Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft
File: axnRvKx1IxLsTeb1vTmszjKra9Y.mft (raw, json)
Hash identifier: WVVeKl/dpuvFBqc2AydulLRntJWmHZbxWPm93ztIbug=
Subject key identifier: B9:FA:A7:EC:90:A3:96:EA:79:5D:3F:4C:D4:A0:D2:9A:61:99:C7:77
Authority key identifier: 6B:19:D1:BC:AC:75:23:12:EC:4D:E6:F5:BD:39:AC:CE:32:AB:6B:D6
Certificate issuer: /CN=6b19d1bcac752312ec4de6f5bd39acce32ab6bd6
Certificate serial: 019FACE49AAD5D716ADD5BC282B352640207
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axnRvKx1IxLsTeb1vTmszjKra9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft
Manifest number: 17CA
Signing time: Wed 29 Jul 2026 08:01:30 +0000
Manifest this update: Wed 29 Jul 2026 08:01:30 +0000
Manifest next update: Thu 30 Jul 2026 08:01:30 +0000
Files and hashes: 1: URIXovot20BpTLwGW5N6pOlLgy4.roa (hash: wvN6iNM+Z86YXZPPdosS4TWVox9d1Df0z+4sQXyWazA=)
2: axnRvKx1IxLsTeb1vTmszjKra9Y.crl (hash: GeOPMSfCMxNefM0CRTSvL9tYNHvLYdT1TlthVoH0Lsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/axnRvKx1IxLsTeb1vTmszjKra9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e4:9a:ad:5d:71:6a:dd:5b:c2:82:b3:52:64:02:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b19d1bcac752312ec4de6f5bd39acce32ab6bd6
Validity
Not Before: Jul 29 08:01:30 2026 GMT
Not After : Jul 30 08:01:30 2026 GMT
Subject: CN=b9faa7ec90a396ea795d3f4cd4a0d29a6199c777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3f:7d:98:12:2d:51:9d:f8:e2:b6:6d:56:b0:
24:95:77:0a:28:5c:37:7a:fc:5d:99:33:f9:b9:e0:
9a:ce:7c:3a:ca:31:3c:31:56:22:97:65:b5:0c:95:
c0:c6:fb:7e:5c:63:fc:1c:06:45:67:87:3a:f9:e2:
06:7b:3c:dd:e3:2d:37:8e:f1:6c:e8:c4:0f:e4:13:
0d:bf:3e:61:bd:81:f0:f6:40:91:cd:d3:da:4b:ab:
79:7a:be:90:85:2d:a3:0b:45:09:d8:d7:1b:36:88:
9e:5c:a7:82:a3:26:ff:f4:f1:67:97:c8:0c:90:a8:
98:7a:12:f7:2e:a1:33:cd:72:0d:ff:e0:6e:cd:4b:
0f:9e:a2:54:5d:ef:f9:1a:d3:16:98:c2:c7:06:37:
aa:d7:ca:99:32:84:17:44:74:1b:0d:86:5c:22:fa:
86:39:52:26:3c:eb:a7:26:26:5b:24:63:cc:8f:a1:
99:41:09:d8:e7:31:60:6a:ab:d9:e0:3c:82:ed:e5:
3f:3c:33:ad:34:b3:3e:a9:f1:d2:cb:bb:c5:e6:1d:
74:77:ca:00:09:0f:45:63:38:8c:36:ab:b8:e0:21:
69:87:74:3e:d3:b9:eb:70:3a:47:f3:f3:76:49:36:
91:70:bd:be:49:97:2a:3d:d5:84:2e:66:a6:d3:41:
8d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:FA:A7:EC:90:A3:96:EA:79:5D:3F:4C:D4:A0:D2:9A:61:99:C7:77
X509v3 Authority Key Identifier:
keyid:6B:19:D1:BC:AC:75:23:12:EC:4D:E6:F5:BD:39:AC:CE:32:AB:6B:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axnRvKx1IxLsTeb1vTmszjKra9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:6c:f7:3f:4d:3b:ad:56:0c:28:d7:f7:9e:37:47:7c:bd:9b:
56:a1:f6:a1:a7:20:eb:4b:51:ca:50:76:94:00:d6:94:63:d9:
ce:ff:28:59:dc:0e:6a:2c:68:2b:f9:c0:e6:bb:8d:82:a8:1c:
cc:b1:2a:91:27:ea:8e:1b:4e:57:53:82:c3:3b:88:4c:57:b7:
ae:ae:e8:78:d6:b2:30:73:13:8e:67:04:8f:6e:61:39:c9:bf:
b7:46:c7:c6:62:e8:8f:70:f1:ee:a3:1e:7d:9c:4d:61:db:d8:
83:f3:bf:6a:e4:5a:f2:06:99:e0:2a:8b:4b:d3:ee:41:7b:b0:
59:d2:ad:bc:90:21:3a:c8:29:5a:2c:34:da:40:7c:61:a9:73:
32:99:df:ce:d9:b2:49:79:0a:67:4b:e6:47:2b:9c:63:29:eb:
0f:c6:5a:e8:a8:20:2d:70:fb:20:28:c8:0b:8a:7e:7e:19:47:
93:1c:97:f7:3b:f6:fb:86:d4:ea:3e:eb:aa:15:2a:b6:fa:4c:
b1:d5:f6:ea:de:8c:de:b8:04:93:8c:a4:7d:44:ca:36:d7:0f:
25:89:e0:42:b2:bf:c5:37:e9:a0:1d:a4:d6:e8:24:74:3e:4e:
17:65:a4:5d:5d:fb:2a:40:f2:5f:67:0d:bc:c9:17:af:51:54:
92:6f:68:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:01:21 2026 by rpki-client