Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
File: AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft (raw, json)
Hash identifier: 92Dgs8UbmIwcFz03mPuu0+R8iJ2w1jtMBZJk0qpYJrA=
Subject key identifier: A4:86:7C:B3:04:8A:99:A3:FB:90:20:22:27:FD:E9:22:2F:7E:D3:3C
Authority key identifier: 01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
Certificate issuer: /CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Certificate serial: 019D27041CAF1CC8854364F0AF692E44EBB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
Manifest number: 18A2
Signing time: Wed 25 Mar 2026 22:01:14 +0000
Manifest this update: Wed 25 Mar 2026 22:01:14 +0000
Manifest next update: Thu 26 Mar 2026 22:01:14 +0000
Files and hashes: 1: 0CvIXoHsvIs1B_YOF4uDh9JpSxE.roa (hash: 91sFZp4Lna3qg8mUoA4c/ZNk5BvTimCG0r/38G4vor4=)
2: 0mnkoAs85-mIhHxZL8fHwKRjWRc.roa (hash: eichc48YsRBfEc1NE+QI5LUu3kO43L633dCSshf5yAM=)
3: 5bPw81P_kxJyPAHehBzr4HJ5wlg.roa (hash: 4Hmum3YbvhBsvoDqD6ymCevyNK6B2cZ0Ry/48HKcZ6M=)
4: 6xtEtECX1hmiBfg2kCnuxEarwpg.roa (hash: 0EDHjBKP1TdEoYGKNKuRsh3vtzapWrWAjD4dmjk8Vc0=)
5: AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl (hash: Xl2F+PmjieXqIwKWaWnyvgsHMPvCIaftdt5z/giVptU=)
6: FyvKrQlLQZ08OBN_anf4pBjOJb4.roa (hash: +pZffx5xsLckndXmwboiF/Rz+edr9+ScKLx8uBSEPfQ=)
7: Jfl2HZOv0aOpTlrzfTjwSjaabBA.roa (hash: 627r3CnYmsat7UpuE0Fbc/64Tgy4fFvd4NcmRN9aPno=)
8: yugxSbIwGxz1NU3UI7VHskkezds.roa (hash: SVtVdrynk9VJBORSgvdr3639uF3/kw+eYctyJwd4PmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:1c:af:1c:c8:85:43:64:f0:af:69:2e:44:eb:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Validity
Not Before: Mar 25 22:01:14 2026 GMT
Not After : Mar 26 22:01:14 2026 GMT
Subject: CN=a4867cb3048a99a3fb90202227fde9222f7ed33c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a2:f8:af:7e:42:35:f9:4f:d6:b2:1d:6b:f6:
82:93:8a:c9:76:00:df:de:83:11:6a:22:57:22:a4:
8c:5c:87:3e:62:9d:23:08:93:bb:bb:7a:50:9a:5e:
a6:2b:e6:e1:da:dd:1d:ee:70:f0:14:2e:e3:ed:26:
4c:1f:71:15:a0:88:0e:e6:65:98:6a:38:ea:ed:52:
cd:b7:f3:7a:7e:0a:fd:ef:e7:c7:30:49:84:f9:d1:
5d:26:9c:90:7d:b3:89:4f:09:01:19:17:ea:4b:41:
bd:9e:ac:c8:2c:8b:5e:14:54:4e:16:8b:02:6c:3f:
26:93:58:e0:6c:fe:4d:1a:fa:32:13:84:44:69:27:
97:81:fe:0a:77:d4:2f:40:69:bb:b4:29:b8:e8:f5:
20:0b:fc:4c:5f:8b:6e:54:65:b3:9f:ee:e0:d7:91:
06:26:69:e6:a9:64:43:0d:3b:e7:1d:32:34:59:ae:
6e:ea:73:ef:53:2a:c3:2b:a5:64:09:46:46:b4:32:
b1:71:4a:80:15:55:49:a0:08:9c:d8:04:a7:6a:79:
0a:f1:95:f0:27:7d:f6:a3:65:85:be:51:4b:a1:dc:
36:2e:3e:03:0e:8c:67:28:e7:4e:1f:9c:18:45:9c:
89:ca:aa:cf:01:76:ee:74:f0:45:54:cc:a4:24:25:
c3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:86:7C:B3:04:8A:99:A3:FB:90:20:22:27:FD:E9:22:2F:7E:D3:3C
X509v3 Authority Key Identifier:
keyid:01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:fc:2c:4c:52:90:5f:80:de:3a:51:50:fa:fc:19:a5:f2:a2:
c1:aa:76:5e:03:17:ef:bd:85:0d:b5:8c:da:42:8c:8c:49:01:
be:5d:77:fd:cb:37:b1:4b:39:a2:93:60:53:a1:ff:fa:98:07:
4a:3a:6e:d8:45:10:e6:78:55:35:4e:bc:41:a8:4d:81:96:37:
72:10:84:72:9c:90:98:b0:08:78:7e:5a:b9:07:f5:9d:bb:e6:
a6:72:67:d8:20:f4:3a:6a:56:0a:e8:54:46:a6:5e:7c:06:4b:
68:23:84:ac:35:8b:6b:d5:54:c5:5f:e1:e9:b8:47:1d:95:94:
66:5a:a7:aa:e5:9d:34:b1:dd:a1:74:2f:e9:58:4b:aa:b6:83:
ca:97:31:6b:c7:4a:6e:aa:9d:0e:a5:95:7a:ab:ba:97:fd:06:
30:75:70:53:9c:ed:08:d9:c5:9b:b6:4a:75:a6:90:b6:a3:b6:
5a:69:61:7e:d5:c4:18:ee:23:ee:35:74:9b:22:29:35:34:86:
f0:b8:b4:14:30:48:51:53:a7:5f:09:55:e3:ec:7c:da:d3:04:
8b:44:9a:46:97:39:1a:19:d2:7e:c9:4c:e3:68:c7:b9:8d:a7:
fc:2f:38:68:e0:93:86:e2:41:2e:5b:fa:5d:14:67:8e:54:a8:
12:a1:e4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:28:45 2026 by rpki-client