
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft
File: Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft (raw, json)
Hash identifier: N/KucR+2xRP33D3zGOEmzOpmDMs6vdtHYWEBfSnMXKQ=
Subject key identifier: DC:F4:23:45:99:C5:45:78:3E:51:2F:70:EE:08:9B:A9:9E:A4:6A:E9
Authority key identifier: 03:1D:03:15:F7:7B:95:49:5F:60:DC:62:B3:58:E4:C1:B3:FB:5D:C0
Certificate issuer: /CN=031d0315f77b95495f60dc62b358e4c1b3fb5dc0
Certificate serial: 019E2A02711FE37C876CC8E3233F5B4EF553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ax0DFfd7lUlfYNxis1jkwbP7XcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft
Manifest number: 0118
Signing time: Fri 15 May 2026 05:01:03 +0000
Manifest this update: Fri 15 May 2026 05:01:03 +0000
Manifest next update: Sat 16 May 2026 05:01:03 +0000
Files and hashes: 1: 273CJOloMHCNr40TZUcFVxeZFms.asa (hash: tOqMGrNI4l0VYDU+tVPacc01C6txXDyN4W2pPE0sHCs=)
2: Ax0DFfd7lUlfYNxis1jkwbP7XcA.crl (hash: v62ekIa/3CyISMNDAIJDTpXm+FK10fzWjO7o4jdq2FM=)
3: WfIBNFBJCmDGiwOF58LkEkU6i_k.asa (hash: M5LpZEXgCwgBFWCXLQ6KoLhrTqWESWDvJESM0Dp+OEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ax0DFfd7lUlfYNxis1jkwbP7XcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:02:71:1f:e3:7c:87:6c:c8:e3:23:3f:5b:4e:f5:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=031d0315f77b95495f60dc62b358e4c1b3fb5dc0
Validity
Not Before: May 15 05:01:03 2026 GMT
Not After : May 16 05:01:03 2026 GMT
Subject: CN=dcf4234599c545783e512f70ee089ba99ea46ae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2b:0d:75:19:ed:ce:12:9b:cc:d2:9c:17:36:
61:25:6e:66:68:5a:4e:39:d5:34:5a:23:48:70:24:
8c:90:67:27:51:b3:db:df:74:53:91:66:83:53:83:
e6:74:db:cd:1e:65:f0:8e:07:84:22:bc:6a:09:e1:
78:23:23:b3:08:21:4d:0b:61:63:d3:b6:d8:2a:6f:
de:4f:cb:81:b8:be:2e:a2:26:17:bf:0a:7d:3e:66:
97:94:51:e2:e2:3a:fb:c5:7c:c6:0a:14:4a:4b:27:
8d:42:c1:30:32:08:d4:d7:86:b0:d0:18:d8:aa:a8:
a2:46:9f:c2:e2:eb:97:c6:20:c5:5d:53:89:f4:d0:
21:63:eb:c6:51:7f:ad:08:75:62:2c:5c:9c:56:0e:
63:f3:25:56:e2:2a:cf:67:9e:4b:87:25:ca:42:2c:
97:17:90:3d:23:44:68:29:6e:2c:61:f1:e8:8c:16:
e2:27:ef:91:87:e6:a4:fe:e6:b5:d4:d0:2f:ba:f7:
72:34:ad:f6:14:ce:b6:d2:8e:1f:a0:be:fe:32:ca:
29:8f:0a:ed:57:b6:e2:67:2d:29:0c:e6:2c:55:33:
62:0b:0f:01:45:7a:4d:0d:81:76:ca:42:bf:e7:c1:
0b:95:1f:4a:32:c5:b1:d1:28:63:54:56:b4:6c:d2:
6c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F4:23:45:99:C5:45:78:3E:51:2F:70:EE:08:9B:A9:9E:A4:6A:E9
X509v3 Authority Key Identifier:
