Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
File: AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft (raw, json)
Hash identifier: wJy3R4QdbzXOAvmm9RtjptVa3Jqhp3GqS06Cq9KtqnU=
Subject key identifier: 6D:90:CC:7B:2B:FF:C1:3F:9C:FB:98:E1:F6:97:81:2C:55:52:D8:BB
Authority key identifier: 01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
Certificate issuer: /CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Certificate serial: 019D28F212C23BB887863B0E19837FF32463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
Manifest number: 18A3
Signing time: Thu 26 Mar 2026 07:00:46 +0000
Manifest this update: Thu 26 Mar 2026 07:00:46 +0000
Manifest next update: Fri 27 Mar 2026 07:00:46 +0000
Files and hashes: 1: 0CvIXoHsvIs1B_YOF4uDh9JpSxE.roa (hash: 91sFZp4Lna3qg8mUoA4c/ZNk5BvTimCG0r/38G4vor4=)
2: 0mnkoAs85-mIhHxZL8fHwKRjWRc.roa (hash: eichc48YsRBfEc1NE+QI5LUu3kO43L633dCSshf5yAM=)
3: 5bPw81P_kxJyPAHehBzr4HJ5wlg.roa (hash: 4Hmum3YbvhBsvoDqD6ymCevyNK6B2cZ0Ry/48HKcZ6M=)
4: 6xtEtECX1hmiBfg2kCnuxEarwpg.roa (hash: 0EDHjBKP1TdEoYGKNKuRsh3vtzapWrWAjD4dmjk8Vc0=)
5: AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl (hash: N0HY0fiUW6hu8XfCO5bXqJII915zAiJTDthIq+oM/t8=)
6: FyvKrQlLQZ08OBN_anf4pBjOJb4.roa (hash: +pZffx5xsLckndXmwboiF/Rz+edr9+ScKLx8uBSEPfQ=)
7: Jfl2HZOv0aOpTlrzfTjwSjaabBA.roa (hash: 627r3CnYmsat7UpuE0Fbc/64Tgy4fFvd4NcmRN9aPno=)
8: yugxSbIwGxz1NU3UI7VHskkezds.roa (hash: SVtVdrynk9VJBORSgvdr3639uF3/kw+eYctyJwd4PmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:12:c2:3b:b8:87:86:3b:0e:19:83:7f:f3:24:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Validity
Not Before: Mar 26 07:00:46 2026 GMT
Not After : Mar 27 07:00:46 2026 GMT
Subject: CN=6d90cc7b2bffc13f9cfb98e1f697812c5552d8bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:26:74:b6:ac:fd:32:6c:98:f0:23:7e:e8:5c:
61:95:e2:32:68:98:29:05:14:8e:53:15:78:60:01:
2b:fc:73:22:30:7e:09:9b:9a:1c:e9:f1:80:81:27:
39:4e:80:86:f2:66:0c:78:b7:a0:ef:10:e5:80:aa:
97:3f:0f:05:f8:f4:c1:4b:c8:8d:70:36:bd:a1:d9:
d2:40:07:b3:32:41:5d:ed:43:d8:a5:58:9c:1a:f5:
a9:ce:d8:d6:e0:c6:53:d0:5b:e7:61:72:50:67:a2:
f0:9c:7f:a4:b9:84:a3:7a:a1:db:a8:a8:48:84:7c:
d5:63:80:a0:da:27:f5:15:3a:2e:e7:f2:b8:45:25:
42:d1:72:65:f9:47:43:dc:b9:3f:86:a0:d8:5f:03:
98:b8:e2:d7:57:a8:f4:f2:17:e4:12:c4:a0:d7:de:
d1:18:b4:4f:60:02:d9:e6:fb:97:f2:c2:24:2d:eb:
0e:d7:05:32:be:41:1d:54:7d:20:75:33:aa:ca:9b:
11:10:d9:54:fa:0b:f0:6f:64:4a:3e:14:3f:44:16:
ef:d8:4c:27:54:0b:2d:5b:b9:71:1e:8c:0d:a9:c4:
0c:51:24:4d:c3:63:48:96:85:18:91:f6:05:ea:b3:
79:64:3d:7d:7a:63:4d:6a:02:8b:a5:a0:31:2b:bb:
b4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:90:CC:7B:2B:FF:C1:3F:9C:FB:98:E1:F6:97:81:2C:55:52:D8:BB
X509v3 Authority Key Identifier:
keyid:01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:cb:be:b9:a1:0b:36:99:24:18:68:66:b4:db:a2:5e:ab:92:
ce:a1:e8:c3:56:dc:4a:e5:6e:28:fc:13:66:17:86:b8:94:1e:
a3:3a:db:ec:b8:6b:75:80:47:03:b5:e4:57:07:16:78:82:a8:
2c:16:4b:ff:c3:3e:4f:92:ad:4f:eb:21:e7:d3:8f:15:f4:82:
3f:09:34:9e:6a:9a:05:1a:cf:33:b4:00:a4:ba:d6:63:59:4c:
85:da:d5:15:ae:ad:75:07:56:2f:c7:b7:a4:1f:12:a5:a9:d6:
c4:f4:50:91:be:0e:ff:66:93:f8:b5:a5:57:23:97:40:90:99:
0c:44:87:93:34:9e:53:2b:f0:94:76:50:1a:63:46:3a:c6:fc:
8f:b6:91:4e:c7:8d:ba:59:4c:3b:a6:91:b4:ee:e3:86:d3:76:
ea:4b:ad:c3:aa:eb:90:69:7f:f6:f5:cf:65:05:6d:17:78:f2:
d7:de:c6:64:35:99:be:c6:7d:30:41:82:2d:d9:0a:9d:8c:bf:
b1:96:24:cb:14:8a:89:7b:b1:2d:d6:85:85:cd:c9:b2:e1:06:
39:44:98:c8:9e:c9:a8:76:f4:9d:8f:cc:7a:43:f8:67:94:84:
7e:f9:e8:c3:3e:b9:f0:ae:cc:dd:b2:48:99:08:7a:37:43:d8:
e4:3b:db:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:12:58 2026 by rpki-client