Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft
File: Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft (raw, json)
Hash identifier: YsgicMvjxUbs8xk9Z8ZffHJ7c60T+K6Fvgt+53+F2cA=
Subject key identifier: 27:C2:57:46:73:F4:2C:DD:65:79:1D:B2:04:5A:46:0C:3E:86:EE:33
Authority key identifier: 03:1D:03:15:F7:7B:95:49:5F:60:DC:62:B3:58:E4:C1:B3:FB:5D:C0
Certificate issuer: /CN=031d0315f77b95495f60dc62b358e4c1b3fb5dc0
Certificate serial: 01A17BBB6B205B890EF4D55A565CA425D7A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ax0DFfd7lUlfYNxis1jkwbP7XcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft
Manifest number: 02D0
Signing time: Tue 27 Oct 2026 05:00:42 +0000
Manifest this update: Tue 27 Oct 2026 05:00:42 +0000
Manifest next update: Wed 28 Oct 2026 05:00:42 +0000
Files and hashes: 1: 273CJOloMHCNr40TZUcFVxeZFms.asa (hash: tOqMGrNI4l0VYDU+tVPacc01C6txXDyN4W2pPE0sHCs=)
2: Ax0DFfd7lUlfYNxis1jkwbP7XcA.crl (hash: abrUPSWlImNTEnqKZcEqa9ElDYh3ZDc2Ylsy1sOVMss=)
3: WfIBNFBJCmDGiwOF58LkEkU6i_k.asa (hash: M5LpZEXgCwgBFWCXLQ6KoLhrTqWESWDvJESM0Dp+OEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ax0DFfd7lUlfYNxis1jkwbP7XcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:bb:6b:20:5b:89:0e:f4:d5:5a:56:5c:a4:25:d7:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=031d0315f77b95495f60dc62b358e4c1b3fb5dc0
Validity
Not Before: Oct 27 05:00:42 2026 GMT
Not After : Oct 28 05:00:42 2026 GMT
Subject: CN=27c2574673f42cdd65791db2045a460c3e86ee33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ee:51:a1:2b:eb:76:57:4a:8b:c3:a0:c4:9d:
27:1e:31:f8:22:a4:ff:e1:f2:6d:3d:74:80:a5:ca:
ef:6b:4d:e2:7e:02:10:40:4d:43:e2:33:16:ed:8e:
91:03:25:e2:40:4a:d3:c3:df:a9:25:50:45:18:ef:
17:46:5d:1a:bb:79:7f:a6:73:af:f5:a1:85:66:4f:
b4:82:16:29:21:c2:dc:58:a8:94:fc:fa:eb:eb:4c:
b5:20:b1:b8:fc:6e:2f:cc:49:c9:f1:00:b5:55:e2:
42:e6:66:53:46:9e:01:7c:5f:56:8b:7e:b8:27:1c:
71:fc:78:a1:5a:13:fe:31:3e:2d:c0:a2:31:4d:e3:
51:09:ce:41:f8:2e:1f:f4:01:e9:03:87:74:b8:00:
4f:79:82:a2:2a:67:c4:a5:3e:3c:20:e1:93:86:ef:
90:3d:2d:76:4a:ec:3d:fb:d2:49:bc:f7:56:3e:2e:
e5:10:9e:66:10:f4:4f:20:07:de:30:39:d6:60:35:
56:b9:a4:2a:37:a1:54:8b:ad:dd:b3:16:f4:c7:57:
4f:e2:87:fc:13:df:d7:e2:15:38:72:2a:fe:55:1a:
05:0f:b1:60:7b:c7:9a:c0:e4:64:c8:e8:e9:d2:b3:
94:2a:87:0d:c3:23:5b:52:f8:fd:76:b7:76:e7:a5:
70:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C2:57:46:73:F4:2C:DD:65:79:1D:B2:04:5A:46:0C:3E:86:EE:33
X509v3 Authority Key Identifier:
keyid:03:1D:03:15:F7:7B:95:49:5F:60:DC:62:B3:58:E4:C1:B3:FB:5D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ax0DFfd7lUlfYNxis1jkwbP7XcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:5c:2f:7a:01:23:62:91:8c:50:e0:5c:16:4e:7e:52:49:e6:
69:49:88:5d:50:86:f0:f7:06:23:9b:b7:01:d4:cf:5a:5a:e3:
2e:d8:2c:da:68:2d:17:6e:c7:ae:1f:7f:b9:d3:a0:ff:8c:21:
c7:ed:59:1c:e7:0f:a0:9b:92:10:45:82:09:79:23:bc:51:b8:
6d:e6:13:cc:b3:51:3c:0a:44:99:e8:1b:ab:65:1d:77:98:26:
65:56:ed:05:eb:cc:86:97:31:44:b4:c4:17:37:d5:c9:34:09:
81:38:8d:07:16:77:75:4c:48:c2:d4:36:f3:a5:41:36:bb:db:
d7:f7:8e:bb:a7:f8:bc:8e:72:6d:09:bf:f3:9f:69:37:4b:10:
34:08:80:06:d6:22:f4:f8:84:22:59:39:e1:6f:98:dd:bc:82:
da:72:ad:b3:ae:5f:38:6c:21:22:5c:0e:5d:a7:9a:96:e1:7f:
7d:2d:ae:e3:d0:ef:4b:7d:0a:3f:e2:e6:12:26:1d:ae:41:8a:
f8:c6:d7:fa:e3:df:cf:01:26:2b:40:67:85:3c:92:3b:25:ae:
27:92:0a:5b:f6:ad:21:34:14:59:2e:9a:aa:b3:65:32:a2:a2:
0d:0e:4e:42:21:c3:24:1f:94:d9:40:8c:1a:60:99:25:7f:36:
a6:05:a2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:31:57 2026 by rpki-client