Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/421476-b808-485e-bb56-f19a2fde1e6a/1/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.mft
File: Ax7Erh0E2uFAFcYn-jlrPvzlYGI.mft (raw, json)
Hash identifier: 1SQyUMB5RbdJI2U9N9n1Uw3K+kgbgxrEheSo2eICMvw=
Subject key identifier: CB:A5:E3:CF:BB:35:21:71:65:21:50:71:CD:DC:9A:30:FB:B3:27:1C
Authority key identifier: 03:1E:C4:AE:1D:04:DA:E1:40:15:C6:27:FA:39:6B:3E:FC:E5:60:62
Certificate issuer: /CN=031ec4ae1d04dae14015c627fa396b3efce56062
Certificate serial: 019D2772C9CB6F5EAEF4BD236CE8DF625FA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/421476-b808-485e-bb56-f19a2fde1e6a/1/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.mft
Manifest number: 0281
Signing time: Thu 26 Mar 2026 00:02:07 +0000
Manifest this update: Thu 26 Mar 2026 00:02:07 +0000
Manifest next update: Fri 27 Mar 2026 00:02:07 +0000
Files and hashes: 1: 4insj3pucuWS5WBRNtcX06ZuH-Y.roa (hash: VUuXsJpu6FaH+zLOTesRLETFV8rJOEX7P+g0BMZ48VA=)
2: Ax7Erh0E2uFAFcYn-jlrPvzlYGI.crl (hash: wtgw3bMMCgTEZt9jXxCa9H89+UrZli+AYA6ca2DUWqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/421476-b808-485e-bb56-f19a2fde1e6a/1/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/421476-b808-485e-bb56-f19a2fde1e6a/1/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:c9:cb:6f:5e:ae:f4:bd:23:6c:e8:df:62:5f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=031ec4ae1d04dae14015c627fa396b3efce56062
Validity
Not Before: Mar 26 00:02:07 2026 GMT
Not After : Mar 27 00:02:07 2026 GMT
Subject: CN=cba5e3cfbb35217165215071cddc9a30fbb3271c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cb:4d:fa:ca:a9:f2:6e:2b:86:2e:f0:a1:b4:
bf:0e:91:5f:1d:85:eb:6a:33:7b:1d:41:e3:5c:11:
52:8e:c7:72:0e:4b:28:1d:13:db:eb:0e:0f:31:7d:
26:91:6f:df:4c:18:0a:d4:4f:69:9f:e1:e3:89:0c:
3c:dc:18:4d:65:1f:6d:99:cb:8d:10:62:84:a0:2c:
15:f5:76:7c:04:75:cd:db:75:cd:b8:a9:4e:90:59:
8b:32:e1:5a:26:d4:ee:cd:bc:74:f3:35:f8:36:6d:
90:56:f2:58:e1:6a:00:97:36:99:eb:fe:7a:66:51:
e5:dd:81:5b:b5:61:20:3f:cd:29:7e:e1:d3:6a:69:
1a:e0:87:34:43:57:94:a2:54:b8:7d:4d:03:6f:68:
4e:83:5c:12:8a:07:48:e7:cd:e6:78:3a:0e:59:e0:
a2:0e:3e:1e:87:cd:eb:af:a1:2a:58:aa:8f:fe:2f:
4c:27:b8:94:82:78:0d:76:24:92:bf:aa:24:19:1b:
88:c0:2f:0b:ca:78:90:3c:31:78:ae:91:59:45:2a:
1c:a5:3c:07:f8:26:99:b9:69:d8:37:bb:b5:16:da:
05:a2:6d:97:fb:56:2d:45:01:3a:ea:f1:3b:7e:7d:
d3:69:24:d9:1d:15:7e:8a:fb:2e:55:06:b8:68:06:
ef:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A5:E3:CF:BB:35:21:71:65:21:50:71:CD:DC:9A:30:FB:B3:27:1C
X509v3 Authority Key Identifier:
