Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
File: AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft (raw, json)
Hash identifier: p3/gszHQ/BMRESLXgk5UWvkRN4wLBMbDmnr21e5nhaA=
Subject key identifier: AF:23:B1:34:7B:81:2F:BB:4A:E1:A3:C4:05:C4:E3:20:DC:43:62:B1
Authority key identifier: 03:19:6C:89:E5:54:DB:E4:77:45:22:75:99:06:E2:58:1A:17:46:94
Certificate issuer: /CN=03196c89e554dbe4774522759906e2581a174694
Certificate serial: 01A1D01017861FFB2990D9D35D17FE76FFBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
Manifest number: 161C
Signing time: Thu 12 Nov 2026 14:01:17 +0000
Manifest this update: Thu 12 Nov 2026 14:01:17 +0000
Manifest next update: Fri 13 Nov 2026 14:01:17 +0000
Files and hashes: 1: 25mxXJh2G2nCKlFkslbkjTaimw0.roa (hash: gLUrLyzzoWyt075KRiHPrRM9zqSzPbD5AydPzwej0ts=)
2: AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl (hash: PVfxNVTWmmCWW0myZMfuwiKb5HI6MLButbT4KYeMhgI=)
3: RYNiV948DLV1Ez8aZtWra-uSAIU.roa (hash: iZJYlFMS/Nvt7xPVWg2S8RzagBzGleb0zYSMcRXDFSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Nov 2026 14:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d0:10:17:86:1f:fb:29:90:d9:d3:5d:17:fe:76:ff:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03196c89e554dbe4774522759906e2581a174694
Validity
Not Before: Nov 12 14:01:17 2026 GMT
Not After : Nov 13 14:01:17 2026 GMT
Subject: CN=af23b1347b812fbb4ae1a3c405c4e320dc4362b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:53:32:51:dd:6d:bc:58:ab:08:d7:04:ab:d7:
65:ad:81:10:5f:bb:fd:21:54:7c:31:a4:a3:af:af:
20:ec:cf:8c:f2:52:d9:8f:2f:7b:02:ff:6c:b2:aa:
c7:ee:3d:b6:94:94:25:87:af:b1:2f:c5:a5:76:92:
7d:60:ce:17:e7:26:50:a8:4c:b0:17:5a:85:61:23:
b0:26:1f:bc:93:ac:1e:2d:bf:18:59:c3:61:a8:b9:
de:45:5f:26:78:59:35:7c:03:9c:f3:9b:cd:0d:10:
e0:95:72:01:e1:c0:c4:ec:8e:c3:5f:d0:a5:e1:b8:
8a:a1:3c:27:a4:a0:24:b8:0c:46:42:32:24:37:6a:
3e:6d:3b:de:a5:82:b3:f5:eb:46:00:5a:ab:c6:06:
55:9b:8e:49:62:db:dc:99:8f:dc:68:1e:24:c7:68:
a1:75:fd:e6:3e:af:c2:30:87:65:f0:13:01:6c:08:
77:7d:90:0e:bb:05:c1:3d:42:48:05:79:6c:7e:57:
ae:25:23:78:e9:e2:b2:ad:11:53:a8:f1:35:d8:0a:
b4:47:76:47:d6:ec:cf:e9:49:f7:40:6c:98:4a:a5:
8e:8a:67:48:bb:68:12:a7:63:d9:9c:b2:97:bf:16:
bc:60:0e:5f:ee:a8:3a:e2:c0:d8:1b:c9:62:eb:13:
45:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:23:B1:34:7B:81:2F:BB:4A:E1:A3:C4:05:C4:E3:20:DC:43:62:B1
X509v3 Authority Key Identifier:
keyid:03:19:6C:89:E5:54:DB:E4:77:45:22:75:99:06:E2:58:1A:17:46:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:39:c2:5b:f9:3f:07:17:3c:b4:76:f4:49:ec:1f:2f:a8:ba:
24:38:ea:bf:6d:1d:c0:bd:5c:e8:03:68:30:fd:2d:22:ed:a9:
f7:11:3f:8a:68:a1:af:98:31:14:7c:f6:cd:95:dc:ba:52:f4:
4a:b1:cf:38:71:ff:49:3a:b5:b7:0c:36:5a:2f:f4:f5:4a:2c:
36:cc:d5:3c:bf:f4:e0:99:c6:30:4c:26:3a:c2:12:b7:b1:41:
04:34:63:03:a4:22:ba:ea:63:75:e5:b9:86:1d:77:f5:35:40:
82:a6:34:c7:bf:58:81:9d:20:a5:2b:3e:12:31:4e:f1:13:af:
8d:e1:c0:02:cf:69:df:e9:01:55:4e:b7:21:bb:bf:29:92:37:
8b:9f:7e:bb:28:37:1b:5f:0f:36:f2:39:db:12:dd:73:03:e8:
6b:b1:41:d2:e5:b5:24:63:df:47:14:95:4c:7b:83:46:7e:48:
7b:b8:6d:b2:c3:b8:78:6f:03:4f:e7:54:0e:dc:09:97:5c:4f:
c5:1b:4e:19:63:c8:f9:99:ea:7f:66:25:da:23:d8:2d:dc:79:
2e:fa:b2:37:62:ef:79:08:96:f4:aa:41:c6:6f:f2:e3:6c:b9:
9f:0f:d5:7d:77:63:19:4d:79:57:81:3a:5c:02:8c:db:5e:af:
3b:f8:d2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 12 18:09:24 2026 by rpki-client