Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/421476-b808-485e-bb56-f19a2fde1e6a/1/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.mft
File: Ax7Erh0E2uFAFcYn-jlrPvzlYGI.mft (raw, json)
Hash identifier: OpX1JuCb/cMi8q63HrLLuGQaachoXsnKV5s40KQR1n0=
Subject key identifier: F5:D5:93:14:D7:89:65:6F:C0:8C:02:01:3F:2C:5B:82:80:C7:85:3E
Authority key identifier: 03:1E:C4:AE:1D:04:DA:E1:40:15:C6:27:FA:39:6B:3E:FC:E5:60:62
Certificate issuer: /CN=031ec4ae1d04dae14015c627fa396b3efce56062
Certificate serial: 019F916D20715C2E27F90051778872568D44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/421476-b808-485e-bb56-f19a2fde1e6a/1/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.mft
Manifest number: 03C1
Signing time: Fri 24 Jul 2026 00:01:15 +0000
Manifest this update: Fri 24 Jul 2026 00:01:15 +0000
Manifest next update: Sat 25 Jul 2026 00:01:15 +0000
Files and hashes: 1: 4insj3pucuWS5WBRNtcX06ZuH-Y.roa (hash: VUuXsJpu6FaH+zLOTesRLETFV8rJOEX7P+g0BMZ48VA=)
2: Ax7Erh0E2uFAFcYn-jlrPvzlYGI.crl (hash: 3o85DAtsFkOmIy5dc1VSLZHnUioIacWwSobz7NOOBwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/421476-b808-485e-bb56-f19a2fde1e6a/1/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/421476-b808-485e-bb56-f19a2fde1e6a/1/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:20:71:5c:2e:27:f9:00:51:77:88:72:56:8d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=031ec4ae1d04dae14015c627fa396b3efce56062
Validity
Not Before: Jul 24 00:01:15 2026 GMT
Not After : Jul 25 00:01:15 2026 GMT
Subject: CN=f5d59314d789656fc08c02013f2c5b8280c7853e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:27:c0:d1:12:c5:5a:93:74:6f:e1:bd:fa:37:
de:1d:36:33:68:da:f0:e3:d8:06:9b:73:b7:38:76:
8d:ad:3b:59:48:e6:d8:d7:8e:b8:0c:25:01:14:9d:
64:ba:f0:fd:44:66:d5:c6:c6:c0:9e:dc:49:e1:f4:
84:17:93:05:6b:ee:b1:15:98:93:c1:24:ac:6a:1d:
a7:90:f8:dd:85:45:b2:f1:8b:95:ba:48:b3:bc:0d:
33:6a:bf:01:f3:89:5b:bb:7a:11:42:99:b2:fd:16:
5a:45:4d:1c:dc:81:1f:13:2c:28:80:e0:80:c3:cc:
de:fc:16:1a:6b:e2:b9:79:a1:5f:28:cc:29:c3:fe:
da:80:e2:41:78:74:08:d3:e0:3f:d8:f2:46:bc:db:
b4:1e:dc:0a:da:0f:2d:4a:22:99:65:63:72:dc:4e:
37:a5:a3:85:04:8d:64:31:06:8e:3f:bd:6b:db:cf:
3c:71:6a:82:28:5a:41:1c:5e:97:30:70:29:d0:e1:
e1:a3:5b:7d:79:5c:8f:58:c2:c1:69:4e:0e:fe:80:
1f:6e:b3:e3:52:59:8b:bc:68:3b:ec:e2:00:c2:ab:
33:3a:f4:f3:df:f0:c5:8f:65:49:5a:00:91:74:72:
e3:fa:e3:d4:20:11:fc:90:2c:6f:33:d0:8c:2a:df:
b7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D5:93:14:D7:89:65:6F:C0:8C:02:01:3F:2C:5B:82:80:C7:85:3E
X509v3 Authority Key Identifier:
