Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
File: AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft (raw, json)
Hash identifier: xDVWofIddSZZQW1OzG8/JA7sVpcV5ZTUF9jZhlKE8XE=
Subject key identifier: FB:E3:A2:56:C4:25:08:79:B5:90:F9:B7:04:72:D9:46:D5:10:26:3B
Authority key identifier: 01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
Certificate issuer: /CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Certificate serial: 01A1DB70171B59907F42F91CC68F18731C49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
Manifest number: 1B13
Signing time: Sat 14 Nov 2026 19:01:58 +0000
Manifest this update: Sat 14 Nov 2026 19:01:58 +0000
Manifest next update: Sun 15 Nov 2026 19:01:58 +0000
Files and hashes: 1: 0CvIXoHsvIs1B_YOF4uDh9JpSxE.roa (hash: 91sFZp4Lna3qg8mUoA4c/ZNk5BvTimCG0r/38G4vor4=)
2: 0mnkoAs85-mIhHxZL8fHwKRjWRc.roa (hash: eichc48YsRBfEc1NE+QI5LUu3kO43L633dCSshf5yAM=)
3: 5bPw81P_kxJyPAHehBzr4HJ5wlg.roa (hash: 4Hmum3YbvhBsvoDqD6ymCevyNK6B2cZ0Ry/48HKcZ6M=)
4: 6xtEtECX1hmiBfg2kCnuxEarwpg.roa (hash: 0EDHjBKP1TdEoYGKNKuRsh3vtzapWrWAjD4dmjk8Vc0=)
5: AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl (hash: TeV5tqIX3hI40c3FBAfHEowrDQ9YVR2ij1JDQkbeHTs=)
6: FyvKrQlLQZ08OBN_anf4pBjOJb4.roa (hash: +pZffx5xsLckndXmwboiF/Rz+edr9+ScKLx8uBSEPfQ=)
7: Jfl2HZOv0aOpTlrzfTjwSjaabBA.roa (hash: 627r3CnYmsat7UpuE0Fbc/64Tgy4fFvd4NcmRN9aPno=)
8: yugxSbIwGxz1NU3UI7VHskkezds.roa (hash: SVtVdrynk9VJBORSgvdr3639uF3/kw+eYctyJwd4PmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:70:17:1b:59:90:7f:42:f9:1c:c6:8f:18:73:1c:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Validity
Not Before: Nov 14 19:01:58 2026 GMT
Not After : Nov 15 19:01:58 2026 GMT
Subject: CN=fbe3a256c4250879b590f9b70472d946d510263b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9c:3c:a1:2e:df:36:d4:8b:ba:1e:bd:1f:ee:
d6:0b:7e:01:e4:15:03:8a:ff:8b:b7:c2:3b:c4:bc:
73:ac:78:82:23:21:21:e5:84:2c:3a:07:64:8e:96:
8d:ad:0e:6f:8e:77:4c:f6:39:7f:74:d8:e9:4d:e6:
64:e2:f5:af:a3:36:19:1a:73:ac:7d:73:06:28:0c:
31:fd:1f:2c:72:88:aa:db:13:32:db:35:88:0e:57:
3f:57:ae:84:34:06:66:a6:7c:7d:73:87:0d:5e:1a:
6f:05:7b:34:78:1b:9c:53:22:4a:3c:5c:92:11:31:
ba:e7:32:15:ed:38:e7:38:95:1b:9b:36:45:99:ed:
52:48:5f:93:c3:75:73:a3:a3:b2:20:1f:c9:f5:e7:
0b:71:15:82:3d:8a:29:b9:01:fa:b8:ea:94:ff:2f:
37:9a:9e:f6:77:d5:35:41:72:77:90:fc:c1:a4:26:
8f:cf:15:16:66:5e:50:2a:b6:97:be:27:b4:5b:d5:
bf:31:67:43:23:ed:98:00:77:21:6e:33:5e:3f:cb:
c5:f0:f4:01:45:8b:d6:04:ea:c5:6a:94:bb:cf:fe:
62:98:4f:b7:3f:ab:70:78:13:b2:8d:dc:f9:12:da:
ee:c5:ec:9c:bd:3a:63:17:33:8d:ec:e4:29:70:05:
e2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E3:A2:56:C4:25:08:79:B5:90:F9:B7:04:72:D9:46:D5:10:26:3B
X509v3 Authority Key Identifier:
keyid:01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:db:06:21:eb:be:db:05:8a:6b:7f:8e:dc:6d:25:06:a3:a3:
4a:ce:ad:e3:89:12:0a:a8:6c:9c:4a:b4:3a:93:4a:f0:dd:08:
50:90:56:d7:a8:41:31:23:3e:ec:38:e9:66:f7:1d:c5:5a:4d:
d5:5c:6a:7a:d1:55:75:94:18:67:9f:40:2c:23:71:21:4f:c4:
8b:52:70:89:16:a4:70:0e:b0:5e:1a:cc:a1:e8:a2:5e:53:77:
50:c8:f8:c6:e6:0b:f2:3c:9f:89:26:ef:31:ae:6a:ad:71:fa:
fb:e7:3a:16:ae:50:10:0f:a7:18:41:bc:a9:60:98:16:5c:ed:
aa:3a:8c:84:1f:18:e4:29:2d:46:c2:bc:3c:cd:35:8a:05:5f:
6d:16:39:13:00:b2:16:90:0e:5d:bb:a0:4e:d0:47:d9:6c:68:
ef:bd:db:b3:0a:4f:ff:83:43:f1:c6:3f:cd:f0:67:96:03:38:
81:91:04:32:98:9f:55:52:36:18:18:d7:7c:c2:c0:cf:26:bc:
56:92:33:7a:d0:7a:36:ea:2d:45:68:93:a6:7f:3e:7a:75:ca:
77:01:6d:a4:c2:95:68:0b:b6:45:c6:5d:a2:ca:08:dc:b5:20:
99:b4:c9:8a:06:e5:46:70:cb:42:1f:36:0d:c2:b8:b2:eb:70:
b4:3c:fb:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:26:55 2026 by rpki-client