Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
File: AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft (raw, json)
Hash identifier: D8qGd5kxlORiibT773C16J8H82WRPnV9LdDpTHbGrEo=
Subject key identifier: A5:23:53:49:5C:23:61:D3:74:8B:C9:B1:BB:ED:C2:7E:11:C7:F5:B1
Authority key identifier: 03:19:6C:89:E5:54:DB:E4:77:45:22:75:99:06:E2:58:1A:17:46:94
Certificate issuer: /CN=03196c89e554dbe4774522759906e2581a174694
Certificate serial: 019D288480F5D0374B1CF1BB825F35175EDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
Manifest number: 13B3
Signing time: Thu 26 Mar 2026 05:01:05 +0000
Manifest this update: Thu 26 Mar 2026 05:01:05 +0000
Manifest next update: Fri 27 Mar 2026 05:01:05 +0000
Files and hashes: 1: 25mxXJh2G2nCKlFkslbkjTaimw0.roa (hash: gLUrLyzzoWyt075KRiHPrRM9zqSzPbD5AydPzwej0ts=)
2: AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl (hash: /bJ/idajpk4pW6n4rSGmFeS1aaHyP7gbNijgCsfSQBA=)
3: RYNiV948DLV1Ez8aZtWra-uSAIU.roa (hash: iZJYlFMS/Nvt7xPVWg2S8RzagBzGleb0zYSMcRXDFSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:80:f5:d0:37:4b:1c:f1:bb:82:5f:35:17:5e:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03196c89e554dbe4774522759906e2581a174694
Validity
Not Before: Mar 26 05:01:05 2026 GMT
Not After : Mar 27 05:01:05 2026 GMT
Subject: CN=a52353495c2361d3748bc9b1bbedc27e11c7f5b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:28:ae:67:89:ff:b5:2c:25:11:f8:4d:f1:38:
4d:47:8f:f8:b3:d4:e2:38:b1:5b:d3:30:51:80:d2:
af:72:f5:8b:c0:42:23:16:c6:09:58:14:fb:c8:d8:
8b:15:4c:be:54:55:5a:13:46:5f:c7:27:32:51:9e:
27:55:f1:56:f4:3c:8e:46:1a:fb:4b:08:8e:1f:39:
bc:08:02:51:2f:0e:e6:94:00:d6:7f:5b:3a:89:2d:
fe:6a:ab:f4:c7:c4:4f:64:86:0e:a6:36:85:73:00:
2b:df:55:7a:4f:ba:9f:41:b9:23:96:af:99:48:5d:
37:8d:46:5a:e0:7b:fb:97:f4:d3:99:99:ce:9c:60:
ba:33:0f:cf:8a:34:9f:e1:ca:79:cc:04:4a:cd:7f:
b9:6d:83:33:ad:fe:88:65:66:7c:33:14:3b:3b:5a:
ad:76:34:0c:b1:92:61:5f:97:80:a5:aa:3b:a8:76:
24:0f:f7:72:cc:1d:24:a1:9e:5a:68:02:b6:8e:f7:
e2:cf:1f:f1:f6:e6:35:c8:79:b0:55:ab:9e:8b:ac:
a1:1c:25:c8:b9:2f:21:ef:a0:cc:94:14:98:95:c8:
2e:41:fb:21:2e:3d:20:4d:f2:5d:f3:1e:55:a7:61:
89:a4:42:70:db:60:89:81:cc:d4:b8:b9:19:dd:b0:
c5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:23:53:49:5C:23:61:D3:74:8B:C9:B1:BB:ED:C2:7E:11:C7:F5:B1
X509v3 Authority Key Identifier:
keyid:03:19:6C:89:E5:54:DB:E4:77:45:22:75:99:06:E2:58:1A:17:46:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:13:94:da:ad:b8:9d:0e:39:3a:1a:86:d6:14:eb:93:2e:1b:
90:4e:db:20:0e:75:3b:b0:c5:58:ff:91:f2:02:b3:c2:4b:96:
5f:aa:4d:ab:c9:11:73:36:57:47:58:8c:a9:02:8f:8f:2e:c3:
ba:c9:50:d8:d5:28:12:d4:1e:80:11:03:1c:8e:07:cb:4e:f6:
de:25:12:f8:12:c3:2a:b0:59:df:aa:78:d0:0d:3a:7f:45:b8:
93:d9:a6:be:dd:a2:dc:89:36:d2:7f:f6:59:41:5d:25:e2:e9:
c7:36:36:ba:fd:5b:53:48:03:8a:24:a4:f4:a8:8c:12:dc:7b:
62:c8:75:9e:a8:b8:88:44:94:b5:c7:fd:37:46:ec:06:ab:92:
a8:c6:c4:ef:2e:df:37:0e:a5:d8:d3:e8:22:eb:5e:43:1c:36:
38:1a:32:71:e9:0f:b4:ae:e7:3d:33:e9:22:1e:fa:63:6b:5e:
55:ac:65:05:e0:d7:bd:a7:3a:8d:a6:ad:95:58:11:80:30:1b:
92:95:a1:89:c7:9a:e0:a7:52:31:43:20:0c:28:bd:af:97:f4:
67:1b:7c:82:2d:01:2d:3b:54:50:69:e8:69:0e:e3:cf:7a:e2:
cd:df:30:cf:ff:31:f2:7d:9b:e7:13:ba:3a:3a:d5:37:93:b5:
87:3e:63:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:51:15 2026 by rpki-client