Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
File: AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft (raw, json)
Hash identifier: 1N8p8syVqZjDEcc2dJviJV+ZkdUTEnlYmpI2Q8J132M=
Subject key identifier: 31:C4:79:49:01:9E:B2:0E:83:71:C0:D4:B9:7F:68:CB:26:5B:9A:54
Authority key identifier: 03:19:6C:89:E5:54:DB:E4:77:45:22:75:99:06:E2:58:1A:17:46:94
Certificate issuer: /CN=03196c89e554dbe4774522759906e2581a174694
Certificate serial: 019D988622893A0D0B39500A381B3B324BB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
Manifest number: 13ED
Signing time: Thu 16 Apr 2026 23:00:20 +0000
Manifest this update: Thu 16 Apr 2026 23:00:20 +0000
Manifest next update: Fri 17 Apr 2026 23:00:20 +0000
Files and hashes: 1: 25mxXJh2G2nCKlFkslbkjTaimw0.roa (hash: gLUrLyzzoWyt075KRiHPrRM9zqSzPbD5AydPzwej0ts=)
2: AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl (hash: k7XcmJMQz5T9GS/U7XGxLk9/iJDh0HT+KB7keKMZRtc=)
3: RYNiV948DLV1Ez8aZtWra-uSAIU.roa (hash: iZJYlFMS/Nvt7xPVWg2S8RzagBzGleb0zYSMcRXDFSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:22:89:3a:0d:0b:39:50:0a:38:1b:3b:32:4b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03196c89e554dbe4774522759906e2581a174694
Validity
Not Before: Apr 16 23:00:20 2026 GMT
Not After : Apr 17 23:00:20 2026 GMT
Subject: CN=31c47949019eb20e8371c0d4b97f68cb265b9a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3d:2a:c3:96:9c:db:5e:04:5a:0d:73:f6:0f:
ca:f3:13:ec:ad:eb:aa:02:1c:eb:15:7b:69:1f:82:
09:dc:27:d2:54:83:21:c2:33:60:cd:e0:dd:d7:ce:
cc:71:23:6e:13:ec:c1:95:75:16:db:09:ee:8f:0a:
32:88:a7:e9:25:ea:e4:b4:d3:23:28:6c:33:f0:ec:
86:7b:e5:82:96:40:2f:77:07:f9:aa:6f:74:8f:bf:
45:b7:39:5b:e1:41:fa:ca:f2:da:85:41:0e:b3:44:
45:d3:3e:41:03:fa:bc:ee:6a:14:72:92:86:33:4f:
6e:6e:ae:78:3a:f7:7e:af:52:a8:ed:a1:0c:08:67:
32:07:81:ed:46:3b:4c:8d:36:e8:4e:3d:4c:22:40:
95:ec:af:c1:98:66:ec:7b:d1:a0:45:e6:f6:cc:6f:
5c:21:12:4e:c8:33:06:88:37:70:9d:fd:54:ba:90:
46:df:37:a6:cb:b1:2b:e7:74:4f:e8:7c:b6:c5:e5:
56:be:0b:c2:d5:51:d0:84:e4:f2:83:56:69:aa:bc:
0b:51:af:a6:23:20:10:96:32:b6:a5:77:d0:5a:ec:
2a:e9:43:bf:4b:0d:23:a4:ac:67:92:b7:77:f5:d3:
a4:7c:65:ad:fb:c5:1d:45:dd:8d:9c:74:ca:62:5d:
b9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C4:79:49:01:9E:B2:0E:83:71:C0:D4:B9:7F:68:CB:26:5B:9A:54
X509v3 Authority Key Identifier:
keyid:03:19:6C:89:E5:54:DB:E4:77:45:22:75:99:06:E2:58:1A:17:46:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:3c:91:ad:ab:80:9f:8f:8c:3c:a2:e4:d1:44:7b:f8:59:e9:
