Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
File: AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft (raw, json)
Hash identifier: gzjp9aswOJ44ds/O9vlD5511rkaFz7v2f/WxIKUYeUs=
Subject key identifier: D9:44:81:9C:E9:A5:7F:70:5C:8C:76:6C:DA:70:75:50:52:86:F7:DC
Authority key identifier: 01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
Certificate issuer: /CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Certificate serial: 019E1E35C13347F892AFAF1BB4600A948F5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
Manifest number: 1922
Signing time: Tue 12 May 2026 22:01:39 +0000
Manifest this update: Tue 12 May 2026 22:01:39 +0000
Manifest next update: Wed 13 May 2026 22:01:39 +0000
Files and hashes: 1: 0CvIXoHsvIs1B_YOF4uDh9JpSxE.roa (hash: 91sFZp4Lna3qg8mUoA4c/ZNk5BvTimCG0r/38G4vor4=)
2: 0mnkoAs85-mIhHxZL8fHwKRjWRc.roa (hash: eichc48YsRBfEc1NE+QI5LUu3kO43L633dCSshf5yAM=)
3: 5bPw81P_kxJyPAHehBzr4HJ5wlg.roa (hash: 4Hmum3YbvhBsvoDqD6ymCevyNK6B2cZ0Ry/48HKcZ6M=)
4: 6xtEtECX1hmiBfg2kCnuxEarwpg.roa (hash: 0EDHjBKP1TdEoYGKNKuRsh3vtzapWrWAjD4dmjk8Vc0=)
5: AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl (hash: YSkmB9bVGALIhGSLSW3ixRs4lK/pbyRsuc4wsx4IuvU=)
6: FyvKrQlLQZ08OBN_anf4pBjOJb4.roa (hash: +pZffx5xsLckndXmwboiF/Rz+edr9+ScKLx8uBSEPfQ=)
7: Jfl2HZOv0aOpTlrzfTjwSjaabBA.roa (hash: 627r3CnYmsat7UpuE0Fbc/64Tgy4fFvd4NcmRN9aPno=)
8: yugxSbIwGxz1NU3UI7VHskkezds.roa (hash: SVtVdrynk9VJBORSgvdr3639uF3/kw+eYctyJwd4PmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:c1:33:47:f8:92:af:af:1b:b4:60:0a:94:8f:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Validity
Not Before: May 12 22:01:39 2026 GMT
Not After : May 13 22:01:39 2026 GMT
Subject: CN=d944819ce9a57f705c8c766cda7075505286f7dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:26:8d:6d:d0:d0:75:3f:98:6f:70:c5:16:93:
7f:01:27:bc:ce:92:2d:a7:59:6c:f5:20:d5:a7:92:
f7:f7:4d:a8:08:4f:3b:87:7b:3e:3f:5a:22:f6:35:
d6:df:b9:b1:02:c8:7d:1c:62:ce:89:09:b5:0c:60:
48:61:17:a5:63:56:4e:07:8d:81:4c:22:62:a6:ac:
4e:d0:04:84:cc:8a:b4:7c:76:e9:53:b3:7e:ea:9f:
cd:9b:76:a4:c4:79:db:71:d5:f4:3a:c5:b4:7e:9f:
86:22:d4:d8:c7:a1:7c:07:d2:ab:8e:5e:5c:9f:df:
1e:87:04:4f:35:18:46:e9:60:6e:5c:74:bf:eb:a0:
03:6a:d8:5d:08:c4:a1:6f:1a:25:99:5f:c5:2e:2c:
a7:53:fd:57:bf:62:0e:9b:2b:96:b9:f5:19:79:64:
a1:77:cd:1c:a6:76:fb:f4:10:39:18:d4:b3:52:e4:
c0:2e:58:d3:88:63:4c:44:ca:74:6a:90:ee:1d:f0:
82:32:3a:6c:6d:ac:88:a9:12:57:99:dc:07:c9:75:
0c:7b:3c:ab:5c:8a:af:e3:39:0f:a8:9b:ba:01:d1:
e0:9f:18:fd:a3:79:3f:99:26:33:dc:46:64:ab:8e:
7c:49:d8:de:14:75:25:95:ee:cd:3c:80:6b:88:8f:
cd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:44:81:9C:E9:A5:7F:70:5C:8C:76:6C:DA:70:75:50:52:86:F7:DC
X509v3 Authority Key Identifier:
keyid:01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:26:3d:82:c1:b9:bc:cc:73:42:67:9d:41:98:16:fd:e1:b9:
c2:d5:6f:25:aa:d0:8e:5f:e5:87:4b:2d:61:75:cb:d9:62:01:
dd:90:69:10:16:08:18:4f:bf:f5:21:33:7b:9e:53:7a:a5:12:
a8:a3:a4:61:bb:37:7b:e6:35:17:ee:1e:d4:15:06:a5:50:82:
fc:de:d2:d3:fd:c7:ac:a0:d4:8b:3f:46:58:3d:27:42:4d:48:
80:f9:56:fa:0a:a0:9d:92:95:21:f8:50:27:5e:6f:42:29:30:
eb:2b:7d:c9:96:27:b9:76:7c:87:81:60:1e:8d:fc:a5:40:5c:
b9:ad:80:e0:d4:d7:a7:54:9c:e7:d5:41:3b:a3:aa:f4:a4:a0:
e6:df:07:e3:ee:80:54:a8:cc:c1:2a:32:eb:86:58:03:b6:2a:
4b:b4:50:e7:16:79:8b:9f:b0:ea:85:42:8a:01:65:f8:6e:4e:
67:97:19:6d:83:21:9f:70:a0:52:78:f6:b9:18:e1:4a:52:d1:
f3:ea:a8:af:76:51:47:58:61:4b:b1:52:ce:30:99:c2:03:17:
9d:9b:0b:f8:d3:ff:ee:28:52:46:cf:1f:8a:08:f4:d4:d2:05:
76:3e:d2:e9:ea:a5:90:92:4f:b1:57:5a:24:1d:b7:d6:49:ee:
be:dc:58:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:24:07 2026 by rpki-client