keyid:03:1D:03:15:F7:7B:95:49:5F:60:DC:62:B3:58:E4:C1:B3:FB:5D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ax0DFfd7lUlfYNxis1jkwbP7XcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/8af340-262b-4cd8-b2ee-5fb9a08be7de/1/Ax0DFfd7lUlfYNxis1jkwbP7XcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:64:b1:f6:4f:f5:6d:ae:e5:31:82:cc:59:ab:9d:b4:b8:da:
9b:72:6e:b0:64:bf:a2:04:28:ae:ad:d8:c6:c0:c7:6d:33:9a:
b9:2f:aa:8c:b0:0c:bf:64:5b:aa:bd:32:e7:a6:7c:8a:4f:a9:
ed:43:c9:b9:cb:7c:01:e1:6e:a7:4e:29:ab:a8:86:c6:39:a4:
40:6e:1a:df:5a:26:65:74:d2:23:b0:b0:4c:be:c0:49:ad:1c:
67:89:cc:d5:87:9e:0b:72:36:cb:d7:6b:e9:4f:df:96:c7:43:
f3:10:79:ba:0d:51:41:87:75:96:4a:73:09:bc:1c:4c:7a:77:
6a:cf:27:ad:2f:a6:e3:9e:f4:56:9a:90:f7:ed:a9:5a:b6:e5:
c3:0c:d7:aa:b8:aa:48:63:e0:8c:f7:8d:6d:8c:7e:17:77:a2:
ca:6b:ca:be:e6:8e:1a:17:15:00:13:75:ed:77:e9:ee:8a:30:
50:73:b6:af:5e:ea:d4:3f:6f:1b:c0:41:56:b8:1f:bb:5a:51:
3a:5e:a1:72:a6:7e:04:61:71:9a:28:4e:4f:7d:16:79:ce:9e:
36:dc:47:f5:86:3f:84:34:75:56:bc:34:ed:47:b1:55:9f:9a:
5e:6c:f6:f7:58:9e:88:ad:b2:a5:15:a7:50:10:33:a7:66:e5:
d1:43:34:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4qAnEf43yHbMjjIz9bTvVTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMWQwMzE1Zjc3Yjk1NDk1ZjYwZGM2MmIzNThlNGMxYjNm
YjVkYzAwHhcNMjYwNTE1MDUwMTAzWhcNMjYwNTE2MDUwMTAzWjAzMTEwLwYDVQQD
EyhkY2Y0MjM0NTk5YzU0NTc4M2U1MTJmNzBlZTA4OWJhOTllYTQ2YWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCsNdRntzhKbzNKcFzZhJW5maFpO
OdU0WiNIcCSMkGcnUbPb33RTkWaDU4PmdNvNHmXwjgeEIrxqCeF4IyOzCCFNC2Fj
07bYKm/eT8uBuL4uoiYXvwp9PmaXlFHi4jr7xXzGChRKSyeNQsEwMgjU14aw0BjY
qqiiRp/C4uuXxiDFXVOJ9NAhY+vGUX+tCHViLFycVg5j8yVW4irPZ55LhyXKQiyX
F5A9I0RoKW4sYfHojBbiJ++Rh+ak/ua11NAvuvdyNK32FM620o4foL7+Msopjwrt
V7biZy0pDOYsVTNiCw8BRXpNDYF2ykK/58ELlR9KMsWx0ShjVFa0bNJs8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNz0I0WZxUV4PlEvcO4Im6mepGrpMB8GA1UdIwQY
MBaAFAMdAxX3e5VJX2DcYrNY5MGz+13AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXgwREZmZDdsVWxmWU54aXMxamt3YlA3WGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC84YWYzNDAtMjYyYi00Y2Q4LWIyZWUt
NWZiOWEwOGJlN2RlLzEvQXgwREZmZDdsVWxmWU54aXMxamt3YlA3WGNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC84YWYzNDAtMjYyYi00Y2Q4LWIyZWUtNWZiOWEwOGJlN2Rl
LzEvQXgwREZmZDdsVWxmWU54aXMxamt3YlA3WGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoGSx9k/1
ba7lMYLMWaudtLjam3JusGS/ogQorq3YxsDHbTOauS+qjLAMv2Rbqr0y56Z8ik+p
7UPJuct8AeFup04pq6iGxjmkQG4a31omZXTSI7CwTL7ASa0cZ4nM1YeeC3I2y9dr
6U/flsdD8xB5ug1RQYd1lkpzCbwcTHp3as8nrS+m4570VpqQ9+2pWrblwwzXqriq
SGPgjPeNbYx+F3eiymvKvuaOGhcVABN17Xfp7oowUHO2r17q1D9vG8BBVrgfu1pR
Ol6hcqZ+BGFxmihOT30Wec6eNtxH9YY/hDR1Vrw07UexVZ+aXmz291ieiK2ypRWn
UBAzp2bl0UM0QQ==
-----END CERTIFICATE-----
Generated at Fri May 15 06:19:33 2026 by rpki-client