Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft
File: Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft (raw, json)
Hash identifier: XxnPRNlG7M17wDgrHPgRJpTqldM7v2+ogYx8eWNaYHs=
Subject key identifier: 05:EF:8E:01:2B:FD:2E:B9:83:A6:71:B7:F4:77:BC:64:FF:67:BA:3D
Authority key identifier: 03:1D:03:15:F7:7B:95:49:5F:60:DC:62:B3:58:E4:C1:B3:FB:5D:C0
Certificate issuer: /CN=031d0315f77b95495f60dc62b358e4c1b3fb5dc0
Certificate serial: 019F11C070896648D88935A96187E9BE746B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ax0DFfd7lUlfYNxis1jkwbP7XcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft
Manifest number: 0190
Signing time: Mon 29 Jun 2026 05:00:52 +0000
Manifest this update: Mon 29 Jun 2026 05:00:52 +0000
Manifest next update: Tue 30 Jun 2026 05:00:52 +0000
Files and hashes: 1: 273CJOloMHCNr40TZUcFVxeZFms.asa (hash: tOqMGrNI4l0VYDU+tVPacc01C6txXDyN4W2pPE0sHCs=)
2: Ax0DFfd7lUlfYNxis1jkwbP7XcA.crl (hash: znQjyWa7STrsNjNuEaeehB31swgm8Hyr1kXvJc4jC+4=)
3: WfIBNFBJCmDGiwOF58LkEkU6i_k.asa (hash: M5LpZEXgCwgBFWCXLQ6KoLhrTqWESWDvJESM0Dp+OEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ax0DFfd7lUlfYNxis1jkwbP7XcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:c0:70:89:66:48:d8:89:35:a9:61:87:e9:be:74:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=031d0315f77b95495f60dc62b358e4c1b3fb5dc0
Validity
Not Before: Jun 29 05:00:52 2026 GMT
Not After : Jun 30 05:00:52 2026 GMT
Subject: CN=05ef8e012bfd2eb983a671b7f477bc64ff67ba3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b6:d2:99:04:a8:3c:ae:95:9c:00:1d:08:82:
f7:94:da:44:54:8d:20:28:8a:30:89:5f:fb:3e:c5:
43:de:19:d8:09:6e:fd:c2:d4:14:78:17:04:f9:a2:
b2:cc:17:22:65:f2:24:e8:13:55:cf:ff:ca:22:9d:
44:b0:b6:87:7c:2f:be:12:34:bb:b6:b4:ce:31:23:
63:a6:98:fa:22:5c:5e:0e:6e:56:6a:07:d9:5d:c2:
26:82:1d:bf:61:9b:04:c9:62:3c:5e:30:fb:0d:a9:
93:e3:06:05:3f:8b:7c:98:c8:a7:12:b9:8b:e8:47:
e3:ea:88:5b:ae:be:2c:8f:78:f0:d4:45:11:cf:91:
b0:aa:df:01:93:7a:4e:70:8a:fc:f9:cb:72:ef:e4:
20:98:61:c8:25:87:c8:3c:f4:1e:74:12:27:62:04:
ca:81:30:34:54:68:fe:9f:9b:d9:1b:6b:c8:df:08:
6e:c8:c5:4f:16:1e:44:2b:e5:41:77:0c:c0:d0:30:
c9:83:8f:07:71:a4:73:e7:5f:ab:fd:d8:56:21:16:
18:3d:e3:07:73:96:82:8a:a1:7d:ef:b3:0e:01:d6:
f7:4f:bb:91:86:c2:1d:e6:62:92:14:3f:57:46:d4:
3e:54:0f:88:0b:0e:6a:43:0e:f7:77:76:d8:e8:f1:
88:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:EF:8E:01:2B:FD:2E:B9:83:A6:71:B7:F4:77:BC:64:FF:67:BA:3D
X509v3 Authority Key Identifier:
keyid:03:1D:03:15:F7:7B:95:49:5F:60:DC:62:B3:58:E4:C1:B3:FB:5D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ax0DFfd7lUlfYNxis1jkwbP7XcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:fc:35:69:59:a8:8e:af:47:3f:fc:37:8c:c2:97:13:be:60:
c6:ba:1f:ae:62:2a:d1:90:44:e5:13:71:16:04:9d:3b:97:22:
56:ec:1a:64:01:a5:f8:32:47:78:c4:99:11:bc:bf:db:d1:ea:
53:59:54:5a:15:bf:51:96:b7:ce:d9:d6:42:5e:ca:e1:de:45:
f5:8c:98:69:8f:71:3d:e3:84:7e:72:68:6f:43:54:88:79:6a:
9f:61:83:f2:bc:fb:52:a0:e7:04:1b:5c:3c:22:9b:c4:44:47:
0e:b4:8c:1d:2b:4b:72:49:5f:45:5c:28:22:17:f6:bf:05:bd:
fc:69:48:ab:fd:f0:26:fb:85:22:21:05:ac:10:d6:53:15:32:
dd:75:bc:2c:3d:77:c6:90:1b:49:d7:06:59:d4:59:c1:8e:8f:
96:21:8e:8d:c2:e4:63:ce:29:38:b7:31:11:38:87:a1:9c:7f:
f8:8f:ee:f0:a6:42:e8:a7:b9:ae:eb:03:6c:b0:6f:df:07:4d:
a3:7e:7b:3c:c6:cc:f2:55:bc:55:72:b7:86:a9:d2:e9:38:52:
7f:18:01:29:3e:e9:28:1a:c6:2b:25:e5:31:0c:eb:e0:50:d5:
29:c5:67:e3:ca:0c:1d:34:25:30:ed:99:83:b2:70:02:55:15:
bc:bd:8b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:37:10 2026 by rpki-client