Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
File: AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft (raw, json)
Hash identifier: LM/5okx5dj9qXEJveQU1oiD7DBa+b8hrLQBgHni3taM=
Subject key identifier: F4:D8:6E:0B:BA:94:55:7C:3F:3F:4B:CB:92:D7:F0:B6:CF:B6:F9:51
Authority key identifier: 01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
Certificate issuer: /CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Certificate serial: 019D9AE345E3D3AFCA0F2E50A9C1E8ACC3F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
Manifest number: 18DE
Signing time: Fri 17 Apr 2026 10:01:18 +0000
Manifest this update: Fri 17 Apr 2026 10:01:18 +0000
Manifest next update: Sat 18 Apr 2026 10:01:18 +0000
Files and hashes: 1: 0CvIXoHsvIs1B_YOF4uDh9JpSxE.roa (hash: 91sFZp4Lna3qg8mUoA4c/ZNk5BvTimCG0r/38G4vor4=)
2: 0mnkoAs85-mIhHxZL8fHwKRjWRc.roa (hash: eichc48YsRBfEc1NE+QI5LUu3kO43L633dCSshf5yAM=)
3: 5bPw81P_kxJyPAHehBzr4HJ5wlg.roa (hash: 4Hmum3YbvhBsvoDqD6ymCevyNK6B2cZ0Ry/48HKcZ6M=)
4: 6xtEtECX1hmiBfg2kCnuxEarwpg.roa (hash: 0EDHjBKP1TdEoYGKNKuRsh3vtzapWrWAjD4dmjk8Vc0=)
5: AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl (hash: sJYQEjwSZO09l9MZEQvfYr5KXuXWK6fR307M29fccM8=)
6: FyvKrQlLQZ08OBN_anf4pBjOJb4.roa (hash: +pZffx5xsLckndXmwboiF/Rz+edr9+ScKLx8uBSEPfQ=)
7: Jfl2HZOv0aOpTlrzfTjwSjaabBA.roa (hash: 627r3CnYmsat7UpuE0Fbc/64Tgy4fFvd4NcmRN9aPno=)
8: yugxSbIwGxz1NU3UI7VHskkezds.roa (hash: SVtVdrynk9VJBORSgvdr3639uF3/kw+eYctyJwd4PmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:45:e3:d3:af:ca:0f:2e:50:a9:c1:e8:ac:c3:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Validity
Not Before: Apr 17 10:01:18 2026 GMT
Not After : Apr 18 10:01:18 2026 GMT
Subject: CN=f4d86e0bba94557c3f3f4bcb92d7f0b6cfb6f951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ba:ea:0f:8a:7c:cc:d3:54:b7:a4:b6:0e:09:
e1:7b:36:61:7d:64:2a:2c:54:58:c0:fa:06:85:79:
9d:30:c2:ef:3c:16:34:5f:be:5a:cd:e7:f2:71:d9:
ec:21:bb:c8:b8:66:39:b0:e5:a2:6b:3b:1e:7d:d0:
18:67:ca:70:f9:b6:3d:82:85:ac:90:f2:04:70:a2:
cb:56:97:ef:cd:34:3b:5d:41:33:c3:3b:00:bb:75:
91:d4:4f:c3:f3:f5:93:2c:b6:95:be:42:68:4f:48:
43:f1:58:e4:2f:d7:7b:76:5d:6c:cb:ca:f9:18:59:
bb:e9:8b:a3:5c:41:98:c4:0b:03:33:1a:03:d0:be:
7a:51:03:30:51:22:53:f2:89:bb:f8:94:3d:be:c7:
a9:b6:fb:62:c1:2f:c0:2e:19:bb:a3:83:71:1e:72:
81:d2:df:17:80:a0:b6:7d:59:fc:a9:e7:6a:56:ee:
76:54:d2:37:70:4f:57:6c:ce:e1:ac:a5:2d:10:f6:
4a:5b:87:c7:80:7b:5b:42:93:6e:e8:50:22:21:8e:
20:3b:a6:4b:cb:79:1d:47:4f:a8:72:46:9b:3e:f0:
8c:96:d5:03:a8:f3:a1:92:c1:84:1a:a1:f0:31:b0:
21:13:a7:01:3d:56:fd:33:e0:1d:ca:c8:07:c8:8b:
ee:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D8:6E:0B:BA:94:55:7C:3F:3F:4B:CB:92:D7:F0:B6:CF:B6:F9:51
X509v3 Authority Key Identifier:
keyid:01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:48:39:97:93:24:e8:d7:b3:fe:2b:d3:04:99:e4:9e:3f:c3:
c4:d7:91:89:e0:84:b8:80:52:11:af:38:0e:7a:94:47:c1:4b:
7c:16:cf:d4:41:15:7c:b7:c9:c8:bf:0a:0c:a6:ec:d2:30:68:
07:de:b9:e4:1c:44:5a:5c:52:1b:70:ef:f4:5a:7b:16:80:54:
ae:e9:70:21:d2:f8:d5:16:59:97:f9:8d:3a:a3:fe:08:5a:cb:
97:8a:70:e6:d6:db:da:15:64:19:89:8d:b4:d9:0f:ba:1c:e9:
2b:c6:a3:3a:e6:22:2d:b3:f0:25:14:e0:35:26:49:c2:f8:53:
1a:76:ba:4e:86:5b:7b:7d:31:74:2b:24:78:86:7a:93:38:82:
38:ee:eb:7a:55:f1:2a:6e:f2:ab:52:49:48:b0:22:56:3a:90:
32:03:42:fd:7d:ad:19:5f:c3:f3:12:a4:61:49:53:3a:ca:b8:
81:62:8e:d5:02:72:9d:51:69:2d:12:4a:b6:6c:c9:df:b9:b2:
07:aa:1e:dc:82:16:07:e9:4b:9e:84:3e:68:25:e6:07:72:d7:
5f:5e:31:ec:c3:46:55:7c:b5:d5:99:6f:35:6e:5d:e6:37:3d:
7f:11:66:4f:a4:88:e4:3a:8f:2f:da:59:20:bc:17:33:a8:c7:
bf:d8:35:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:54:37 2026 by rpki-client