keyid:03:1E:C4:AE:1D:04:DA:E1:40:15:C6:27:FA:39:6B:3E:FC:E5:60:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/421476-b808-485e-bb56-f19a2fde1e6a/1/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/421476-b808-485e-bb56-f19a2fde1e6a/1/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:de:0f:b3:35:ca:02:1b:1a:cd:7c:05:ff:97:f4:f6:eb:ee:
e3:b6:fa:b0:cb:86:2c:ab:ad:0a:1e:0a:83:26:7f:50:e8:d8:
f1:98:85:39:b5:3f:69:de:7e:c1:23:ce:06:d0:9c:bd:a1:7c:
df:fe:7e:c3:15:a4:ac:8c:9a:1b:d2:d4:d5:af:a6:cc:1a:00:
90:fb:09:e6:c4:ad:d7:d0:1f:93:89:ae:09:8c:0d:64:df:a4:
81:c4:c3:87:e8:38:19:d1:0f:64:72:26:93:55:98:c9:d2:e6:
5d:d4:42:7a:5b:d3:08:98:90:25:3d:cd:ff:84:b4:a1:34:51:
a9:8e:ce:64:73:60:b5:e5:92:74:ee:7b:58:18:c7:98:d1:ad:
04:60:20:03:9e:b2:3d:8f:de:47:ac:39:b6:db:a0:4b:d0:44:
23:59:9b:fa:5f:e6:61:48:e4:b3:0b:77:e8:9f:7b:da:98:79:
1e:bf:d3:cb:98:8b:3f:9a:b8:13:7a:95:df:07:3a:47:2b:a0:
90:4e:af:1d:80:a8:6a:f0:22:2b:1d:e7:c2:98:52:1f:16:76:
da:07:07:6d:c2:b5:e3:59:d2:bb:f6:02:af:86:45:c8:92:0f:
5e:d9:97:88:e9:a8:5a:11:21:e4:94:57:91:64:e8:26:dd:f7:
db:d3:32:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncsnLb16u9L0jbOjfYl+mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMWVjNGFlMWQwNGRhZTE0MDE1YzYyN2ZhMzk2YjNlZmNl
NTYwNjIwHhcNMjYwMzI2MDAwMjA3WhcNMjYwMzI3MDAwMjA3WjAzMTEwLwYDVQQD
EyhjYmE1ZTNjZmJiMzUyMTcxNjUyMTUwNzFjZGRjOWEzMGZiYjMyNzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8tN+sqp8m4rhi7wobS/DpFfHYXr
ajN7HUHjXBFSjsdyDksoHRPb6w4PMX0mkW/fTBgK1E9pn+HjiQw83BhNZR9tmcuN
EGKEoCwV9XZ8BHXN23XNuKlOkFmLMuFaJtTuzbx08zX4Nm2QVvJY4WoAlzaZ6/56
ZlHl3YFbtWEgP80pfuHTamka4Ic0Q1eUolS4fU0Db2hOg1wSigdI583meDoOWeCi
Dj4eh83rr6EqWKqP/i9MJ7iUgngNdiSSv6okGRuIwC8LyniQPDF4rpFZRSocpTwH
+CaZuWnYN7u1FtoFom2X+1YtRQE66vE7fn3TaSTZHRV+ivsuVQa4aAbvKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMul48+7NSFxZSFQcc3cmjD7syccMB8GA1UdIwQY
MBaAFAMexK4dBNrhQBXGJ/o5az785WBiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXg3RXJoMEUydUZBRmNZbi1qbHJQdnpsWUdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS80MjE0NzYtYjgwOC00ODVlLWJiNTYt
ZjE5YTJmZGUxZTZhLzEvQXg3RXJoMEUydUZBRmNZbi1qbHJQdnpsWUdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS80MjE0NzYtYjgwOC00ODVlLWJiNTYtZjE5YTJmZGUxZTZh
LzEvQXg3RXJoMEUydUZBRmNZbi1qbHJQdnpsWUdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbd4PszXK
AhsazXwF/5f09uvu47b6sMuGLKutCh4KgyZ/UOjY8ZiFObU/ad5+wSPOBtCcvaF8
3/5+wxWkrIyaG9LU1a+mzBoAkPsJ5sSt19Afk4muCYwNZN+kgcTDh+g4GdEPZHIm
k1WYydLmXdRCelvTCJiQJT3N/4S0oTRRqY7OZHNgteWSdO57WBjHmNGtBGAgA56y
PY/eR6w5ttugS9BEI1mb+l/mYUjkswt36J972ph5Hr/Ty5iLP5q4E3qV3wc6Ryug
kE6vHYCoavAiKx3nwphSHxZ22gcHbcK141nSu/YCr4ZFyJIPXtmXiOmoWhEh5JRX
kWToJt3329Mysg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:22:48 2026 by rpki-client