63:cd:50:32:d8:26:23:87:5a:fd:dc:17:83:a5:b5:9e:2a:b8:
a1:e1:a3:f4:dd:8b:4b:b5:97:d8:31:45:20:3f:86:35:a1:50:
a5:24:25:26:ff:ac:04:5b:46:59:57:fd:5b:c1:68:9e:43:4d:
a9:a4:b6:4c:48:5a:8c:82:23:25:e1:de:4a:f3:7f:25:14:49:
36:57:61:08:bb:0a:e3:2b:d4:13:77:13:1f:ae:4c:1f:3c:55:
0d:a6:61:05:37:68:f8:71:cd:0b:c2:30:79:43:23:e9:87:7d:
a4:cc:d7:7d:57:ea:90:ed:17:ae:e2:b8:a4:5a:93:52:ce:f4:
fb:c9:5c:a9:64:49:d6:31:c7:02:4a:79:71:e1:c9:1e:a2:4c:
f6:3e:80:c3:e8:6f:43:5b:fa:a2:62:37:67:a8:85:d8:da:ab:
5e:27:ec:6d:a6:b3:10:fa:ec:11:69:19:a6:d6:9b:90:89:51:
a3:f7:32:46:6e:34:4d:26:2a:4c:8c:b1:61:d6:3a:b3:a1:d7:
57:d4:b5:8c:bb:f2:0c:f1:66:6d:10:0b:2d:12:8c:9a:9b:3a:
a1:c8:85:46:0a:ba:2f:e0:ee:90:5d:78:33:9a:5c:96:f9:f5:
5f:60:7c:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YhiKJOg0LOVAKOBs7Mku1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMTk2Yzg5ZTU1NGRiZTQ3NzQ1MjI3NTk5MDZlMjU4MWEx
NzQ2OTQwHhcNMjYwNDE2MjMwMDIwWhcNMjYwNDE3MjMwMDIwWjAzMTEwLwYDVQQD
EygzMWM0Nzk0OTAxOWViMjBlODM3MWMwZDRiOTdmNjhjYjI2NWI5YTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuD0qw5ac214EWg1z9g/K8xPsreuq
AhzrFXtpH4IJ3CfSVIMhwjNgzeDd187McSNuE+zBlXUW2wnujwoyiKfpJerktNMj
KGwz8OyGe+WClkAvdwf5qm90j79Ftzlb4UH6yvLahUEOs0RF0z5BA/q87moUcpKG
M09ubq54Ovd+r1Ko7aEMCGcyB4HtRjtMjTboTj1MIkCV7K/BmGbse9GgReb2zG9c
IRJOyDMGiDdwnf1UupBG3zemy7Er53RP6Hy2xeVWvgvC1VHQhOTyg1ZpqrwLUa+m
IyAQljK2pXfQWuwq6UO/Sw0jpKxnkrd39dOkfGWt+8UdRd2NnHTKYl25QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDHEeUkBnrIOg3HA1Ll/aMsmW5pUMB8GA1UdIwQY
MBaAFAMZbInlVNvkd0UidZkG4lgaF0aUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXhsc2llVlUyLVIzUlNKMW1RYmlXQm9YUnBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi85ZWQ3NmItMzVhNi00YTlkLTlmYTYt
ODUxN2E4ZjM1NWFlLzEvQXhsc2llVlUyLVIzUlNKMW1RYmlXQm9YUnBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi85ZWQ3NmItMzVhNi00YTlkLTlmYTYtODUxN2E4ZjM1NWFl
LzEvQXhsc2llVlUyLVIzUlNKMW1RYmlXQm9YUnBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAejyRrauA
n4+MPKLk0UR7+FnpY81QMtgmI4da/dwXg6W1niq4oeGj9N2LS7WX2DFFID+GNaFQ
pSQlJv+sBFtGWVf9W8FonkNNqaS2TEhajIIjJeHeSvN/JRRJNldhCLsK4yvUE3cT
H65MHzxVDaZhBTdo+HHNC8IweUMj6Yd9pMzXfVfqkO0XruK4pFqTUs70+8lcqWRJ
1jHHAkp5ceHJHqJM9j6Aw+hvQ1v6omI3Z6iF2NqrXifsbaazEPrsEWkZptabkIlR
o/cyRm40TSYqTIyxYdY6s6HXV9S1jLvyDPFmbRALLRKMmps6ociFRgq6L+DukF14
M5pclvn1X2B8PQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:39:37 2026 by rpki-client