Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
File: AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft (raw, json)
Hash identifier: Lwso5t1ireVp0fnd4Mht2PPyP9BLANc3I0lBiqD96AE=
Subject key identifier: EA:75:15:71:91:0F:BA:AA:A9:D0:39:6A:86:B7:24:9D:0F:26:D9:36
Authority key identifier: 03:19:6C:89:E5:54:DB:E4:77:45:22:75:99:06:E2:58:1A:17:46:94
Certificate issuer: /CN=03196c89e554dbe4774522759906e2581a174694
Certificate serial: 01A1C09C9D161596A1102A4BA2F8242011F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
Manifest number: 1614
Signing time: Mon 09 Nov 2026 14:00:51 +0000
Manifest this update: Mon 09 Nov 2026 14:00:51 +0000
Manifest next update: Tue 10 Nov 2026 14:00:51 +0000
Files and hashes: 1: 25mxXJh2G2nCKlFkslbkjTaimw0.roa (hash: gLUrLyzzoWyt075KRiHPrRM9zqSzPbD5AydPzwej0ts=)
2: AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl (hash: sQPc0EupAwMvqA8Y0gILHP4L4/Gs+TQFxFPWf5Xpw68=)
3: RYNiV948DLV1Ez8aZtWra-uSAIU.roa (hash: iZJYlFMS/Nvt7xPVWg2S8RzagBzGleb0zYSMcRXDFSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c0:9c:9d:16:15:96:a1:10:2a:4b:a2:f8:24:20:11:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03196c89e554dbe4774522759906e2581a174694
Validity
Not Before: Nov 9 14:00:51 2026 GMT
Not After : Nov 10 14:00:51 2026 GMT
Subject: CN=ea751571910fbaaaa9d0396a86b7249d0f26d936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:50:48:b7:10:44:5b:41:c5:a3:b8:a4:e2:c2:
39:23:b0:c6:1c:38:0d:f0:bf:0a:19:e1:ba:8e:0d:
45:21:79:40:6d:34:a5:58:60:2e:4a:c6:02:7f:d0:
2b:a4:80:00:05:91:8a:9f:79:39:64:6b:54:92:8c:
cd:3f:71:b0:cd:9d:45:ec:75:60:05:c9:d7:f8:bc:
2c:b5:97:fd:ae:e5:59:a4:c5:47:a2:5f:26:ec:68:
e8:3f:87:77:4f:03:bb:33:3a:5e:57:b3:26:be:34:
cc:66:69:43:65:35:a8:e0:6f:13:f2:14:12:f4:60:
ab:73:d2:83:c2:a1:fe:c9:e2:07:c2:7e:66:1b:93:
07:39:c7:4f:e3:c7:4c:ea:26:0f:51:74:76:5e:89:
41:8c:fc:b9:a9:b3:ba:0c:e7:46:06:6b:46:2a:e3:
31:85:a8:78:4b:db:51:77:56:d8:93:40:d2:15:09:
87:4f:ee:c3:65:07:67:64:a2:d8:22:ff:6a:bf:91:
96:ea:97:99:5c:ee:49:88:c9:52:d7:a9:1c:db:d9:
1f:ef:78:18:8f:58:d9:05:1a:19:54:35:c0:a4:51:
ae:17:ec:f2:f1:2c:43:76:28:66:83:fe:17:7c:57:
a8:83:7b:8e:73:0b:8b:c3:0d:93:c3:c6:91:0d:76:
57:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:75:15:71:91:0F:BA:AA:A9:D0:39:6A:86:B7:24:9D:0F:26:D9:36
X509v3 Authority Key Identifier:
keyid:03:19:6C:89:E5:54:DB:E4:77:45:22:75:99:06:E2:58:1A:17:46:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:d2:49:a8:a2:f2:cf:c5:ba:e3:7d:bb:98:31:a6:07:28:6e:
9f:07:82:81:6e:34:fa:0f:69:27:84:c4:59:26:ed:a5:39:21:
93:b2:a1:66:21:6e:17:3d:68:58:df:57:18:08:3f:75:4b:ea:
b6:aa:7a:9c:04:ef:48:79:af:09:42:cd:91:c5:8e:00:2f:19:
77:75:1a:c0:c3:e1:93:cc:17:6c:d0:66:81:d0:80:c9:45:50:
b5:54:13:65:9c:32:01:02:71:e0:73:62:44:24:11:35:87:56:
35:42:4e:04:d5:e4:a2:6d:d9:6d:8c:07:eb:6c:e3:06:f9:21:
9b:f4:ae:48:76:08:90:0b:79:29:8c:fd:11:a6:c0:28:4b:43:
ed:0a:60:4e:6f:bf:95:e6:79:9f:9c:31:31:da:9a:09:60:27:
58:87:01:39:5e:6c:ab:ed:34:b9:f7:b4:bc:54:91:a5:55:7f:
7b:11:a9:33:b5:31:ff:41:fd:7a:a0:68:90:0f:27:66:e6:da:
c7:78:3e:37:f0:7f:c6:03:e1:44:94:7a:d5:71:c4:c9:75:1c:
53:81:38:e1:63:61:83:61:25:66:9f:cc:f2:28:ed:65:bf:85:
9e:f8:11:1b:73:df:43:7a:9a:9c:fe:6d:de:24:04:de:1b:de:
51:c3:23:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 20:01:23 2026 by rpki-client