Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft
File: Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft (raw, json)
Hash identifier: +24Z+V8HOyXOk0bSvWhNSJ12iDBsfFfKtFjMJdVohGU=
Subject key identifier: 02:EC:BD:16:DC:7C:02:AD:C8:AF:07:6A:A7:B7:42:DF:B5:46:1A:45
Authority key identifier: 03:1D:03:15:F7:7B:95:49:5F:60:DC:62:B3:58:E4:C1:B3:FB:5D:C0
Certificate issuer: /CN=031d0315f77b95495f60dc62b358e4c1b3fb5dc0
Certificate serial: 019D992B0F7EFFDB57D86A601CF724469278
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ax0DFfd7lUlfYNxis1jkwbP7XcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft
Manifest number: CD
Signing time: Fri 17 Apr 2026 02:00:29 +0000
Manifest this update: Fri 17 Apr 2026 02:00:29 +0000
Manifest next update: Sat 18 Apr 2026 02:00:29 +0000
Files and hashes: 1: 273CJOloMHCNr40TZUcFVxeZFms.asa (hash: tOqMGrNI4l0VYDU+tVPacc01C6txXDyN4W2pPE0sHCs=)
2: Ax0DFfd7lUlfYNxis1jkwbP7XcA.crl (hash: OikM74h+l0Mbw4m2A2eu6QUYbdeDTQF9FDFR/paStw4=)
3: WfIBNFBJCmDGiwOF58LkEkU6i_k.asa (hash: M5LpZEXgCwgBFWCXLQ6KoLhrTqWESWDvJESM0Dp+OEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ax0DFfd7lUlfYNxis1jkwbP7XcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:0f:7e:ff:db:57:d8:6a:60:1c:f7:24:46:92:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=031d0315f77b95495f60dc62b358e4c1b3fb5dc0
Validity
Not Before: Apr 17 02:00:29 2026 GMT
Not After : Apr 18 02:00:29 2026 GMT
Subject: CN=02ecbd16dc7c02adc8af076aa7b742dfb5461a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ce:df:81:a8:8a:69:ad:8d:14:7c:03:b4:4b:
2e:c9:ad:23:d5:86:aa:6f:fd:68:0e:35:39:4c:f7:
3d:03:c8:2c:99:70:09:46:bc:56:0e:39:ee:ab:2b:
fb:4e:05:51:0a:67:9d:bb:08:01:37:d2:da:d5:b9:
45:63:a4:a0:2b:31:f0:e8:1e:43:66:21:8c:7a:0c:
18:12:c3:fc:ae:63:4c:5e:b6:6f:2b:48:c8:a0:f2:
02:50:00:d3:83:aa:ed:c6:6c:12:da:bf:57:86:79:
1a:ad:86:b4:48:b1:79:51:61:43:17:f8:f1:20:ba:
65:db:9f:db:20:2f:f2:9a:99:8a:f9:d5:35:8f:72:
f1:f0:b2:76:46:16:73:7d:8a:b2:f5:53:f4:f3:bd:
bc:0f:bb:3a:73:69:9a:c3:b6:34:c7:6e:d1:ad:1e:
96:a5:61:97:5f:0a:e1:58:8b:8e:40:e4:9f:a1:ae:
27:af:2b:92:40:e9:cf:f7:41:a9:57:6f:7a:d5:e6:
8d:06:7c:6f:2e:1b:70:9b:c5:61:64:0c:46:88:f4:
c7:00:0e:2a:d7:f2:fb:65:84:92:1e:2c:76:d6:1d:
a9:e9:98:10:06:43:3e:a8:54:73:eb:78:cd:16:0e:
32:8e:95:c3:5c:bf:c5:5d:5a:76:f2:76:4d:6d:cd:
10:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:EC:BD:16:DC:7C:02:AD:C8:AF:07:6A:A7:B7:42:DF:B5:46:1A:45
X509v3 Authority Key Identifier:
keyid:03:1D:03:15:F7:7B:95:49:5F:60:DC:62:B3:58:E4:C1:B3:FB:5D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ax0DFfd7lUlfYNxis1jkwbP7XcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:1d:f5:ae:ed:c8:8c:76:c3:24:98:dc:73:cb:bb:0c:dc:29:
20:eb:51:ab:9e:34:c7:cf:26:5e:7c:69:90:35:9f:9f:fb:40:
21:d7:cc:5a:63:f0:62:25:90:a8:5a:d9:98:2d:5c:e4:38:e9:
7c:5a:9d:69:44:98:58:1a:8e:6c:db:9b:70:95:63:cc:d5:1c:
9e:1a:51:7d:ce:b7:32:c6:01:a5:4b:1c:a8:4c:14:29:b1:53:
11:9a:59:4b:96:05:6f:09:d7:a1:ed:d8:fe:94:b0:9b:6b:fc:
f9:ff:be:94:b4:62:b0:f5:06:9b:e7:98:be:c7:b6:81:70:fe:
f2:31:24:77:0c:5e:45:d7:02:8a:8d:ce:1b:d7:fe:06:e4:1f:
79:8f:d9:25:c9:94:4a:18:84:b5:fa:27:ab:aa:a6:c7:36:97:
37:36:2c:08:eb:24:71:02:0c:7d:0f:43:62:49:56:c1:03:e9:
40:2b:a3:9d:83:4d:82:32:59:02:85:c2:15:d4:d6:ac:8d:e2:
55:34:8e:91:21:d2:e1:d7:5b:7f:e1:0d:d4:c5:c0:3e:6d:8d:
5a:d2:e3:28:d6:4e:8c:8b:0a:f7:44:c2:1e:64:39:0c:89:aa:
09:1b:17:e8:52:25:c9:ea:2d:af:e9:9f:81:c5:e8:08:fe:f9:
63:d4:e9:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:53:25 2026 by rpki-client