Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft
File: Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft (raw, json)
Hash identifier: MBQoqgTuRBIBIPG6KQSW4Q+RMPrFmB/+p+VqLx5jGPc=
Subject key identifier: 34:18:42:5D:1F:B6:A3:69:3C:70:F5:B9:CF:AD:80:9D:0E:4E:41:A1
Authority key identifier: 03:1D:03:15:F7:7B:95:49:5F:60:DC:62:B3:58:E4:C1:B3:FB:5D:C0
Certificate issuer: /CN=031d0315f77b95495f60dc62b358e4c1b3fb5dc0
Certificate serial: 01A1AC030F009DD935B9836447B81BD5191E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ax0DFfd7lUlfYNxis1jkwbP7XcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft
Manifest number: 02E9
Signing time: Thu 05 Nov 2026 14:00:43 +0000
Manifest this update: Thu 05 Nov 2026 14:00:43 +0000
Manifest next update: Fri 06 Nov 2026 14:00:43 +0000
Files and hashes: 1: 273CJOloMHCNr40TZUcFVxeZFms.asa (hash: tOqMGrNI4l0VYDU+tVPacc01C6txXDyN4W2pPE0sHCs=)
2: Ax0DFfd7lUlfYNxis1jkwbP7XcA.crl (hash: KOjIEM3Tm+1Fzipc9T2OShV8oDZDvfkCtwvJ5Wq8fUY=)
3: WfIBNFBJCmDGiwOF58LkEkU6i_k.asa (hash: M5LpZEXgCwgBFWCXLQ6KoLhrTqWESWDvJESM0Dp+OEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ax0DFfd7lUlfYNxis1jkwbP7XcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ac:03:0f:00:9d:d9:35:b9:83:64:47:b8:1b:d5:19:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=031d0315f77b95495f60dc62b358e4c1b3fb5dc0
Validity
Not Before: Nov 5 14:00:43 2026 GMT
Not After : Nov 6 14:00:43 2026 GMT
Subject: CN=3418425d1fb6a3693c70f5b9cfad809d0e4e41a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:28:0c:5a:ac:7a:b5:b6:cc:04:7a:fa:f0:28:
d9:51:1e:83:26:37:f2:13:78:bd:e0:54:9e:10:09:
d8:2d:f6:76:e4:25:08:cd:fb:a0:9c:3a:25:f3:5c:
9c:9c:e4:39:c1:78:b6:eb:f2:30:80:03:31:f4:fd:
a3:05:bb:81:d7:66:89:dd:c3:a4:89:85:aa:1a:e2:
5e:17:64:1a:46:4e:db:a2:a9:4d:1f:5a:3a:de:6a:
05:c9:f7:1f:9c:81:7e:88:4b:44:1f:a5:3f:ae:ff:
8d:e8:d1:49:34:98:5c:aa:b9:35:ac:8e:c1:10:6f:
aa:19:8f:9a:e3:6b:fa:b0:c1:e5:92:2f:e2:ba:f2:
af:e5:05:08:d7:a0:7f:8a:57:04:1c:6b:19:65:8e:
a5:21:66:f0:73:36:db:cb:5b:18:aa:22:e5:97:96:
35:bb:6c:56:4e:69:e6:39:2e:26:34:f1:63:20:ea:
cf:13:8f:e6:d9:2b:69:82:5a:fd:83:d6:77:c8:67:
ad:c3:a6:7e:1f:53:f8:d2:9f:a8:0d:d3:c1:f8:11:
3a:86:1f:d1:b9:b1:c5:e3:ee:08:32:df:e2:58:f6:
c5:d9:3e:6d:6f:85:6f:e6:98:00:6e:f3:ba:82:b9:
b5:00:1b:85:91:b0:36:2b:91:0a:e4:2e:d7:be:9d:
bc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:18:42:5D:1F:B6:A3:69:3C:70:F5:B9:CF:AD:80:9D:0E:4E:41:A1
X509v3 Authority Key Identifier:
keyid:03:1D:03:15:F7:7B:95:49:5F:60:DC:62:B3:58:E4:C1:B3:FB:5D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ax0DFfd7lUlfYNxis1jkwbP7XcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:21:38:a4:be:3f:74:b2:bc:3d:aa:3f:0e:83:04:dc:81:0b:
6c:d7:35:d3:13:d8:ec:82:5c:70:6e:93:f6:91:d3:0f:bf:08:
66:83:de:87:d8:81:9d:70:89:b2:d9:8a:2d:52:75:c4:e5:21:
89:7a:0b:23:f1:ba:84:ce:8d:3f:61:ab:9d:00:c2:84:5c:c6:
62:01:e0:f8:d9:58:8b:86:ad:2a:1d:f6:a2:17:c1:b2:8d:84:
f1:f6:17:7f:4a:f8:95:f8:fc:65:75:68:b4:32:1f:ee:12:dd:
2a:96:1b:e5:2a:fa:9b:fe:ea:f2:7b:c8:17:91:e6:25:c0:ec:
05:66:55:ec:7c:9b:cc:a3:77:89:f0:f5:8f:0b:9a:01:3d:c9:
d8:40:85:ed:c2:88:81:e7:bc:75:7c:6a:0b:1c:08:23:8e:87:
2c:fe:a0:6b:52:62:f9:49:e3:85:23:32:f1:c1:c0:e3:eb:ef:
da:6a:e3:a6:4c:9c:c5:90:7a:52:de:5f:7d:d6:49:97:db:2d:
3e:07:95:a1:32:1d:93:2d:b4:86:4d:9a:1a:f0:b5:4a:b8:09:
0c:db:44:54:9d:0d:c1:30:a2:12:a1:49:a2:ce:57:da:d2:56:
8d:82:da:cd:68:1f:bc:95:b9:dd:23:91:da:dd:ba:b5:90:a7:
ed:69:09:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 18:42:41 2026 by rpki-client