Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
File: AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft (raw, json)
Hash identifier: Haq3kRZg9or7FP8yp7N4gX1qzDZwfDgiPnxOUFNFcgg=
Subject key identifier: 5E:06:95:9C:4D:31:40:6C:95:79:27:AA:8D:45:A3:FF:66:E4:EC:BF
Authority key identifier: 03:19:6C:89:E5:54:DB:E4:77:45:22:75:99:06:E2:58:1A:17:46:94
Certificate issuer: /CN=03196c89e554dbe4774522759906e2581a174694
Certificate serial: 01A0C1B2074F55B54F3D77113BD8B1A7110B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
Manifest number: 1590
Signing time: Mon 21 Sep 2026 02:01:04 +0000
Manifest this update: Mon 21 Sep 2026 02:01:04 +0000
Manifest next update: Tue 22 Sep 2026 02:01:04 +0000
Files and hashes: 1: 25mxXJh2G2nCKlFkslbkjTaimw0.roa (hash: gLUrLyzzoWyt075KRiHPrRM9zqSzPbD5AydPzwej0ts=)
2: AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl (hash: alRkOoaPSP6D8wDFrkpBCTbE/vHsXbV7TIPRS9/zpyw=)
3: RYNiV948DLV1Ez8aZtWra-uSAIU.roa (hash: iZJYlFMS/Nvt7xPVWg2S8RzagBzGleb0zYSMcRXDFSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 02:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:b2:07:4f:55:b5:4f:3d:77:11:3b:d8:b1:a7:11:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03196c89e554dbe4774522759906e2581a174694
Validity
Not Before: Sep 21 02:01:04 2026 GMT
Not After : Sep 22 02:01:04 2026 GMT
Subject: CN=5e06959c4d31406c957927aa8d45a3ff66e4ecbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e0:49:cc:13:a0:4c:f0:c1:a9:1e:5a:10:0d:
47:9e:b5:d0:38:f6:d3:cf:d2:98:3e:9f:04:7d:65:
90:ec:58:da:a9:cd:ce:17:fa:e2:e4:11:e0:31:c4:
2e:3f:ff:bf:f0:09:06:c9:81:da:76:7c:9f:55:48:
fd:d8:59:0e:5a:51:ec:70:df:67:a8:71:84:15:ac:
4b:a1:6f:62:0c:9c:47:cc:b1:e9:7a:c4:e5:83:57:
f2:f0:cb:3e:a3:36:6a:b8:62:8b:b6:ae:72:f9:db:
19:63:3c:56:65:6d:53:ec:80:49:1a:69:15:c7:17:
9c:08:20:d5:3c:21:b4:e4:71:ac:d7:69:e0:2c:55:
69:13:22:d7:de:2c:0d:8a:d3:ff:bf:f4:1c:1f:4f:
2e:5a:55:1e:f4:b8:b2:e4:db:4e:7d:a9:03:af:d3:
96:c9:d4:d3:5f:0c:a7:29:9a:f7:70:5a:b8:ec:3e:
69:5f:01:b0:95:bb:5d:63:95:1c:d6:40:9c:3b:9d:
75:74:ad:39:69:9c:33:fd:1c:80:4e:db:7b:1a:24:
56:eb:47:a0:b3:fc:62:15:2f:9a:18:c7:7d:e5:76:
a7:11:50:b5:bd:71:8e:49:dd:02:59:e5:08:48:f2:
bb:19:22:3e:3e:68:03:ad:e3:0d:d0:f6:41:08:a7:
39:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:06:95:9C:4D:31:40:6C:95:79:27:AA:8D:45:A3:FF:66:E4:EC:BF
X509v3 Authority Key Identifier:
keyid:03:19:6C:89:E5:54:DB:E4:77:45:22:75:99:06:E2:58:1A:17:46:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:16:98:66:d9:f2:db:e9:7b:b4:f8:73:56:62:b3:ad:32:bd:
ce:fe:c0:a7:9f:89:6f:6f:f0:8b:98:84:90:84:55:ed:1f:a0:
06:2c:e5:b3:6c:47:a2:20:7d:dd:28:a5:b7:9a:33:5b:92:6a:
2a:7a:17:8b:2b:72:a3:51:dc:cc:bb:66:07:5b:fb:08:85:62:
98:01:04:58:4c:95:e9:ad:1d:bd:58:49:e2:93:9f:19:2d:df:
6c:26:12:4f:ad:12:22:d1:35:e0:10:0e:db:5a:f7:1f:23:11:
90:c7:15:22:8e:5d:32:15:24:2b:ff:6d:74:ca:3b:77:f1:32:
3e:6c:a7:91:a0:9f:09:50:8b:66:fe:e1:3a:20:2f:a7:23:dd:
a5:4d:02:0b:1e:1a:1f:8a:c7:4f:5d:dc:fd:f1:2b:cf:de:e8:
06:65:c6:5a:07:6b:38:64:04:f5:fa:c3:a2:c8:c7:ad:6d:68:
5c:9b:09:9b:a5:80:74:e7:80:78:c3:fb:86:fa:17:33:f4:04:
66:91:83:22:d3:cf:7e:51:eb:a3:6e:46:68:6c:53:ce:a6:1e:
9e:cf:6d:58:8a:b4:89:6b:e1:a4:6b:ca:57:2b:23:ea:4c:da:
85:78:25:90:c2:aa:1e:52:f4:c1:21:37:4e:48:89:7d:39:bf:
85:40:43:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:05:47 2026 by rpki-client