Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
File: AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft (raw, json)
Hash identifier: aSiRkJzH/9mP/Hy4a5PwhhENfU4PqrH06Lrn6zEsNLs=
Subject key identifier: 3C:B7:35:2C:3F:1C:F2:38:D3:F7:8B:73:CD:8D:91:67:21:A6:9B:E3
Authority key identifier: 01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
Certificate issuer: /CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Certificate serial: 019FAA1A3ABCC336061072915C8E6D1D1168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
Manifest number: 19F0
Signing time: Tue 28 Jul 2026 19:01:13 +0000
Manifest this update: Tue 28 Jul 2026 19:01:13 +0000
Manifest next update: Wed 29 Jul 2026 19:01:13 +0000
Files and hashes: 1: 0CvIXoHsvIs1B_YOF4uDh9JpSxE.roa (hash: 91sFZp4Lna3qg8mUoA4c/ZNk5BvTimCG0r/38G4vor4=)
2: 0mnkoAs85-mIhHxZL8fHwKRjWRc.roa (hash: eichc48YsRBfEc1NE+QI5LUu3kO43L633dCSshf5yAM=)
3: 5bPw81P_kxJyPAHehBzr4HJ5wlg.roa (hash: 4Hmum3YbvhBsvoDqD6ymCevyNK6B2cZ0Ry/48HKcZ6M=)
4: 6xtEtECX1hmiBfg2kCnuxEarwpg.roa (hash: 0EDHjBKP1TdEoYGKNKuRsh3vtzapWrWAjD4dmjk8Vc0=)
5: AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl (hash: jWUmWQYWbTtykSGUU3RE/v69dHTadOFmAkOua/ZfvZ0=)
6: FyvKrQlLQZ08OBN_anf4pBjOJb4.roa (hash: +pZffx5xsLckndXmwboiF/Rz+edr9+ScKLx8uBSEPfQ=)
7: Jfl2HZOv0aOpTlrzfTjwSjaabBA.roa (hash: 627r3CnYmsat7UpuE0Fbc/64Tgy4fFvd4NcmRN9aPno=)
8: t03EMq-NSzz6z5HQa-GjXWKzoZo.roa (hash: yH0kTbOMtCUA51U3VcVTi8KodU663jCCHRpwjnHIH54=)
9: yugxSbIwGxz1NU3UI7VHskkezds.roa (hash: SVtVdrynk9VJBORSgvdr3639uF3/kw+eYctyJwd4PmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:3a:bc:c3:36:06:10:72:91:5c:8e:6d:1d:11:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Validity
Not Before: Jul 28 19:01:13 2026 GMT
Not After : Jul 29 19:01:13 2026 GMT
Subject: CN=3cb7352c3f1cf238d3f78b73cd8d916721a69be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:08:8f:a6:c0:f8:2a:9c:c4:19:f1:c9:2a:14:
40:97:9c:ed:88:a4:55:20:18:00:cc:67:6b:c9:ce:
1c:c5:90:e1:8e:fa:8a:db:9a:ec:4c:e2:d2:27:1a:
b6:5b:28:34:88:18:d0:4b:11:3e:52:56:e6:92:f1:
4a:ee:ff:08:83:f8:4c:29:b6:a8:68:92:be:88:86:
52:7c:e7:d9:5d:8c:df:e7:58:98:51:bd:1f:f6:8f:
9a:9b:f9:02:b2:56:1d:c6:9b:a4:a8:aa:25:d2:b9:
9d:57:6e:4b:75:cb:93:25:3b:a2:ea:92:ae:02:3b:
96:eb:b5:0e:bd:82:6e:3b:77:0d:18:df:7c:90:3f:
44:d6:3b:55:bc:8d:d6:8a:a0:5b:c5:c1:c7:1e:99:
eb:8d:78:e0:d2:eb:8f:3e:97:cb:55:30:14:56:a0:
7e:88:11:ed:c3:be:24:5f:23:1d:a1:cd:10:fe:fc:
f1:a6:24:bb:2e:bc:3c:93:29:57:0c:a6:54:bd:0e:
88:1f:63:33:7c:60:95:59:89:19:aa:64:3b:85:dd:
1a:e6:3b:ad:e6:47:aa:8d:ba:f5:f5:e3:ad:33:27:
a2:c3:b1:19:a0:9a:4b:6b:96:c1:f0:6a:c2:ac:b6:
17:80:41:60:41:ce:46:0a:6c:7b:4d:db:0d:35:9d:
cb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B7:35:2C:3F:1C:F2:38:D3:F7:8B:73:CD:8D:91:67:21:A6:9B:E3
X509v3 Authority Key Identifier:
keyid:01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:91:4f:94:33:ea:5b:7a:6a:f6:f8:98:08:af:3f:fc:02:6f:
e7:8c:67:4e:f8:bd:57:d2:54:46:e3:66:f2:73:94:66:b6:ee:
5a:e2:67:bc:a8:b8:b7:4c:a9:0a:19:03:13:d5:c4:5c:86:47:
ef:16:02:46:2f:78:e0:ce:9f:f8:79:4b:e3:00:53:e2:2a:2f:
11:dd:f8:06:08:85:b1:f7:d2:0d:05:c5:36:8c:79:a1:24:b5:
ef:19:13:48:7f:1c:7d:71:5f:dc:75:23:bb:ac:27:fd:b9:b4:
7e:27:a0:1d:9f:87:10:ec:6a:78:2d:24:94:69:49:7e:80:6c:
c5:a5:a3:a8:49:e3:8b:f4:06:ea:6f:2c:bc:8c:3b:b7:8c:1b:
d6:77:15:b5:53:5b:6b:13:46:e0:7f:50:dd:d1:fa:d5:07:7f:
31:f3:4d:88:35:f0:13:6e:b1:94:58:10:cd:c6:e3:e4:b0:ab:
94:82:e9:c6:b9:da:05:2e:0e:e0:c8:cf:de:49:8a:9b:8b:61:
98:6e:de:ea:00:3a:07:37:54:bc:bc:cf:99:f5:c1:6c:2e:b0:
61:81:65:db:55:5f:3e:ba:66:4a:ea:80:8b:1d:19:8f:c6:11:
83:92:7a:fb:f5:54:70:d8:9f:87:dc:7a:90:59:a1:f2:d9:1e:
4b:57:bc:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:22:11 2026 by rpki-client