Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
File: AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft (raw, json)
Hash identifier: ByoE+Z4jDlr5QuNtuhBKg9TiO2qBgXgkOBubZ0KHRE4=
Subject key identifier: DA:86:83:0E:60:D4:78:0B:58:4C:EC:C0:E4:F9:8E:AD:72:1F:14:9E
Authority key identifier: 03:19:6C:89:E5:54:DB:E4:77:45:22:75:99:06:E2:58:1A:17:46:94
Certificate issuer: /CN=03196c89e554dbe4774522759906e2581a174694
Certificate serial: 019E1BD8F1EC3074B0008D875EB2B782795F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
Manifest number: 1431
Signing time: Tue 12 May 2026 11:01:02 +0000
Manifest this update: Tue 12 May 2026 11:01:02 +0000
Manifest next update: Wed 13 May 2026 11:01:02 +0000
Files and hashes: 1: 25mxXJh2G2nCKlFkslbkjTaimw0.roa (hash: gLUrLyzzoWyt075KRiHPrRM9zqSzPbD5AydPzwej0ts=)
2: AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl (hash: Ptow85IlgpqLX2V28PCCGUKI32cfd8LTaKSxHqT8oy8=)
3: RYNiV948DLV1Ez8aZtWra-uSAIU.roa (hash: iZJYlFMS/Nvt7xPVWg2S8RzagBzGleb0zYSMcRXDFSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d8:f1:ec:30:74:b0:00:8d:87:5e:b2:b7:82:79:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03196c89e554dbe4774522759906e2581a174694
Validity
Not Before: May 12 11:01:02 2026 GMT
Not After : May 13 11:01:02 2026 GMT
Subject: CN=da86830e60d4780b584cecc0e4f98ead721f149e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:16:e7:e0:1e:b4:1f:9e:cd:f8:08:0c:09:5d:
ec:a7:0f:e2:52:11:d9:28:20:4d:15:a3:23:e8:fa:
61:0a:02:9a:52:50:c5:9d:3c:21:ff:df:83:3b:b0:
e7:c7:46:9a:04:4b:d0:06:a9:67:8b:37:3d:b0:cc:
3b:b4:54:17:3e:26:57:92:89:b3:11:60:55:59:d3:
bd:44:bb:17:fe:a9:33:61:bd:8a:5b:a1:52:ad:79:
a1:4c:17:47:5d:ea:7e:3c:75:f1:67:ec:f1:fc:f6:
30:40:3c:2a:ba:30:2f:1e:9d:1f:f7:5e:b0:31:ce:
50:82:96:cc:07:00:ba:aa:60:98:de:92:de:7d:37:
5c:7e:31:3d:33:8b:75:15:c9:41:b0:d4:64:d0:3b:
42:37:08:b3:90:08:b2:1b:f8:5c:b2:a2:c0:35:93:
f8:fc:90:d1:82:c8:46:1d:1f:73:f7:a4:6c:f2:2f:
fd:d5:ff:78:c1:9d:48:5c:b3:87:a6:ec:65:e5:ca:
94:82:8d:63:8e:25:a4:63:3c:4f:de:b6:ba:ee:3c:
0b:32:2d:aa:97:0d:da:8f:2e:c9:2c:50:ae:2e:d9:
2b:a6:fc:7f:c4:ea:1f:ea:65:9c:5f:7a:b6:63:74:
71:12:7f:af:1a:3b:04:4c:e5:52:c4:2f:ed:e0:ac:
8c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:86:83:0E:60:D4:78:0B:58:4C:EC:C0:E4:F9:8E:AD:72:1F:14:9E
X509v3 Authority Key Identifier:
keyid:03:19:6C:89:E5:54:DB:E4:77:45:22:75:99:06:E2:58:1A:17:46:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:ce:cc:53:3e:9f:54:f7:8b:d3:44:b4:f3:8b:57:f1:4f:49:
c2:75:ea:e9:1e:e3:82:de:e2:13:2b:9e:c8:b8:8d:db:f1:82:
55:aa:18:df:a2:19:0d:31:12:dd:c6:eb:ae:af:4f:7e:1b:73:
87:46:e5:70:76:b2:87:9c:00:64:36:ca:82:b6:63:7c:d6:af:
d1:8b:ba:5f:94:54:60:db:42:00:dc:4b:a1:dd:79:80:b7:0e:
f0:33:68:06:ff:26:4f:88:f8:32:47:57:83:4b:28:d9:75:c8:
19:0c:d9:19:fe:0c:75:58:a6:b6:bd:32:67:f9:2b:55:60:b4:
7a:87:e2:aa:2b:4c:97:d5:a2:c0:cb:04:8d:2d:c5:9e:3b:33:
6e:9c:b5:23:08:43:42:51:d9:e8:6a:47:04:0c:8c:4b:64:59:
85:d9:7c:1e:de:fd:e6:28:1e:43:c4:73:3d:50:d7:cd:c3:9c:
83:62:58:fa:84:b5:ae:79:52:be:4d:0d:5e:83:c4:1f:ba:96:
c6:ff:77:25:ea:da:2d:2e:27:6e:cb:fb:5f:f3:0b:17:c7:33:
9d:fe:1e:c9:cb:78:fc:50:0b:e9:93:32:31:af:61:c1:f5:0a:
a1:1c:3f:4b:1e:61:92:48:78:47:71:f6:e7:69:b9:54:f4:84:
2a:f7:e0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:22 2026 by rpki-client