Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
File: AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft (raw, json)
Hash identifier: YwrbkM+XJD1Hcy44Uulxxo441I+W7GPxT9gOebquZtM=
Subject key identifier: 90:34:34:65:D5:BB:9B:7A:2E:D3:50:B6:FA:B7:B8:9B:2F:21:B7:2A
Authority key identifier: 01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
Certificate issuer: /CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Certificate serial: 01A0C3696977681B312987CBCD9BB043992A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
Manifest number: 1A82
Signing time: Mon 21 Sep 2026 10:01:00 +0000
Manifest this update: Mon 21 Sep 2026 10:01:00 +0000
Manifest next update: Tue 22 Sep 2026 10:01:00 +0000
Files and hashes: 1: 0CvIXoHsvIs1B_YOF4uDh9JpSxE.roa (hash: 91sFZp4Lna3qg8mUoA4c/ZNk5BvTimCG0r/38G4vor4=)
2: 0mnkoAs85-mIhHxZL8fHwKRjWRc.roa (hash: eichc48YsRBfEc1NE+QI5LUu3kO43L633dCSshf5yAM=)
3: 5bPw81P_kxJyPAHehBzr4HJ5wlg.roa (hash: 4Hmum3YbvhBsvoDqD6ymCevyNK6B2cZ0Ry/48HKcZ6M=)
4: 6xtEtECX1hmiBfg2kCnuxEarwpg.roa (hash: 0EDHjBKP1TdEoYGKNKuRsh3vtzapWrWAjD4dmjk8Vc0=)
5: AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl (hash: BRCyDn3jsFyoO26b/pTDggwz4R7fBnuEDZgaCNlJRQQ=)
6: FyvKrQlLQZ08OBN_anf4pBjOJb4.roa (hash: +pZffx5xsLckndXmwboiF/Rz+edr9+ScKLx8uBSEPfQ=)
7: Jfl2HZOv0aOpTlrzfTjwSjaabBA.roa (hash: 627r3CnYmsat7UpuE0Fbc/64Tgy4fFvd4NcmRN9aPno=)
8: yugxSbIwGxz1NU3UI7VHskkezds.roa (hash: SVtVdrynk9VJBORSgvdr3639uF3/kw+eYctyJwd4PmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:69:69:77:68:1b:31:29:87:cb:cd:9b:b0:43:99:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Validity
Not Before: Sep 21 10:01:00 2026 GMT
Not After : Sep 22 10:01:00 2026 GMT
Subject: CN=90343465d5bb9b7a2ed350b6fab7b89b2f21b72a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:11:e0:e1:4e:17:ed:00:23:f2:2a:ed:8d:d7:
9d:34:aa:4f:29:d7:21:f3:19:00:44:c5:1f:f3:4e:
e4:23:be:86:7b:69:f9:d0:29:92:2d:82:4c:3c:e1:
fe:62:1b:5d:4e:38:0a:6e:1b:53:99:eb:90:26:32:
25:ab:0f:ed:a7:31:ef:f3:2c:8f:e6:29:6a:4b:f1:
2d:79:99:2f:ae:31:cc:b7:d2:68:e4:c9:9a:5f:d5:
41:8b:4f:30:1b:7d:4e:95:f8:54:ca:b3:88:0a:fe:
32:3a:2a:a9:6e:ca:50:88:80:5b:e1:bf:7a:92:63:
80:d1:95:8f:42:08:bf:9a:9c:de:7e:35:d1:85:20:
80:76:97:f0:09:44:9a:1f:d2:40:cd:8e:19:09:b5:
a9:c6:83:fd:31:61:5b:cd:e2:92:c6:20:cd:69:04:
90:fa:2a:80:e3:f5:15:19:43:ec:32:62:32:94:1c:
96:80:28:3b:92:e9:b0:6c:e4:d0:5f:dd:3b:e4:84:
6b:d5:8a:b7:ba:17:1e:00:b7:4a:7d:37:34:1a:02:
ef:91:5b:00:e2:7d:70:8c:ca:08:80:a4:6b:b7:65:
66:dd:36:1d:33:16:cf:d1:21:9e:b0:f4:ab:bd:a2:
dd:25:a8:d5:48:34:b2:ca:25:e1:0b:9c:20:a5:b9:
ed:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:34:34:65:D5:BB:9B:7A:2E:D3:50:B6:FA:B7:B8:9B:2F:21:B7:2A
X509v3 Authority Key Identifier:
keyid:01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:03:e0:97:09:da:2d:c6:a8:83:a1:2b:92:50:96:be:1f:db:
18:96:bf:39:3d:b3:31:86:e7:1e:31:48:aa:f9:68:f1:ff:67:
00:d9:c3:d1:ee:f2:9a:33:9f:a7:a9:cb:1e:5b:07:7d:0d:af:
e5:89:8e:2e:ae:a7:45:b3:43:7f:2b:3b:eb:80:1c:bd:8e:a2:
01:3b:ff:f2:8b:7f:b6:3e:0d:8a:29:12:1c:df:c0:bf:fc:e9:
47:0c:bf:7f:89:0a:ae:bb:fb:e9:36:62:40:29:77:5e:d4:d3:
dd:ee:65:4b:43:76:50:60:7d:de:19:de:87:e6:ed:99:3a:20:
05:97:7d:bc:fd:90:fa:4f:e0:78:40:83:6d:19:8c:53:23:d2:
5a:ec:53:4f:cc:7b:a4:8d:ad:47:25:25:cc:b5:de:6b:b4:a1:
fd:35:c8:f6:74:9a:28:ec:f9:ab:a4:99:56:6f:17:c1:b7:26:
4c:db:d2:76:60:39:d7:90:1f:a1:f8:4a:87:43:6a:15:71:87:
69:66:b9:8d:00:1d:ae:a6:70:2f:eb:0a:89:0c:20:45:aa:fb:
29:b5:71:d7:d7:3e:4e:f7:0a:b2:44:85:a2:c8:87:bc:e9:9a:
2c:22:32:d2:ce:33:22:e2:2f:ed:62:37:22:dd:25:86:fa:93:
c2:90:24:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:37:14 2026 by rpki-client