Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft
File: Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft (raw, json)
Hash identifier: pJ2NCV/Lt9syUnzc73tuFkkOI9Gwq8odh6p4nMiaqag=
Subject key identifier: 1B:29:8B:FB:27:C1:F8:26:C7:F7:6B:A2:69:4E:E0:46:B9:54:01:20
Authority key identifier: 03:1D:03:15:F7:7B:95:49:5F:60:DC:62:B3:58:E4:C1:B3:FB:5D:C0
Certificate issuer: /CN=031d0315f77b95495f60dc62b358e4c1b3fb5dc0
Certificate serial: 019D389C6094B51651BBF49666142473A5AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ax0DFfd7lUlfYNxis1jkwbP7XcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft
Manifest number: 9B
Signing time: Sun 29 Mar 2026 08:01:05 +0000
Manifest this update: Sun 29 Mar 2026 08:01:05 +0000
Manifest next update: Mon 30 Mar 2026 08:01:05 +0000
Files and hashes: 1: 273CJOloMHCNr40TZUcFVxeZFms.asa (hash: tOqMGrNI4l0VYDU+tVPacc01C6txXDyN4W2pPE0sHCs=)
2: Ax0DFfd7lUlfYNxis1jkwbP7XcA.crl (hash: q/mu1rtIie5811BJeEm215Tlf2civo83XPaCaOgBi34=)
3: WfIBNFBJCmDGiwOF58LkEkU6i_k.asa (hash: M5LpZEXgCwgBFWCXLQ6KoLhrTqWESWDvJESM0Dp+OEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ax0DFfd7lUlfYNxis1jkwbP7XcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:60:94:b5:16:51:bb:f4:96:66:14:24:73:a5:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=031d0315f77b95495f60dc62b358e4c1b3fb5dc0
Validity
Not Before: Mar 29 08:01:05 2026 GMT
Not After : Mar 30 08:01:05 2026 GMT
Subject: CN=1b298bfb27c1f826c7f76ba2694ee046b9540120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bd:b9:a3:dd:47:13:7d:ee:24:d2:f4:46:31:
3b:41:40:ac:3a:fe:78:b1:ab:a3:9c:9a:f7:80:ce:
70:6d:6d:13:1c:1b:e2:b7:33:0a:cc:37:43:ee:b7:
78:68:f9:13:8c:b2:3e:d0:af:ad:6d:75:ed:ae:26:
6e:3a:48:d9:f0:32:3b:e1:4d:62:4a:3b:89:47:05:
49:d0:88:76:ad:50:ed:0c:72:02:0f:46:49:d7:20:
93:60:be:a4:1d:40:04:fc:b0:c3:e8:d5:4c:98:f4:
a9:0d:4a:58:3f:3b:81:15:2e:25:cf:e6:9d:71:ba:
2b:46:a2:cb:41:fd:ef:4c:d6:2b:ad:31:55:73:75:
90:5f:5e:7e:87:75:57:8f:aa:dd:44:d5:06:81:b8:
a7:dc:20:d9:a2:e0:b8:9c:fd:01:f7:03:dd:fe:63:
2e:63:da:33:51:fd:47:d4:9b:95:37:6f:fb:29:e2:
91:e8:73:12:41:b8:d5:8c:12:be:51:64:7d:75:36:
d1:13:4b:7e:bd:a3:0c:8a:27:0c:11:84:63:39:32:
03:e4:a0:4b:7f:61:42:ca:51:b3:93:0b:24:39:6c:
4c:d9:f9:48:08:80:e9:96:5c:51:84:80:f4:d8:3b:
4e:7a:01:4a:94:30:50:a2:b7:a9:d5:75:9a:69:e8:
4c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:29:8B:FB:27:C1:F8:26:C7:F7:6B:A2:69:4E:E0:46:B9:54:01:20
X509v3 Authority Key Identifier:
keyid:03:1D:03:15:F7:7B:95:49:5F:60:DC:62:B3:58:E4:C1:B3:FB:5D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ax0DFfd7lUlfYNxis1jkwbP7XcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:a4:06:ab:ab:c0:97:72:49:71:b0:f6:d6:b1:ba:9e:2e:92:
17:41:d9:76:05:1c:45:d3:e9:87:65:da:7f:79:1d:8a:10:28:
a1:dc:9d:73:e3:55:c0:45:05:b9:1e:12:12:0a:76:10:df:b0:
b1:64:2e:bd:eb:82:e0:8d:68:f1:98:c9:73:85:06:c3:d1:2e:
7d:85:7d:62:f9:cb:d9:3f:f7:e9:df:98:b7:b4:7e:1c:30:41:
2b:af:da:f3:dc:51:98:04:0a:4d:32:97:af:53:ab:56:6a:e8:
34:26:06:4c:13:9c:6c:a4:7d:47:b7:ce:49:99:61:e8:0b:67:
f3:3f:7f:56:0d:26:78:72:2a:f5:cf:5a:01:ab:6b:18:12:4b:
3f:d7:46:cc:c6:f8:31:8b:22:03:33:e8:9f:b0:7a:9c:83:db:
93:6f:be:26:96:7e:ea:71:e8:c7:1a:29:8e:12:ef:12:85:9c:
f0:f6:24:f0:49:02:c5:17:72:9f:dd:3e:5e:5d:91:bb:a5:9c:
ca:7f:65:6e:2c:ba:6a:d2:18:d8:d6:25:26:af:3d:dd:f2:9a:
3c:a4:62:21:48:e3:d8:ff:29:b9:6f:d9:07:a4:02:7c:aa:a1:
4b:af:cf:82:84:45:13:13:cc:8d:b9:87:99:c5:17:1c:16:50:
86:9c:cb:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:47 2026 by rpki-client