1b3fb5dc0
Validity
Not Before: Mar 25 14:01:09 2026 GMT
Not After : Mar 26 14:01:09 2026 GMT
Subject: CN=d4be33dc6df210672a682428ae28ac2e7d358a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3c:8a:35:59:b4:82:78:5f:39:4b:75:cd:4f:
6a:b1:f6:1c:66:af:4b:ee:34:28:2e:77:60:03:f1:
e0:08:b9:04:2e:8e:6f:73:65:33:a6:10:ec:96:c1:
1a:f4:a7:ce:f2:5c:c6:1c:8a:2d:da:70:ff:42:f7:
3d:a5:90:0f:0b:3e:06:aa:03:4c:d7:1e:33:ef:24:
83:59:9c:f1:3d:ae:46:a8:ba:95:03:6b:17:b2:be:
26:14:7c:68:af:1d:5a:e5:c3:84:01:78:d0:12:7e:
c0:84:f9:0c:40:fe:18:f0:53:0e:10:61:ab:1e:33:
40:48:be:64:21:7d:62:0e:b6:0c:52:7f:66:da:80:
d9:2c:8e:ac:d6:4e:eb:4c:17:d6:c5:07:4a:1f:e0:
c2:a4:77:f2:b8:bb:ea:8b:1f:00:af:96:85:42:35:
f1:59:bc:69:53:50:5b:47:d4:73:83:d3:b0:28:38:
bb:df:73:0c:61:c2:f8:c3:92:1b:bc:6a:4e:f7:bc:
1e:5e:53:29:c4:a6:5a:5f:e6:39:5f:a1:68:c8:ec:
ae:6a:df:26:07:2f:cd:1e:8a:c7:f5:80:12:25:e6:
ac:1a:4f:36:11:a4:9a:1d:c8:77:85:1c:e9:4b:23:
4e:f7:bd:0b:52:93:0f:ed:2c:21:b6:63:e3:d7:e8:
bf:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BE:33:DC:6D:F2:10:67:2A:68:24:28:AE:28:AC:2E:7D:35:8A:68
X509v3 Authority Key Identifier:
keyid:03:1D:03:15:F7:7B:95:49:5F:60:DC:62:B3:58:E4:C1:B3:FB:5D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ax0DFfd7lUlfYNxis1jkwbP7XcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:35:2a:48:d8:2b:14:06:e7:9f:8b:85:d2:7a:7a:68:28:13:
ff:a4:91:e6:5d:bb:ea:8f:49:9b:52:0c:ef:ae:c6:8d:40:74:
9d:c4:56:9d:ce:2a:a3:d4:0f:ee:41:93:56:d1:39:2f:63:c2:
da:bf:9c:83:2e:4b:14:45:5a:6a:a7:78:12:da:a8:f9:b5:65:
ad:c9:1c:c2:36:91:e0:cc:e4:92:d3:e4:f0:9a:b6:08:04:e9:
bc:42:43:75:e6:ae:bd:a3:ec:3e:3d:9e:3d:e1:4e:5d:d2:47:
0e:49:9e:55:3e:b1:ad:ce:51:cc:b8:b9:c0:13:bd:23:f1:4a:
b1:5c:a3:42:25:13:98:e2:32:0e:a0:b2:47:ce:86:ed:e4:45:
26:02:9d:b5:4f:9c:e7:78:0d:1c:64:b1:97:9c:ac:c0:77:30:
48:7b:6c:6c:88:5b:13:3f:74:b4:7c:12:80:62:90:0d:25:a1:
ab:7b:8b:63:4b:cf:4f:43:ce:de:be:5f:71:ed:5e:2c:a3:5a:
a0:07:bb:a5:3f:27:aa:52:d3:f2:35:53:c9:98:48:53:28:df:
08:79:aa:e1:54:49:42:51:d0:f6:17:8e:5f:a7:03:84:d4:6c:
3d:30:56:6b:f0:51:e6:82:b0:26:57:5b:dd:4e:6b:c4:38:1b:
2f:7d:2b:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lTJYYcn2hwDitw62rpAknMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMWQwMzE1Zjc3Yjk1NDk1ZjYwZGM2MmIzNThlNGMxYjNm
YjVkYzAwHhcNMjYwMzI1MTQwMTA5WhcNMjYwMzI2MTQwMTA5WjAzMTEwLwYDVQQD
EyhkNGJlMzNkYzZkZjIxMDY3MmE2ODI0MjhhZTI4YWMyZTdkMzU4YTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTyKNVm0gnhfOUt1zU9qsfYcZq9L
7jQoLndgA/HgCLkELo5vc2UzphDslsEa9KfO8lzGHIot2nD/Qvc9pZAPCz4GqgNM
1x4z7ySDWZzxPa5GqLqVA2sXsr4mFHxorx1a5cOEAXjQEn7AhPkMQP4Y8FMOEGGr
HjNASL5kIX1iDrYMUn9m2oDZLI6s1k7rTBfWxQdKH+DCpHfyuLvqix8Ar5aFQjXx
WbxpU1BbR9Rzg9OwKDi733MMYcL4w5IbvGpO97weXlMpxKZaX+Y5X6FoyOyuat8m
By/NHorH9YASJeasGk82EaSaHch3hRzpSyNO970LUpMP7SwhtmPj1+i/+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNS+M9xt8hBnKmgkKK4orC59NYpoMB8GA1UdIwQY
MBaAFAMdAxX3e5VJX2DcYrNY5MGz+13AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXgwREZmZDdsVWxmWU54aXMxamt3YlA3WGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC84YWYzNDAtMjYyYi00Y2Q4LWIyZWUt
NWZiOWEwOGJlN2RlLzEvQXgwREZmZDdsVWxmWU54aXMxamt3YlA3WGNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC84YWYzNDAtMjYyYi00Y2Q4LWIyZWUtNWZiOWEwOGJlN2Rl
LzEvQXgwREZmZDdsVWxmWU54aXMxamt3YlA3WGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAATUqSNgr
FAbnn4uF0np6aCgT/6SR5l276o9Jm1IM767GjUB0ncRWnc4qo9QP7kGTVtE5L2PC
2r+cgy5LFEVaaqd4Etqo+bVlrckcwjaR4MzkktPk8Jq2CATpvEJDdeauvaPsPj2e
PeFOXdJHDkmeVT6xrc5RzLi5wBO9I/FKsVyjQiUTmOIyDqCyR86G7eRFJgKdtU+c
53gNHGSxl5yswHcwSHtsbIhbEz90tHwSgGKQDSWhq3uLY0vPT0PO3r5fce1eLKNa
oAe7pT8nqlLT8jVTyZhIUyjfCHmq4VRJQlHQ9heOX6cDhNRsPTBWa/BR5oKwJldb
3U5rxDgbL30rFw==
-----END CERTIFICATE-----
Generated at Wed Mar 25 21:21:43 2026 by rpki-client