Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
File: AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft (raw, json)
Hash identifier: DauRmXBmqtvWp8vSgxq7UR5aQd8xsYiz897cWTEiP+U=
Subject key identifier: 08:10:DE:C1:D6:17:61:12:D6:FE:22:41:1E:3C:65:C2:3F:C5:DC:9B
Authority key identifier: 01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
Certificate issuer: /CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Certificate serial: 019F90FF0C3824A8F1F13FFDC04CB7FFB554
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
Manifest number: 19E3
Signing time: Thu 23 Jul 2026 22:01:01 +0000
Manifest this update: Thu 23 Jul 2026 22:01:01 +0000
Manifest next update: Fri 24 Jul 2026 22:01:01 +0000
Files and hashes: 1: 0CvIXoHsvIs1B_YOF4uDh9JpSxE.roa (hash: 91sFZp4Lna3qg8mUoA4c/ZNk5BvTimCG0r/38G4vor4=)
2: 0mnkoAs85-mIhHxZL8fHwKRjWRc.roa (hash: eichc48YsRBfEc1NE+QI5LUu3kO43L633dCSshf5yAM=)
3: 5bPw81P_kxJyPAHehBzr4HJ5wlg.roa (hash: 4Hmum3YbvhBsvoDqD6ymCevyNK6B2cZ0Ry/48HKcZ6M=)
4: 6xtEtECX1hmiBfg2kCnuxEarwpg.roa (hash: 0EDHjBKP1TdEoYGKNKuRsh3vtzapWrWAjD4dmjk8Vc0=)
5: AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl (hash: IR75ogbP5KjEz36XFX2QJ6dQ/GyRrP6U9YdbtYgW34M=)
6: FyvKrQlLQZ08OBN_anf4pBjOJb4.roa (hash: +pZffx5xsLckndXmwboiF/Rz+edr9+ScKLx8uBSEPfQ=)
7: Jfl2HZOv0aOpTlrzfTjwSjaabBA.roa (hash: 627r3CnYmsat7UpuE0Fbc/64Tgy4fFvd4NcmRN9aPno=)
8: t03EMq-NSzz6z5HQa-GjXWKzoZo.roa (hash: yH0kTbOMtCUA51U3VcVTi8KodU663jCCHRpwjnHIH54=)
9: yugxSbIwGxz1NU3UI7VHskkezds.roa (hash: SVtVdrynk9VJBORSgvdr3639uF3/kw+eYctyJwd4PmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:0c:38:24:a8:f1:f1:3f:fd:c0:4c:b7:ff:b5:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Validity
Not Before: Jul 23 22:01:01 2026 GMT
Not After : Jul 24 22:01:01 2026 GMT
Subject: CN=0810dec1d6176112d6fe22411e3c65c23fc5dc9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6b:4a:1f:be:30:5a:c6:62:53:ae:dd:85:42:
82:4d:53:80:34:c5:28:91:8c:25:9f:71:0a:d1:2a:
20:f0:f0:ee:9a:df:37:4b:0d:7c:bd:74:24:2d:17:
6b:15:13:59:71:a8:61:66:6c:c2:0f:a4:e2:e0:af:
2d:aa:6f:4e:08:ff:2f:a0:c5:a3:42:85:8f:74:98:
f8:74:94:06:93:23:66:8b:ba:96:ca:97:72:3b:db:
db:fb:95:dd:1a:7a:e4:a1:64:a8:0f:a9:26:50:5a:
59:bb:75:1a:3e:9f:6a:fa:77:51:a3:90:89:2e:2c:
7c:ed:be:eb:f1:d5:5a:7a:52:02:c1:80:a0:b4:08:
f7:a7:25:13:27:61:e6:16:7c:3b:b1:27:07:df:e7:
e0:00:d9:cd:ca:5e:1c:a9:86:9a:84:04:f4:b5:6b:
58:12:06:30:1a:34:54:79:9b:24:a4:9d:ca:ff:d7:
72:d6:cc:b7:64:aa:c1:06:ca:4d:b7:5a:e6:7e:4f:
19:42:5d:93:ae:c4:9e:8d:da:f8:be:64:26:b2:05:
2d:e6:d0:43:dd:8e:e7:ed:34:c9:aa:e1:6e:a3:bc:
e8:83:41:73:0e:a5:49:98:3b:3f:3f:14:96:bb:ac:
04:9c:b7:92:9e:44:4f:74:77:2d:9f:ba:9c:65:cd:
06:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:10:DE:C1:D6:17:61:12:D6:FE:22:41:1E:3C:65:C2:3F:C5:DC:9B
X509v3 Authority Key Identifier:
keyid:01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ec:77:10:99:35:b6:15:e4:28:6e:8a:3b:b5:b9:64:de:e7:
5e:a7:4d:a6:96:01:a7:25:fc:5d:c3:c6:e5:b4:d3:7d:3a:9e:
81:d3:93:eb:a6:62:0f:51:be:24:46:38:96:c3:0d:44:cd:2c:
f0:8c:00:d1:cc:1d:a1:17:e1:9b:74:38:ee:7e:2b:b3:d4:76:
c2:0e:82:ab:66:f6:76:43:8c:e5:42:92:97:ce:24:90:23:c1:
c5:96:92:45:b2:68:10:e9:42:7b:50:dc:a7:6b:3e:dd:eb:16:
37:d5:10:17:55:45:53:94:ec:58:85:7e:f9:27:33:d1:ea:6b:
bd:1e:7a:03:8e:39:5b:9d:39:54:db:c4:1e:88:22:ca:07:4d:
ee:ce:57:de:02:7e:54:bb:8a:21:97:4e:be:cd:66:d8:cc:3d:
50:7b:62:90:ed:3e:4f:0c:a5:82:81:5a:81:99:a0:31:22:33:
c6:ab:a2:cc:dc:bf:ac:fc:51:5e:7d:c1:cd:16:0e:9d:98:51:
ac:75:d2:eb:48:5b:e7:1e:4b:c7:4c:46:ca:b3:c1:dd:3c:a0:
7c:51:78:02:af:48:d5:f4:76:a1:4d:99:b8:78:4c:b8:3c:ef:
cf:0d:8e:0b:0e:05:25:4a:90:eb:76:ef:e0:34:6f:3a:56:70:
1e:d7:a6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:46:29 2026 by rpki-client