Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
File: AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft (raw, json)
Hash identifier: yplRL0TiOwm0HMLT/0k1dA7b4+pJ85KSd8KuzfNs4+M=
Subject key identifier: 77:56:A5:C8:5C:6F:62:68:5C:84:AA:36:A7:94:D5:44:90:7D:59:32
Authority key identifier: 03:19:6C:89:E5:54:DB:E4:77:45:22:75:99:06:E2:58:1A:17:46:94
Certificate issuer: /CN=03196c89e554dbe4774522759906e2581a174694
Certificate serial: 019FA9AC61FCC73B5155000119943114052D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
Manifest number: 14FF
Signing time: Tue 28 Jul 2026 17:01:14 +0000
Manifest this update: Tue 28 Jul 2026 17:01:14 +0000
Manifest next update: Wed 29 Jul 2026 17:01:14 +0000
Files and hashes: 1: 25mxXJh2G2nCKlFkslbkjTaimw0.roa (hash: gLUrLyzzoWyt075KRiHPrRM9zqSzPbD5AydPzwej0ts=)
2: AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl (hash: 4PBYXWksSJGbsZkNvVYEyhUf2l4o0mxMXAaSCVqe3Gk=)
3: RYNiV948DLV1Ez8aZtWra-uSAIU.roa (hash: iZJYlFMS/Nvt7xPVWg2S8RzagBzGleb0zYSMcRXDFSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 17:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:61:fc:c7:3b:51:55:00:01:19:94:31:14:05:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03196c89e554dbe4774522759906e2581a174694
Validity
Not Before: Jul 28 17:01:14 2026 GMT
Not After : Jul 29 17:01:14 2026 GMT
Subject: CN=7756a5c85c6f62685c84aa36a794d544907d5932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:77:29:ca:da:f5:45:26:b0:64:f0:5c:93:57:
16:41:c9:6a:04:1c:58:58:5a:37:b1:f8:c9:57:b8:
63:00:3d:d1:0f:fb:c4:66:12:03:51:f7:82:1c:17:
74:1b:ed:01:ea:4d:df:fa:4a:19:a6:e4:38:8c:ee:
5b:06:cd:26:f0:38:c7:7a:4f:16:f6:ba:32:c3:58:
8a:42:0d:89:64:2d:c3:68:48:ab:d0:e7:a0:05:25:
55:e1:b0:93:6b:83:16:b3:8a:aa:88:43:9d:a3:e4:
25:cb:b9:d1:c3:1f:2f:20:6a:90:74:2a:4a:b5:31:
df:96:5e:b7:99:b9:0b:ef:d8:8f:e2:09:66:9d:69:
c2:4f:44:52:68:85:27:1e:04:51:67:36:2f:09:01:
9f:6a:ba:82:5c:d9:0c:bb:66:99:8d:92:4d:78:ab:
26:36:1c:93:a7:32:4c:bb:18:3d:6e:90:31:1a:2e:
5d:a0:88:7a:2e:ad:90:be:25:d4:ff:2d:66:5b:1f:
1c:75:47:0f:dc:5c:b3:56:42:9a:29:70:3f:ea:b8:
ba:42:84:b3:48:46:eb:7d:5f:7e:65:61:0a:a9:e9:
30:c4:33:77:f3:c9:b2:0a:2b:77:b7:59:47:1e:10:
28:ad:8d:80:01:9a:a7:2c:fe:90:b0:58:3c:77:c9:
71:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:56:A5:C8:5C:6F:62:68:5C:84:AA:36:A7:94:D5:44:90:7D:59:32
X509v3 Authority Key Identifier:
keyid:03:19:6C:89:E5:54:DB:E4:77:45:22:75:99:06:E2:58:1A:17:46:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ab:7a:9d:60:d7:42:34:63:e3:c3:f0:5d:ea:9b:eb:5a:bb:
55:4a:8f:ef:a2:1c:5b:24:7f:13:4b:c6:07:71:5f:45:42:df:
63:5c:4e:89:d9:2f:d9:88:2d:bb:24:e5:03:69:f5:10:39:be:
25:34:52:79:28:93:17:4f:db:23:11:89:ec:03:b3:67:2a:50:
b7:2d:3c:a0:87:5d:05:14:43:80:a9:60:99:cb:d3:29:22:50:
e3:49:a3:85:78:d4:15:8e:f0:29:d1:c4:b0:9a:96:78:5d:0e:
de:48:1f:35:96:7f:8d:fd:c5:d6:12:3c:78:82:58:5c:f0:69:
d8:ae:95:19:92:43:1a:89:e2:9c:3c:32:9c:a1:6f:0b:22:70:
20:d6:18:35:cd:91:ff:52:bb:1a:6a:7d:ad:6c:63:e4:54:19:
4d:16:f1:2e:6f:3d:78:46:d7:88:13:5a:65:2c:36:38:a5:7b:
53:e7:28:31:ac:d6:a7:1f:77:08:52:d1:41:3b:c0:1c:82:df:
e9:dd:90:1a:84:c1:95:e6:0c:5e:c9:75:93:c9:b9:ff:d6:e4:
11:6a:09:71:31:06:d7:20:1c:ae:85:e6:7e:2f:e0:8e:4a:31:
ca:19:bd:fa:02:7f:9c:0c:1a:c3:69:98:7e:25:97:52:ea:c4:
b8:58:7e:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+prGH8xztRVQABGZQxFAUtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMTk2Yzg5ZTU1NGRiZTQ3NzQ1MjI3NTk5MDZlMjU4MWEx
NzQ2OTQwHhcNMjYwNzI4MTcwMTE0WhcNMjYwNzI5MTcwMTE0WjAzMTEwLwYDVQQD
Eyg3NzU2YTVjODVjNmY2MjY4NWM4NGFhMzZhNzk0ZDU0NDkwN2Q1OTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ncpytr1RSawZPBck1cWQclqBBxY
WFo3sfjJV7hjAD3RD/vEZhIDUfeCHBd0G+0B6k3f+koZpuQ4jO5bBs0m8DjHek8W
9royw1iKQg2JZC3DaEir0OegBSVV4bCTa4MWs4qqiEOdo+Qly7nRwx8vIGqQdCpK
tTHfll63mbkL79iP4glmnWnCT0RSaIUnHgRRZzYvCQGfarqCXNkMu2aZjZJNeKsm
NhyTpzJMuxg9bpAxGi5doIh6Lq2QviXU/y1mWx8cdUcP3FyzVkKaKXA/6ri6QoSz
SEbrfV9+ZWEKqekwxDN388myCit3t1lHHhAorY2AAZqnLP6QsFg8d8lxBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHdWpchcb2JoXISqNqeU1USQfVkyMB8GA1UdIwQY
MBaAFAMZbInlVNvkd0UidZkG4lgaF0aUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXhsc2llVlUyLVIzUlNKMW1RYmlXQm9YUnBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi85ZWQ3NmItMzVhNi00YTlkLTlmYTYt
ODUxN2E4ZjM1NWFlLzEvQXhsc2llVlUyLVIzUlNKMW1RYmlXQm9YUnBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi85ZWQ3NmItMzVhNi00YTlkLTlmYTYtODUxN2E4ZjM1NWFl
LzEvQXhsc2llVlUyLVIzUlNKMW1RYmlXQm9YUnBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYKt6nWDX
QjRj48PwXeqb61q7VUqP76IcWyR/E0vGB3FfRULfY1xOidkv2YgtuyTlA2n1EDm+
JTRSeSiTF0/bIxGJ7AOzZypQty08oIddBRRDgKlgmcvTKSJQ40mjhXjUFY7wKdHE
sJqWeF0O3kgfNZZ/jf3F1hI8eIJYXPBp2K6VGZJDGoninDwynKFvCyJwINYYNc2R
/1K7Gmp9rWxj5FQZTRbxLm89eEbXiBNaZSw2OKV7U+coMazWpx93CFLRQTvAHILf
6d2QGoTBleYMXsl1k8m5/9bkEWoJcTEG1yAcroXmfi/gjkoxyhm9+gJ/nAwaw2mY
fiWXUurEuFh+7Q==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:01:41 2026 by rpki-client