Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft
File: Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft (raw, json)
Hash identifier: jZgeIjvN5VoeuqpphtGAyxgLlHdNUlplKQQlzKfIYSg=
Subject key identifier: 17:C9:E3:D2:51:51:4D:5C:7C:A5:53:BE:E8:D9:B4:32:11:0E:C9:9D
Authority key identifier: 03:1D:03:15:F7:7B:95:49:5F:60:DC:62:B3:58:E4:C1:B3:FB:5D:C0
Certificate issuer: /CN=031d0315f77b95495f60dc62b358e4c1b3fb5dc0
Certificate serial: 01A0317F8ECC4B744788DB2834DEB5CEE36E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ax0DFfd7lUlfYNxis1jkwbP7XcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft
Manifest number: 0225
Signing time: Mon 24 Aug 2026 02:00:38 +0000
Manifest this update: Mon 24 Aug 2026 02:00:38 +0000
Manifest next update: Tue 25 Aug 2026 02:00:38 +0000
Files and hashes: 1: 273CJOloMHCNr40TZUcFVxeZFms.asa (hash: tOqMGrNI4l0VYDU+tVPacc01C6txXDyN4W2pPE0sHCs=)
2: Ax0DFfd7lUlfYNxis1jkwbP7XcA.crl (hash: +5e1GZPGF28AFWyrTfVIpw3G1KnpfZlZ9NxzWOzNhNc=)
3: WfIBNFBJCmDGiwOF58LkEkU6i_k.asa (hash: M5LpZEXgCwgBFWCXLQ6KoLhrTqWESWDvJESM0Dp+OEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ax0DFfd7lUlfYNxis1jkwbP7XcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Aug 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:31:7f:8e:cc:4b:74:47:88:db:28:34:de:b5:ce:e3:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=031d0315f77b95495f60dc62b358e4c1b3fb5dc0
Validity
Not Before: Aug 24 02:00:38 2026 GMT
Not After : Aug 25 02:00:38 2026 GMT
Subject: CN=17c9e3d251514d5c7ca553bee8d9b432110ec99d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:10:d5:15:c0:6a:c5:8a:58:48:72:04:79:61:
55:eb:11:51:0b:42:13:56:dc:c1:2c:e8:c3:da:80:
0d:bb:bf:c5:ab:df:93:b9:d3:99:d0:29:56:6e:26:
0a:5a:9a:25:68:4c:70:41:e9:34:5b:2d:fa:94:f9:
43:27:1a:d2:dd:6d:30:cb:b5:a9:d0:e4:02:f8:a8:
fc:20:b8:74:cf:5e:8d:82:96:8c:2d:5f:23:a6:be:
a5:a0:a8:0a:9d:97:e7:ed:70:09:7d:1a:d6:ec:e3:
dd:50:4b:0f:cc:f0:b4:75:77:94:0e:80:ae:fb:b2:
f1:cc:7c:be:92:fe:7c:3a:13:e9:02:e0:40:f9:75:
e7:6e:0c:0c:2c:92:4a:64:9d:52:09:90:16:21:c5:
cc:7a:7a:66:51:44:32:4f:e9:1d:71:d7:d8:d9:96:
2f:8d:e6:5c:1b:ae:ce:ae:2f:bf:04:aa:4f:9e:84:
f9:b5:d9:d3:1c:f2:b4:e3:17:c8:93:8f:c0:3b:26:
b3:fe:98:e5:c6:cb:b5:18:0a:36:46:4c:08:af:ba:
56:f3:5b:97:bb:c8:0c:f7:4f:ba:8f:33:16:4e:f8:
49:0e:a0:82:65:9f:1b:60:2e:31:17:a4:b4:c1:46:
93:1a:c4:f3:6d:93:9b:9d:7b:9b:d2:2e:41:87:b7:
59:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C9:E3:D2:51:51:4D:5C:7C:A5:53:BE:E8:D9:B4:32:11:0E:C9:9D
X509v3 Authority Key Identifier:
