Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
File: AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft (raw, json)
Hash identifier: t9qF+sL+IOlbhZzlyiA0VxB1O0vr1M1UnkQoir92UdU=
Subject key identifier: 48:16:B9:B3:86:89:00:3E:9E:DE:85:64:81:C1:C4:22:64:ED:46:D7
Authority key identifier: 01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
Certificate issuer: /CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Certificate serial: 01A0D0EE11258E5C3D924ED92C3FD3ACF727
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
Manifest number: 1A89
Signing time: Thu 24 Sep 2026 01:00:57 +0000
Manifest this update: Thu 24 Sep 2026 01:00:57 +0000
Manifest next update: Fri 25 Sep 2026 01:00:57 +0000
Files and hashes: 1: 0CvIXoHsvIs1B_YOF4uDh9JpSxE.roa (hash: 91sFZp4Lna3qg8mUoA4c/ZNk5BvTimCG0r/38G4vor4=)
2: 0mnkoAs85-mIhHxZL8fHwKRjWRc.roa (hash: eichc48YsRBfEc1NE+QI5LUu3kO43L633dCSshf5yAM=)
3: 5bPw81P_kxJyPAHehBzr4HJ5wlg.roa (hash: 4Hmum3YbvhBsvoDqD6ymCevyNK6B2cZ0Ry/48HKcZ6M=)
4: 6xtEtECX1hmiBfg2kCnuxEarwpg.roa (hash: 0EDHjBKP1TdEoYGKNKuRsh3vtzapWrWAjD4dmjk8Vc0=)
5: AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl (hash: 6JG5eKVL7h6/0Io+p0btzmprkIOCS8BRW59jK3zdy30=)
6: FyvKrQlLQZ08OBN_anf4pBjOJb4.roa (hash: +pZffx5xsLckndXmwboiF/Rz+edr9+ScKLx8uBSEPfQ=)
7: Jfl2HZOv0aOpTlrzfTjwSjaabBA.roa (hash: 627r3CnYmsat7UpuE0Fbc/64Tgy4fFvd4NcmRN9aPno=)
8: yugxSbIwGxz1NU3UI7VHskkezds.roa (hash: SVtVdrynk9VJBORSgvdr3639uF3/kw+eYctyJwd4PmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ee:11:25:8e:5c:3d:92:4e:d9:2c:3f:d3:ac:f7:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Validity
Not Before: Sep 24 01:00:57 2026 GMT
Not After : Sep 25 01:00:57 2026 GMT
Subject: CN=4816b9b38689003e9ede856481c1c42264ed46d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:87:e1:67:63:e9:9c:2b:b7:57:fb:ce:9d:2a:
af:4b:e2:a4:bd:22:05:25:fe:4d:37:8e:bf:60:9c:
89:b2:65:cd:1a:01:d9:28:92:02:7c:79:5d:47:07:
e4:6c:48:01:05:7f:46:a9:5c:f8:76:4c:fc:fa:18:
ed:53:2e:0c:f1:28:d5:c1:52:74:e3:99:1c:bd:5d:
31:84:30:bc:4e:a7:12:4d:7a:8c:30:0c:b5:e9:21:
e3:97:a9:53:f1:d5:65:d3:c0:17:0f:ff:22:6f:a1:
23:01:33:5e:9c:87:64:a8:7b:ff:82:df:d5:18:1c:
bf:51:1b:58:a1:8a:18:8b:6d:2a:14:72:5b:bb:a2:
4a:c5:40:07:49:02:67:39:0c:92:e4:0f:08:15:f7:
37:9a:f6:c7:eb:d4:d3:95:3e:bd:3a:c1:4c:76:2b:
f2:bb:8e:84:a0:8a:68:26:0f:be:1e:fe:e7:0a:8f:
da:bd:18:37:38:35:50:50:fa:6b:26:08:3e:71:cc:
c9:fa:2b:19:fc:8b:69:20:14:fd:ca:42:5f:33:c5:
5d:a4:f9:45:7c:7b:86:05:af:2f:15:47:f5:bc:a3:
21:d8:8f:14:d2:88:24:69:79:90:1b:30:d9:4c:1a:
af:cf:0b:7f:88:9a:3c:09:f3:0f:8d:50:a9:f0:59:
84:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:16:B9:B3:86:89:00:3E:9E:DE:85:64:81:C1:C4:22:64:ED:46:D7
X509v3 Authority Key Identifier:
keyid:01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:16:ef:e1:ba:82:39:b2:c2:bb:76:ff:04:b2:6c:2d:58:24:
09:34:00:d6:3e:8a:fb:9c:89:fe:c3:13:5a:0c:a2:ba:c0:0c:
2a:e3:b4:5e:b8:9e:51:24:36:40:c0:55:ec:39:b8:65:15:f5:
f6:29:4e:76:28:6c:24:c8:0b:fb:4b:eb:45:7a:b8:ee:a0:e0:
35:aa:95:50:82:86:e6:e4:f5:03:95:5f:bd:8b:4e:f2:27:1b:
15:76:fd:a7:8f:0b:25:27:04:3c:6c:31:2c:e2:ce:91:0f:1e:
84:84:11:c6:2a:7f:0f:2c:b9:42:dc:a5:1e:bb:c4:74:4d:be:
45:58:f7:16:d1:ea:12:5a:40:ca:bf:ec:f9:19:5e:e1:d9:84:
78:87:a1:98:b4:99:b0:0a:d2:44:37:f3:0b:ab:a2:14:5c:f0:
3c:c8:08:14:e9:5f:18:fa:86:f4:68:eb:ff:bd:e6:04:93:7d:
be:0b:ed:ec:5c:3a:a1:32:57:c4:a4:98:1d:d8:86:55:ba:8f:
e0:95:db:4f:6c:db:f7:fe:62:d5:80:5d:ae:a1:61:bf:20:49:
1b:b8:c0:14:05:28:86:2a:86:98:37:73:14:ec:7c:a5:6e:57:
d8:f0:d6:eb:84:07:3b:91:cd:0d:86:af:a9:11:9f:d3:c4:a5:
23:d0:c3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:19:43 2026 by rpki-client