Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
File: AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft (raw, json)
Hash identifier: 1TpeQNDLZ2hLSOS7P761eNs2OMEd436wZmLj6Lnpv38=
Subject key identifier: D7:66:4B:E3:81:91:D3:73:CC:16:97:EC:E2:66:A9:34:83:E3:56:69
Authority key identifier: 01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
Certificate issuer: /CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Certificate serial: 019CAB6AF33E7BBF421CF667E3641721868F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
Manifest number: 1862
Signing time: Sun 01 Mar 2026 22:00:38 +0000
Manifest this update: Sun 01 Mar 2026 22:00:38 +0000
Manifest next update: Mon 02 Mar 2026 22:00:38 +0000
Files and hashes: 1: 0CvIXoHsvIs1B_YOF4uDh9JpSxE.roa (hash: 91sFZp4Lna3qg8mUoA4c/ZNk5BvTimCG0r/38G4vor4=)
2: 0mnkoAs85-mIhHxZL8fHwKRjWRc.roa (hash: eichc48YsRBfEc1NE+QI5LUu3kO43L633dCSshf5yAM=)
3: 5bPw81P_kxJyPAHehBzr4HJ5wlg.roa (hash: 4Hmum3YbvhBsvoDqD6ymCevyNK6B2cZ0Ry/48HKcZ6M=)
4: 6xtEtECX1hmiBfg2kCnuxEarwpg.roa (hash: 0EDHjBKP1TdEoYGKNKuRsh3vtzapWrWAjD4dmjk8Vc0=)
5: AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl (hash: 1YpcRAmZGLA/2aCJFsVi+0/D16vFoJg4TRfDFpUMzWI=)
6: FyvKrQlLQZ08OBN_anf4pBjOJb4.roa (hash: +pZffx5xsLckndXmwboiF/Rz+edr9+ScKLx8uBSEPfQ=)
7: Jfl2HZOv0aOpTlrzfTjwSjaabBA.roa (hash: 627r3CnYmsat7UpuE0Fbc/64Tgy4fFvd4NcmRN9aPno=)
8: yugxSbIwGxz1NU3UI7VHskkezds.roa (hash: SVtVdrynk9VJBORSgvdr3639uF3/kw+eYctyJwd4PmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:f3:3e:7b:bf:42:1c:f6:67:e3:64:17:21:86:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Validity
Not Before: Mar 1 22:00:38 2026 GMT
Not After : Mar 2 22:00:38 2026 GMT
Subject: CN=d7664be38191d373cc1697ece266a93483e35669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:8c:49:97:51:31:07:fc:39:6b:82:5b:64:b4:
33:a3:4f:dc:6e:33:b7:31:6e:1e:5f:31:e2:e0:bd:
80:27:fc:a4:09:a1:03:1e:0d:e9:39:06:97:6f:0d:
26:0e:14:9a:dc:d9:45:cb:a4:c7:2b:35:7d:17:ed:
8d:e7:52:70:b9:00:6c:ed:d8:81:1e:03:5c:be:c0:
64:f0:ba:47:b3:39:e2:8d:aa:e8:f4:cb:b0:a0:55:
8a:44:7c:51:12:de:36:2a:cb:50:8a:43:ff:ae:a9:
a6:b7:36:fc:da:79:8c:43:3b:0a:64:97:4b:9c:b0:
b8:9e:de:ac:e4:f7:27:47:e1:8e:88:7c:3b:19:d8:
d3:7b:49:bd:7d:f9:3d:d2:21:1b:eb:c5:99:c4:de:
bd:cb:88:08:85:b5:9e:a4:3e:a3:5d:67:19:03:14:
52:e9:b0:06:c9:ec:c8:4d:14:c6:00:25:0b:c4:0c:
3a:6e:ca:6c:90:8f:9c:bc:06:f8:5f:99:ef:5d:fd:
3c:17:26:34:53:f9:93:54:a7:0f:8f:55:35:1d:47:
21:cc:df:0f:e1:07:da:29:cc:1c:cc:ec:e3:03:78:
39:05:d8:01:91:4a:9d:8c:f5:c6:07:c7:d6:1d:13:
8d:e2:3d:2b:9b:d8:93:42:63:21:63:f8:6f:db:02:
1a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:66:4B:E3:81:91:D3:73:CC:16:97:EC:E2:66:A9:34:83:E3:56:69
X509v3 Authority Key Identifier:
keyid:01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:40:20:0f:c3:61:d6:ad:ec:55:84:ac:ae:f9:9d:20:43:4b:
25:17:02:2c:64:4b:6b:5e:92:fc:c0:70:35:48:2b:07:ff:34:
ba:92:19:13:8e:16:ad:29:95:da:5d:e3:f7:58:03:60:8c:53:
c1:28:ea:35:c6:ec:a6:68:92:d4:90:92:6f:75:8a:62:ab:17:
f1:de:09:81:4e:c5:2b:ed:26:0b:93:65:09:73:53:0b:f5:4e:
53:e8:39:54:d4:5f:18:03:ca:e3:f7:ec:01:b6:85:2e:23:a3:
27:43:ce:a4:8b:85:69:47:a7:67:48:a2:96:5d:65:02:e4:7e:
42:2a:e5:13:f7:cd:80:ae:57:09:48:94:e8:ce:cd:a1:f6:c2:
19:6a:de:06:5f:22:a0:eb:ab:7d:c3:a9:5f:ad:b7:39:f2:63:
4b:6a:fd:05:27:4c:44:78:9d:43:4c:66:1b:bb:32:e4:5d:f2:
fb:e2:03:2f:4b:08:44:06:f6:98:4a:45:7b:2f:4c:d2:5a:81:
7e:74:eb:bc:72:a5:47:ac:45:18:bb:c7:fa:46:27:53:7c:b6:
88:67:c7:8d:a1:3a:c6:d6:a6:87:21:63:6b:e5:f2:9a:57:03:
d8:bd:e8:f9:22:e9:e6:c3:f5:0b:86:2d:67:5c:14:d8:60:9b:
7e:91:31:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:43:05 2026 by rpki-client