keyid:03:1E:C4:AE:1D:04:DA:E1:40:15:C6:27:FA:39:6B:3E:FC:E5:60:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/421476-b808-485e-bb56-f19a2fde1e6a/1/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/421476-b808-485e-bb56-f19a2fde1e6a/1/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:15:ae:a6:84:97:39:30:fa:ab:ef:92:0a:eb:40:5b:d1:a0:
23:a5:b0:24:95:e8:d6:87:5c:80:4e:e3:37:b8:c5:6f:f9:89:
a6:49:59:4c:42:50:16:ff:08:f1:a5:f1:38:87:08:24:a0:55:
62:de:1f:70:f9:c7:a6:ec:63:13:ab:1a:ae:44:a8:ed:de:9d:
0d:ed:19:99:07:6c:e1:dc:0e:f2:de:c6:76:81:94:34:1c:cf:
5e:f7:f7:e5:83:09:38:ef:05:b3:a2:5b:ac:50:a4:14:df:bf:
40:12:11:91:84:3c:95:a1:5d:66:74:f1:a8:31:2f:5b:45:95:
80:fb:15:b2:0d:37:2f:ad:de:56:88:7c:43:b8:48:da:ce:0a:
8f:1b:94:75:9c:fa:01:21:d3:39:80:ae:73:15:89:c1:23:3f:
69:48:7b:bd:82:3d:38:59:98:fc:2f:e3:31:7b:80:97:f6:c0:
bc:24:43:36:02:23:8b:ee:a8:5d:0a:09:d0:22:d9:72:ca:fa:
88:d2:bb:89:6e:61:48:ff:bb:50:64:eb:29:dc:45:01:04:d9:
b3:66:16:cc:0d:c3:6c:23:aa:74:6b:dd:b6:41:a5:d0:ff:e0:
eb:30:b5:14:3a:42:aa:58:35:dd:09:9f:80:9c:2a:04:c0:5c:
be:e0:c3:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbSBxXC4n+QBRd4hyVo1EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMWVjNGFlMWQwNGRhZTE0MDE1YzYyN2ZhMzk2YjNlZmNl
NTYwNjIwHhcNMjYwNzI0MDAwMTE1WhcNMjYwNzI1MDAwMTE1WjAzMTEwLwYDVQQD
EyhmNWQ1OTMxNGQ3ODk2NTZmYzA4YzAyMDEzZjJjNWI4MjgwYzc4NTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCfA0RLFWpN0b+G9+jfeHTYzaNrw
49gGm3O3OHaNrTtZSObY1464DCUBFJ1kuvD9RGbVxsbAntxJ4fSEF5MFa+6xFZiT
wSSsah2nkPjdhUWy8YuVukizvA0zar8B84lbu3oRQpmy/RZaRU0c3IEfEywogOCA
w8ze/BYaa+K5eaFfKMwpw/7agOJBeHQI0+A/2PJGvNu0HtwK2g8tSiKZZWNy3E43
paOFBI1kMQaOP71r2888cWqCKFpBHF6XMHAp0OHho1t9eVyPWMLBaU4O/oAfbrPj
UlmLvGg77OIAwqszOvTz3/DFj2VJWgCRdHLj+uPUIBH8kCxvM9CMKt+3dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPXVkxTXiWVvwIwCAT8sW4KAx4U+MB8GA1UdIwQY
MBaAFAMexK4dBNrhQBXGJ/o5az785WBiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXg3RXJoMEUydUZBRmNZbi1qbHJQdnpsWUdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS80MjE0NzYtYjgwOC00ODVlLWJiNTYt
ZjE5YTJmZGUxZTZhLzEvQXg3RXJoMEUydUZBRmNZbi1qbHJQdnpsWUdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS80MjE0NzYtYjgwOC00ODVlLWJiNTYtZjE5YTJmZGUxZTZh
LzEvQXg3RXJoMEUydUZBRmNZbi1qbHJQdnpsWUdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAChWupoSX
OTD6q++SCutAW9GgI6WwJJXo1odcgE7jN7jFb/mJpklZTEJQFv8I8aXxOIcIJKBV
Yt4fcPnHpuxjE6sarkSo7d6dDe0ZmQds4dwO8t7GdoGUNBzPXvf35YMJOO8Fs6Jb
rFCkFN+/QBIRkYQ8laFdZnTxqDEvW0WVgPsVsg03L63eVoh8Q7hI2s4KjxuUdZz6
ASHTOYCucxWJwSM/aUh7vYI9OFmY/C/jMXuAl/bAvCRDNgIji+6oXQoJ0CLZcsr6
iNK7iW5hSP+7UGTrKdxFAQTZs2YWzA3DbCOqdGvdtkGl0P/g6zC1FDpCqlg13Qmf
gJwqBMBcvuDDMA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:58:32 2026 by rpki-client