Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
File: AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft (raw, json)
Hash identifier: HnDCIz7L1dK8KPYWbkC6ZR5CNDoJozG0OXqMO9ziMDo=
Subject key identifier: EC:E6:97:27:89:9D:94:37:E0:D7:13:25:88:9A:14:F1:55:D8:62:96
Authority key identifier: 03:19:6C:89:E5:54:DB:E4:77:45:22:75:99:06:E2:58:1A:17:46:94
Certificate issuer: /CN=03196c89e554dbe4774522759906e2581a174694
Certificate serial: 019F9090A8BBE55064BB9C7BE232DDCCE748
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
Manifest number: 14F2
Signing time: Thu 23 Jul 2026 20:00:27 +0000
Manifest this update: Thu 23 Jul 2026 20:00:27 +0000
Manifest next update: Fri 24 Jul 2026 20:00:27 +0000
Files and hashes: 1: 25mxXJh2G2nCKlFkslbkjTaimw0.roa (hash: gLUrLyzzoWyt075KRiHPrRM9zqSzPbD5AydPzwej0ts=)
2: AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl (hash: u7GNZyYF/NXKtea9y4aQnjvZ1Kc/5alxmGRuW2j8NDc=)
3: RYNiV948DLV1Ez8aZtWra-uSAIU.roa (hash: iZJYlFMS/Nvt7xPVWg2S8RzagBzGleb0zYSMcRXDFSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:a8:bb:e5:50:64:bb:9c:7b:e2:32:dd:cc:e7:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03196c89e554dbe4774522759906e2581a174694
Validity
Not Before: Jul 23 20:00:27 2026 GMT
Not After : Jul 24 20:00:27 2026 GMT
Subject: CN=ece69727899d9437e0d71325889a14f155d86296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ca:41:9f:22:ed:42:e8:70:56:04:8b:de:f9:
24:5a:23:6a:e8:d2:5c:b9:4e:0e:f5:1c:bd:3f:5d:
d5:ef:f4:05:cd:1d:cb:66:41:7e:dc:72:29:7a:fb:
a5:8c:77:ce:ba:0d:73:0c:79:21:67:f5:82:43:26:
24:2e:49:17:58:2e:53:1b:c8:ec:61:6b:5f:35:57:
ef:d4:0b:71:b1:45:88:a1:9a:49:0a:09:af:f7:77:
d6:56:74:39:bc:bb:3f:14:1b:d7:ea:f4:7f:6c:34:
05:68:c2:52:83:ca:11:d3:3d:ec:35:ab:89:75:c9:
1e:48:ec:cd:83:c7:b9:9e:1c:8c:a9:01:61:4e:61:
2b:76:ab:f3:05:c7:bf:bd:1b:9d:4d:1b:fe:ed:40:
59:49:98:18:40:0f:5e:9c:8d:41:5a:1c:92:55:08:
d6:f0:75:b0:75:13:a8:9c:e7:cb:87:87:a8:b0:20:
47:cd:c0:24:1b:38:82:44:b6:84:1a:53:83:64:4b:
1f:52:61:e2:24:86:c0:ad:90:d7:5f:b3:a0:6a:1d:
4c:ff:d2:0c:df:df:e1:45:0f:9a:1e:8c:fa:10:2c:
86:6e:e5:25:61:c2:fa:4b:a3:3b:62:8c:67:4b:66:
3d:e6:02:44:23:a8:38:28:1f:c7:38:c4:0c:11:38:
63:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E6:97:27:89:9D:94:37:E0:D7:13:25:88:9A:14:F1:55:D8:62:96
X509v3 Authority Key Identifier:
keyid:03:19:6C:89:E5:54:DB:E4:77:45:22:75:99:06:E2:58:1A:17:46:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:38:f9:41:70:b7:dc:52:82:ee:04:6e:6d:57:d1:db:fd:57:
fe:d3:ba:c3:dc:c5:36:91:77:8f:2b:b3:22:39:e6:65:3c:ec:
4f:1b:7c:26:c8:b9:ae:f0:e4:5d:ff:0a:4d:b1:99:59:63:54:
8c:c2:7b:c1:e6:56:95:de:d1:30:b0:22:12:6a:93:51:b6:5f:
0e:36:54:e6:98:d4:0d:6b:3f:75:b2:99:50:a5:71:fd:e5:88:
c6:bd:72:f9:36:a9:98:00:19:fa:70:78:59:fa:81:99:6a:16:
77:02:25:dc:fd:ec:c8:8a:22:ab:91:21:65:6a:81:a3:dc:c7:
f1:de:ad:c6:70:db:a1:51:ea:30:ac:a9:16:89:fc:2f:ce:9b:
36:07:6d:c9:00:96:c8:45:da:17:65:7e:bc:43:87:18:5f:3b:
62:7a:59:ce:0d:af:21:ad:fc:90:ed:ef:c8:d7:0c:53:c2:f7:
b4:9b:e7:b3:ff:54:fa:76:df:66:a3:8e:b2:2b:b0:42:8a:f3:
4f:8b:55:9d:00:bb:15:d0:06:43:b3:ee:6f:5d:4f:3e:cf:22:
9d:af:77:2b:c7:00:e3:66:d3:92:57:08:73:dd:61:60:99:94:
40:b5:72:2b:96:d1:c5:8e:5b:f3:a9:8f:b8:9e:c1:06:88:10:
60:69:12:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:12:35 2026 by rpki-client