Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft
File: axnRvKx1IxLsTeb1vTmszjKra9Y.mft (raw, json)
Hash identifier: XzgXOiMEtSTxVS+s3paIuJPKQ0eoaEhkw7XyI+Fe3tc=
Subject key identifier: D8:10:B8:CA:76:2A:2B:A2:17:B9:14:8E:C3:88:CD:A5:06:8E:47:CF
Authority key identifier: 6B:19:D1:BC:AC:75:23:12:EC:4D:E6:F5:BD:39:AC:CE:32:AB:6B:D6
Certificate issuer: /CN=6b19d1bcac752312ec4de6f5bd39acce32ab6bd6
Certificate serial: 019E1F117C9ECB16282A82794463944B4547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axnRvKx1IxLsTeb1vTmszjKra9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft
Manifest number: 16FC
Signing time: Wed 13 May 2026 02:01:40 +0000
Manifest this update: Wed 13 May 2026 02:01:40 +0000
Manifest next update: Thu 14 May 2026 02:01:40 +0000
Files and hashes: 1: URIXovot20BpTLwGW5N6pOlLgy4.roa (hash: wvN6iNM+Z86YXZPPdosS4TWVox9d1Df0z+4sQXyWazA=)
2: axnRvKx1IxLsTeb1vTmszjKra9Y.crl (hash: kFqR1f7eUE+D0kTkmTq+q7ATrdxL62I0frar3KUvMeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/axnRvKx1IxLsTeb1vTmszjKra9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:7c:9e:cb:16:28:2a:82:79:44:63:94:4b:45:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b19d1bcac752312ec4de6f5bd39acce32ab6bd6
Validity
Not Before: May 13 02:01:40 2026 GMT
Not After : May 14 02:01:40 2026 GMT
Subject: CN=d810b8ca762a2ba217b9148ec388cda5068e47cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c9:52:a7:41:79:87:8f:a6:23:42:e7:ae:86:
98:f5:08:f4:93:3c:97:b0:e2:4a:2e:5d:3c:9b:4e:
88:b5:77:c7:7e:a5:e7:21:64:7d:25:70:2e:04:a0:
cb:ac:3d:19:6a:9f:31:ff:d5:32:13:20:95:a0:f8:
b4:fc:7b:0a:3c:3a:8b:99:c5:63:33:a3:d5:b1:ec:
24:65:8d:0d:21:ff:8b:8d:7c:10:9b:71:81:d0:27:
45:81:b7:f0:c7:d5:8f:d4:9c:62:bd:d2:1b:d5:0c:
ed:fe:02:d8:5e:b3:04:1f:74:64:87:29:1b:3d:37:
5a:1f:45:96:e2:43:41:b7:05:e2:6d:df:22:22:18:
29:b7:8f:95:73:b4:bc:9d:75:95:fa:de:6f:50:72:
32:b8:38:4e:63:2b:7e:bd:14:23:3c:8c:7c:a4:27:
aa:63:1d:1a:08:36:e8:aa:bd:39:41:a4:f0:00:45:
a4:36:64:33:bf:59:55:ca:c9:7b:df:99:b1:45:ad:
0b:c0:3f:60:a1:19:3c:70:2b:cf:c3:b3:0b:3b:69:
15:32:c5:38:b6:82:62:61:42:72:85:e1:d7:0f:cd:
ba:55:3c:72:16:47:af:d4:a4:d2:b2:73:21:40:f8:
e4:37:df:de:a6:89:89:d2:a7:14:5e:05:43:c4:bc:
09:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:10:B8:CA:76:2A:2B:A2:17:B9:14:8E:C3:88:CD:A5:06:8E:47:CF
X509v3 Authority Key Identifier:
keyid:6B:19:D1:BC:AC:75:23:12:EC:4D:E6:F5:BD:39:AC:CE:32:AB:6B:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axnRvKx1IxLsTeb1vTmszjKra9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:1d:ef:13:c5:29:eb:67:00:05:bb:1d:ba:45:71:72:9f:4f:
e3:f9:d8:37:26:0a:51:69:94:0e:5b:7b:6f:ec:f2:6c:5a:a7:
b9:13:92:06:f1:7a:fe:15:e9:69:05:50:86:01:04:ee:7f:d6:
01:35:c0:4c:6a:a0:77:0f:9a:96:4a:de:89:49:a3:aa:ad:96:
ec:8b:d6:4b:14:c3:82:94:8e:29:9d:70:a5:05:1e:25:a6:e6:
15:4a:ca:85:a3:87:b0:35:72:b4:14:0d:2a:03:0a:25:7e:a4:
b9:70:99:3f:a3:00:e3:e4:b3:27:a1:66:4b:d4:98:aa:47:f3:
7c:61:a5:52:75:2a:80:25:22:37:df:87:7a:b6:e2:60:2e:79:
47:44:c4:b8:ad:b1:00:ec:f5:80:8e:93:6a:88:72:3b:fe:bd:
b9:aa:8b:da:08:0b:20:45:88:6e:17:19:38:ed:f9:b7:c5:1d:
52:e4:89:f5:e4:fa:03:2f:53:99:22:3b:52:70:cc:33:9e:bb:
6b:1d:49:0b:c1:04:73:b3:39:12:fb:d8:8c:f1:78:0f:e5:05:
53:ac:d0:c4:b7:1b:14:76:d7:ba:4f:5c:03:a4:a1:d0:0d:a7:
31:26:e7:b2:92:dc:04:ea:5d:cc:01:a1:f3:a5:03:1b:7b:92:
36:98:79:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:12:44 2026 by rpki-client