keyid:03:1D:03:15:F7:7B:95:49:5F:60:DC:62:B3:58:E4:C1:B3:FB:5D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ax0DFfd7lUlfYNxis1jkwbP7XcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:4e:cd:97:ac:da:63:58:03:a6:fa:9b:5a:2c:36:59:d1:fc:
ec:aa:b1:20:41:ac:e5:6b:53:bd:63:ca:72:fc:a6:cb:2b:2c:
6d:b1:12:76:41:fb:49:f5:fe:a8:aa:16:55:1f:7d:10:9f:f3:
55:11:d3:81:8e:f6:a8:ac:98:8f:43:95:8b:d7:27:5e:75:55:
e4:a7:d0:15:fd:45:04:23:37:3d:06:1b:45:bc:d4:60:00:fd:
7b:31:51:26:8a:58:a7:84:1d:ee:0a:59:55:6e:c1:52:45:9a:
dc:e7:62:64:05:64:6c:d0:20:f1:98:f6:e4:e9:b6:ed:5f:d7:
8d:8d:17:87:25:62:92:ce:74:8c:c5:1d:79:b1:a5:a1:b5:e6:
a5:4b:29:e2:ff:d3:5a:8b:32:14:0c:d4:c1:d2:d5:f3:4f:77:
45:30:a8:93:e8:e4:4a:e3:38:d2:24:8c:6f:fb:07:56:b3:85:
03:5f:57:c5:b8:15:00:94:80:e6:43:15:9d:e8:df:61:29:d7:
a3:a2:1e:f0:15:37:b5:d3:86:74:95:58:49:34:ee:73:62:7d:
26:40:5b:e2:58:47:03:40:17:9e:5f:0f:1b:c6:af:53:9f:3a:
8f:7d:0e:2c:b4:f8:26:25:50:2d:c0:0e:a0:d8:68:26:ec:55:
c0:be:ea:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAxf47MS3RHiNsoNN61zuNuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMWQwMzE1Zjc3Yjk1NDk1ZjYwZGM2MmIzNThlNGMxYjNm
YjVkYzAwHhcNMjYwODI0MDIwMDM4WhcNMjYwODI1MDIwMDM4WjAzMTEwLwYDVQQD
EygxN2M5ZTNkMjUxNTE0ZDVjN2NhNTUzYmVlOGQ5YjQzMjExMGVjOTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxDVFcBqxYpYSHIEeWFV6xFRC0IT
VtzBLOjD2oANu7/Fq9+TudOZ0ClWbiYKWpolaExwQek0Wy36lPlDJxrS3W0wy7Wp
0OQC+Kj8ILh0z16NgpaMLV8jpr6loKgKnZfn7XAJfRrW7OPdUEsPzPC0dXeUDoCu
+7LxzHy+kv58OhPpAuBA+XXnbgwMLJJKZJ1SCZAWIcXMenpmUUQyT+kdcdfY2ZYv
jeZcG67Ori+/BKpPnoT5tdnTHPK04xfIk4/AOyaz/pjlxsu1GAo2RkwIr7pW81uX
u8gM90+6jzMWTvhJDqCCZZ8bYC4xF6S0wUaTGsTzbZObnXub0i5Bh7dZCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBfJ49JRUU1cfKVTvujZtDIRDsmdMB8GA1UdIwQY
MBaAFAMdAxX3e5VJX2DcYrNY5MGz+13AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXgwREZmZDdsVWxmWU54aXMxamt3YlA3WGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC84YWYzNDAtMjYyYi00Y2Q4LWIyZWUt
NWZiOWEwOGJlN2RlLzEvQXgwREZmZDdsVWxmWU54aXMxamt3YlA3WGNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC84YWYzNDAtMjYyYi00Y2Q4LWIyZWUtNWZiOWEwOGJlN2Rl
LzEvQXgwREZmZDdsVWxmWU54aXMxamt3YlA3WGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGU7Nl6za
Y1gDpvqbWiw2WdH87KqxIEGs5WtTvWPKcvymyyssbbESdkH7SfX+qKoWVR99EJ/z
VRHTgY72qKyYj0OVi9cnXnVV5KfQFf1FBCM3PQYbRbzUYAD9ezFRJopYp4Qd7gpZ
VW7BUkWa3OdiZAVkbNAg8Zj25Om27V/XjY0XhyViks50jMUdebGlobXmpUsp4v/T
WosyFAzUwdLV8093RTCok+jkSuM40iSMb/sHVrOFA19XxbgVAJSA5kMVnejfYSnX
o6Ie8BU3tdOGdJVYSTTuc2J9JkBb4lhHA0AXnl8PG8avU586j30OLLT4JiVQLcAO
oNhoJuxVwL7qvA==
-----END CERTIFICATE-----
Generated at Mon Aug 24 06:45:00 2026 by rpki-client