Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
File: AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft (raw, json)
Hash identifier: Zpg/eUMCZ+5Ltw4VAdOdS12yphLvsvjpXXxXCswrcTw=
Subject key identifier: 43:A2:C2:F1:41:E8:23:37:32:22:08:E5:65:A1:C6:1C:45:88:C5:2F
Authority key identifier: 03:19:6C:89:E5:54:DB:E4:77:45:22:75:99:06:E2:58:1A:17:46:94
Certificate issuer: /CN=03196c89e554dbe4774522759906e2581a174694
Certificate serial: 019CACEB96DC97D2AE87059876AFF53D261A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
Manifest number: 1373
Signing time: Mon 02 Mar 2026 05:00:46 +0000
Manifest this update: Mon 02 Mar 2026 05:00:46 +0000
Manifest next update: Tue 03 Mar 2026 05:00:46 +0000
Files and hashes: 1: 25mxXJh2G2nCKlFkslbkjTaimw0.roa (hash: gLUrLyzzoWyt075KRiHPrRM9zqSzPbD5AydPzwej0ts=)
2: AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl (hash: WKqLfPYQf+TdT/1YLQGE5c50ShNFirXFfY2M/UtYt6I=)
3: RYNiV948DLV1Ez8aZtWra-uSAIU.roa (hash: iZJYlFMS/Nvt7xPVWg2S8RzagBzGleb0zYSMcRXDFSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:96:dc:97:d2:ae:87:05:98:76:af:f5:3d:26:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03196c89e554dbe4774522759906e2581a174694
Validity
Not Before: Mar 2 05:00:46 2026 GMT
Not After : Mar 3 05:00:46 2026 GMT
Subject: CN=43a2c2f141e82337322208e565a1c61c4588c52f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:62:2c:00:54:a0:1a:60:45:82:4b:2d:db:1e:
fb:3d:a6:71:fb:3b:f6:45:3b:5a:72:43:23:f5:2e:
e9:6e:f5:fb:7c:ae:3a:1e:89:7b:1b:61:e4:54:d3:
e4:35:27:da:bb:44:64:59:12:df:d6:a7:2a:6e:9e:
27:3c:ce:28:9d:55:74:3b:73:1c:b6:93:45:30:2d:
e7:dc:1f:c9:36:ce:8f:aa:57:96:c2:31:9e:ac:7e:
7f:42:3b:8d:aa:5e:c3:e0:19:61:75:fb:33:8b:c0:
20:49:a9:91:50:1f:32:bc:45:80:18:19:01:09:82:
84:ee:c3:c9:2e:7a:92:5c:e3:3d:dd:7c:e2:fc:e1:
ee:c5:ec:92:49:d4:f1:5a:a8:5a:bd:72:97:c7:dc:
73:0a:22:41:04:2b:ff:91:ad:89:a4:4c:d4:04:1a:
de:10:58:d0:f0:93:27:9c:f3:4f:6a:69:65:0e:ed:
f2:d0:32:57:66:4c:a3:de:7a:01:5a:66:b5:5b:25:
04:ae:d8:73:8e:b1:a7:9f:75:4e:6a:d5:72:21:59:
2f:e8:7f:e1:06:45:59:da:a4:54:d1:44:78:79:44:
fa:eb:72:5a:ce:e8:2b:23:9e:d4:b4:9c:31:84:2e:
4e:c1:1e:7b:b2:1f:51:94:9a:76:98:9d:58:13:cd:
8d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A2:C2:F1:41:E8:23:37:32:22:08:E5:65:A1:C6:1C:45:88:C5:2F
X509v3 Authority Key Identifier:
keyid:03:19:6C:89:E5:54:DB:E4:77:45:22:75:99:06:E2:58:1A:17:46:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:9a:96:16:08:9b:42:49:c8:bf:dd:ce:38:bc:7a:62:5c:55:
4f:9e:5d:f5:64:bb:de:f1:cf:27:f1:db:a8:df:21:86:eb:02:
f8:22:32:65:26:b9:c4:d7:07:8c:39:c7:43:4c:df:0f:9b:3b:
20:cf:22:36:27:31:00:d3:f0:c1:9f:60:9e:97:8a:47:25:d6:
1c:07:be:bc:72:d3:93:0b:6f:84:6c:18:4c:bf:8a:c0:92:e5:
32:2b:11:21:fb:dc:ad:2e:e0:6c:99:80:fe:73:74:b8:d1:7d:
89:94:f7:b0:35:f0:d5:f7:02:14:70:8e:30:90:27:bf:fe:f7:
78:ee:64:d8:45:a9:0b:82:35:b6:1f:1f:11:d1:17:b4:3c:8f:
ac:f0:e2:08:41:bf:fe:c8:2a:b4:9c:67:bd:41:60:49:76:2f:
fc:b5:23:99:6c:3c:90:1c:88:45:bc:aa:bd:3f:12:65:bb:ee:
27:fd:3c:fc:ff:93:b9:09:35:c8:aa:40:db:8f:53:c5:b6:d4:
35:8f:82:58:a4:63:0c:49:12:2b:35:b2:2f:b5:94:4b:99:3f:
24:03:59:c7:e6:8c:d7:52:67:fb:73:91:df:0e:17:fb:22:80:
8c:a5:43:42:3e:13:0b:eb:54:85:0c:72:85:d2:9b:cc:f6:86:
92:70:0f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:42:26 2026 by rpki-client