Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
File: AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft (raw, json)
Hash identifier: 0qaT90+jSMEzsjc+Wc2vMkf+NMIi525ELwC7BIGoxhc=
Subject key identifier: 34:42:E8:39:C6:C4:20:AA:60:2A:C9:F8:C3:8C:39:DD:80:94:A7:90
Authority key identifier: 01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
Certificate issuer: /CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Certificate serial: 01A0CEFF85D40BA2DB7A1034FBCAB46A49CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
Manifest number: 1A88
Signing time: Wed 23 Sep 2026 16:00:47 +0000
Manifest this update: Wed 23 Sep 2026 16:00:47 +0000
Manifest next update: Thu 24 Sep 2026 16:00:47 +0000
Files and hashes: 1: 0CvIXoHsvIs1B_YOF4uDh9JpSxE.roa (hash: 91sFZp4Lna3qg8mUoA4c/ZNk5BvTimCG0r/38G4vor4=)
2: 0mnkoAs85-mIhHxZL8fHwKRjWRc.roa (hash: eichc48YsRBfEc1NE+QI5LUu3kO43L633dCSshf5yAM=)
3: 5bPw81P_kxJyPAHehBzr4HJ5wlg.roa (hash: 4Hmum3YbvhBsvoDqD6ymCevyNK6B2cZ0Ry/48HKcZ6M=)
4: 6xtEtECX1hmiBfg2kCnuxEarwpg.roa (hash: 0EDHjBKP1TdEoYGKNKuRsh3vtzapWrWAjD4dmjk8Vc0=)
5: AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl (hash: sGmcwPp9wcdbQpLAsBo/QHSdM7bGafPTwW4o7tGZJbo=)
6: FyvKrQlLQZ08OBN_anf4pBjOJb4.roa (hash: +pZffx5xsLckndXmwboiF/Rz+edr9+ScKLx8uBSEPfQ=)
7: Jfl2HZOv0aOpTlrzfTjwSjaabBA.roa (hash: 627r3CnYmsat7UpuE0Fbc/64Tgy4fFvd4NcmRN9aPno=)
8: yugxSbIwGxz1NU3UI7VHskkezds.roa (hash: SVtVdrynk9VJBORSgvdr3639uF3/kw+eYctyJwd4PmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 16:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:ff:85:d4:0b:a2:db:7a:10:34:fb:ca:b4:6a:49:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Validity
Not Before: Sep 23 16:00:47 2026 GMT
Not After : Sep 24 16:00:47 2026 GMT
Subject: CN=3442e839c6c420aa602ac9f8c38c39dd8094a790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:69:f3:1f:54:b8:08:44:5c:f5:55:fc:16:c7:
67:47:14:f7:a1:15:f1:c5:4a:02:a6:ea:5d:9c:06:
e4:3a:75:d8:b2:c7:f6:35:0d:09:58:c0:13:1e:91:
cb:91:4a:d9:48:b5:78:c6:e3:da:e5:64:3e:74:9c:
cc:7c:37:cf:e5:ad:c9:17:19:1a:fc:0f:26:15:61:
26:1d:41:4f:20:de:fd:5c:63:2a:29:01:30:e9:b8:
dd:5e:5a:b6:19:78:97:4a:10:33:f7:d2:94:1f:b2:
9e:dc:dc:75:29:c9:08:c8:64:a6:0e:7f:1a:3d:25:
32:1c:ef:f8:a4:ce:55:68:5f:c1:5c:fc:32:46:d0:
e4:bc:59:e1:63:a8:79:cf:ba:2e:07:99:8a:22:25:
38:bd:74:79:fa:98:9e:61:0b:9c:8d:3d:81:cc:d6:
16:da:73:7e:ab:44:36:fc:74:30:70:d7:4b:d0:da:
bc:9e:70:90:97:45:4f:2f:cd:74:c3:0f:d7:2c:ba:
37:24:f2:a9:3d:76:55:6b:d1:17:3d:4b:60:9f:b3:
0a:73:e1:77:0b:5a:d4:31:f6:97:1a:2f:0e:cf:96:
92:ce:7c:c2:de:ee:ec:6c:fd:b9:c7:95:93:24:1c:
4e:42:00:56:a1:71:7a:b9:5e:36:02:c2:07:c2:dd:
b6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:42:E8:39:C6:C4:20:AA:60:2A:C9:F8:C3:8C:39:DD:80:94:A7:90
X509v3 Authority Key Identifier:
keyid:01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:01:d2:6f:a9:02:8b:db:90:c2:56:0a:67:d1:9a:a5:34:e9:
19:d2:d4:22:4a:dd:13:17:68:b9:8c:b6:21:86:33:cd:8b:01:
ec:13:88:9e:e3:4c:0d:f5:8f:e3:92:0e:33:02:8a:6d:a3:cb:
f6:b8:27:a7:7b:46:4b:c6:8c:d4:d9:5a:ab:78:5c:62:87:19:
99:c0:7e:fb:3e:e6:ee:15:f3:c7:86:94:50:c6:86:52:78:6a:
ed:12:9c:c0:2a:44:ab:5e:c1:de:5c:d1:bd:02:d7:78:a2:69:
5b:1d:d5:9f:73:ce:77:2f:a8:c0:c2:3f:25:ba:42:f0:86:9e:
ef:8f:28:c2:cb:24:c6:fa:e3:d9:27:2d:5b:c6:a8:7d:03:d5:
b4:26:b0:ba:c5:ba:f9:2f:4b:6d:6b:57:d5:e5:e4:9a:7b:a6:
3e:d8:4c:69:2a:07:aa:80:81:ec:93:68:97:16:dc:68:bd:d0:
94:74:51:7e:7a:de:31:8b:3e:b1:b4:5b:2d:b9:60:39:78:b6:
02:6d:73:eb:1b:67:62:5b:1b:4b:96:bc:9d:3c:26:41:d1:2e:
c0:b0:58:4d:06:8a:df:69:29:db:fa:e5:55:fd:5a:ee:8e:54:
f2:75:b6:7f:88:39:5b:11:99:d6:cd:f6:5b:e4:de:2c:ab:0d:
0b:f7:d3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:35:45 2026 by rpki-client