Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft
File: axnRvKx1IxLsTeb1vTmszjKra9Y.mft (raw, json)
Hash identifier: QZl1qAjZ5Jbd3b6THNQPAXcufgui4xpvBWPkafUD8tQ=
Subject key identifier: 1D:11:D5:67:E7:15:DC:F2:18:54:B1:6B:05:2A:DD:AE:21:58:A6:BE
Authority key identifier: 6B:19:D1:BC:AC:75:23:12:EC:4D:E6:F5:BD:39:AC:CE:32:AB:6B:D6
Certificate issuer: /CN=6b19d1bcac752312ec4de6f5bd39acce32ab6bd6
Certificate serial: 019CAA584347A5EE65F9C9C964CC4C677DA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axnRvKx1IxLsTeb1vTmszjKra9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft
Manifest number: 163B
Signing time: Sun 01 Mar 2026 17:00:36 +0000
Manifest this update: Sun 01 Mar 2026 17:00:36 +0000
Manifest next update: Mon 02 Mar 2026 17:00:36 +0000
Files and hashes: 1: URIXovot20BpTLwGW5N6pOlLgy4.roa (hash: wvN6iNM+Z86YXZPPdosS4TWVox9d1Df0z+4sQXyWazA=)
2: axnRvKx1IxLsTeb1vTmszjKra9Y.crl (hash: MhjZrHgSJ/lHqCk0z98KXUAZTnUVLJsdpHbMFB7uiuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/axnRvKx1IxLsTeb1vTmszjKra9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:43:47:a5:ee:65:f9:c9:c9:64:cc:4c:67:7d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b19d1bcac752312ec4de6f5bd39acce32ab6bd6
Validity
Not Before: Mar 1 17:00:36 2026 GMT
Not After : Mar 2 17:00:36 2026 GMT
Subject: CN=1d11d567e715dcf21854b16b052addae2158a6be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2a:87:a2:08:a5:b4:6f:6f:8f:65:0f:53:4d:
63:86:34:6d:e7:fd:10:0d:27:55:e8:ca:5c:70:f3:
c8:96:50:6c:11:3f:73:17:48:b2:d3:42:af:fb:fc:
34:dd:bf:aa:59:8d:17:da:21:6f:6e:71:d9:00:d8:
06:eb:49:52:b9:78:8a:6e:41:2c:86:7a:75:42:d7:
53:9f:4e:f5:dd:ab:bd:ea:77:9e:59:19:36:b4:c4:
53:eb:7b:5d:26:da:a9:05:f5:9a:5e:6e:13:60:61:
9d:4e:da:eb:15:09:b4:06:59:1d:4e:58:8e:f1:f7:
68:da:ee:37:86:f1:08:e9:dd:9d:06:de:48:74:69:
a9:b9:df:23:d8:17:4b:f9:38:db:c4:07:2e:e8:e5:
0d:58:81:a8:37:a4:18:2f:8c:ac:31:32:ae:f2:f6:
31:c0:34:77:c9:04:2f:5f:28:52:c5:e9:64:db:27:
a5:19:bd:32:18:3c:92:2e:09:b7:1c:79:c2:34:1c:
1b:0b:c0:fa:2f:19:28:b3:b3:d8:35:82:28:cc:e7:
d6:3f:40:8e:b8:f2:29:2c:59:43:de:c1:dd:68:be:
a7:18:bc:b8:a0:d9:83:20:d7:2d:58:8b:8b:0b:d1:
e9:15:9d:ea:16:84:3c:9a:94:a5:c5:d0:cd:74:df:
8c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:11:D5:67:E7:15:DC:F2:18:54:B1:6B:05:2A:DD:AE:21:58:A6:BE
X509v3 Authority Key Identifier:
keyid:6B:19:D1:BC:AC:75:23:12:EC:4D:E6:F5:BD:39:AC:CE:32:AB:6B:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axnRvKx1IxLsTeb1vTmszjKra9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:33:b5:85:06:ad:83:e8:86:eb:5a:93:42:50:bf:7c:fb:c0:
ab:97:4c:01:ae:cc:9d:cb:f5:0a:9b:11:6a:f2:bd:d7:c2:d0:
8c:5f:f4:b4:0a:d9:c6:dc:74:40:2b:95:b8:a3:ea:32:29:3a:
b8:63:7e:93:b4:fb:e7:43:b6:69:fb:38:54:ec:36:24:44:b0:
d3:5d:d0:56:5e:2f:51:7d:88:2c:1c:15:ce:c2:dd:39:ab:0b:
f6:8f:8e:31:8a:4a:e5:72:c4:f1:51:92:af:02:a2:92:1f:67:
db:06:0b:05:fe:18:70:cc:e7:6d:ef:3e:ad:39:9e:6f:c8:b5:
69:b3:e5:17:8b:de:65:0f:69:ea:c4:4a:94:83:78:31:0c:2d:
2b:97:4d:3e:da:a5:8a:e3:23:8d:c3:6d:20:47:2a:2d:26:c1:
11:08:23:1a:d0:6f:d6:32:5e:8e:11:1d:55:fa:46:36:e2:75:
f7:cf:53:c5:2c:32:37:38:8f:7a:4f:7e:7d:b1:b1:37:a0:89:
8f:8d:43:d3:59:aa:dd:db:10:a4:f2:23:b8:60:15:99:31:28:
17:82:5c:35:8c:e6:05:48:91:d5:77:27:7b:7b:9f:1f:98:86:
d8:1c:03:3a:35:b0:da:6d:14:d1:1b:00:3a:8c:51:bb:1f:f6:
39:ff:be:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:30:05 2026 by rpki-client