Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft
File: aXejEW7MnXpCnxNlFhPorRSf8yQ.mft (raw, json)
Hash identifier: zIOW2L3nVWTYkm/yFyE+QDCz/GzO7TxhMY2MaHbVqhI=
Subject key identifier: 7E:10:74:B1:BE:64:DF:93:5D:A0:2A:4F:02:B5:04:EF:70:4D:CA:FD
Authority key identifier: 69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24
Certificate issuer: /CN=6977a3116ecc9d7a429f13651613e8ad149ff324
Certificate serial: 019CADFE0CF81CD28E7C1388DB103411E8C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft
Manifest number: 0499
Signing time: Mon 02 Mar 2026 10:00:33 +0000
Manifest this update: Mon 02 Mar 2026 10:00:33 +0000
Manifest next update: Tue 03 Mar 2026 10:00:33 +0000
Files and hashes: 1: aXejEW7MnXpCnxNlFhPorRSf8yQ.crl (hash: CBs629g3Lle78OVWkkRwHfnbyTjIsFf1FrouyG/bTxA=)
2: in7k9AsBx6NUh7nZ9FStJpwqNZg.roa (hash: yJqv69g4lr/AY0F4ca8NJpDHwd0prBk+i0+widUpdZY=)
3: ktSQWFwbI3FpGsTRyfTaMNFXl1s.roa (hash: zx3d6M9/eCKOvbINTMTpaKIin9u2fDnkb4axNDW8ebU=)
4: t6vcjb2H7PuOWUOpwo93r5z0oxI.roa (hash: 1GLmpuGcjJsniOe3fkdTrgkyiEByM7yt7fx1eGhJpyE=)
5: xdD8NQIISgmL_50DWggSpNqYxt0.roa (hash: bRThL8e+G01mdmKwHZooaTSEY26dPEyMkLWkAKNdxkM=)
6: yIFRoeWjck6xnKFGs8xoT0Cbvh4.roa (hash: DBST9YRixBf8rcw2+0ZbzwNRViwczCOARaNwqn1FCgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:0c:f8:1c:d2:8e:7c:13:88:db:10:34:11:e8:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6977a3116ecc9d7a429f13651613e8ad149ff324
Validity
Not Before: Mar 2 10:00:33 2026 GMT
Not After : Mar 3 10:00:33 2026 GMT
Subject: CN=7e1074b1be64df935da02a4f02b504ef704dcafd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f2:f6:26:46:01:a3:62:95:be:9e:ff:5e:94:
38:88:65:62:1c:6a:ca:28:1b:c4:54:dc:93:44:1a:
89:4b:40:e2:de:2d:ba:47:60:ff:b9:d3:67:61:1a:
07:39:ad:5d:91:fc:12:ff:8f:54:78:28:a7:34:c0:
35:db:54:85:65:0b:b7:a3:c3:41:ea:e2:31:c7:0e:
0b:df:76:f1:0b:67:04:b1:26:c5:8b:ec:1e:b8:9b:
b7:bd:f8:06:23:69:fb:49:c3:8b:03:4f:44:df:b5:
1f:02:99:ab:ca:7f:89:99:c0:57:83:c2:59:97:94:
89:05:52:d6:82:ad:70:82:d5:29:2c:b6:76:65:ed:
ac:dd:08:3d:12:60:f6:dc:60:ce:64:12:a9:8e:84:
a8:17:c7:af:46:0b:99:f5:59:15:68:43:e2:b0:50:
56:5b:82:32:0d:2d:85:52:95:af:08:5d:d9:47:1a:
27:fc:24:a6:8f:35:c6:3e:fd:1e:68:a7:93:c8:0f:
e0:cf:ca:2e:fb:7a:82:ed:65:6f:69:2e:ed:85:0f:
76:0d:31:31:f2:61:b7:fe:d0:22:48:c8:91:18:d2:
6a:51:fe:38:fd:a4:86:55:0d:2e:b0:d7:3b:2f:df:
76:d4:ef:7a:44:be:c0:27:d7:f2:31:08:47:7d:cd:
02:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:10:74:B1:BE:64:DF:93:5D:A0:2A:4F:02:B5:04:EF:70:4D:CA:FD
X509v3 Authority Key Identifier:
keyid:69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:a4:25:46:18:5c:46:dd:16:df:a9:87:84:b1:c1:0b:6e:99:
dd:a1:4a:af:af:fa:30:13:d5:da:76:d6:b5:4d:3d:50:c0:2d:
58:f4:a8:97:d3:e7:da:72:4f:26:8a:9d:f9:eb:9c:45:98:49:
e4:c4:f6:1f:e9:3e:70:54:84:b4:95:b8:d6:ff:fc:7a:37:08:
35:eb:f0:fb:46:7b:6d:3d:7a:94:de:17:7b:65:b7:1e:18:e5:
49:dc:91:4e:0c:b9:6d:12:b6:6d:04:fe:10:d3:1f:d8:80:e4:
5d:19:d2:d0:8b:95:4e:34:13:49:91:59:ce:41:d5:5e:1c:ad:
90:14:a3:1d:69:d0:7b:a0:ef:2f:1d:4c:30:81:47:4d:27:9b:
5f:2b:39:8e:3f:97:86:9e:c9:56:98:43:ee:53:c5:8a:c3:44:
e7:13:b9:8c:89:65:04:d0:73:af:91:36:80:c0:1b:1e:73:25:
98:b4:f1:4f:fc:d7:cc:54:54:b3:41:37:91:8a:be:c6:43:da:
cd:a0:f6:81:ea:03:a4:75:2e:e5:8b:da:83:d5:ae:6a:4b:fb:
82:6e:71:55:ef:ea:46:4a:75:a5:51:ec:ae:89:05:10:22:01:
1c:57:77:d3:7d:6d:d0:b0:26:a2:09:f3:0e:27:2c:f3:32:4c:
fd:51:8f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:55:16 2026 by rpki-client