Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft
File: axnRvKx1IxLsTeb1vTmszjKra9Y.mft (raw, json)
Hash identifier: JbTGDbjN9iSfrTo6bEDqMDzg+hqItNxMGfigv0Iw8tM=
Subject key identifier: 97:B3:35:51:5F:F9:6B:84:D2:8F:D2:CB:4C:4A:E9:4B:A8:E2:D6:7C
Authority key identifier: 6B:19:D1:BC:AC:75:23:12:EC:4D:E6:F5:BD:39:AC:CE:32:AB:6B:D6
Certificate issuer: /CN=6b19d1bcac752312ec4de6f5bd39acce32ab6bd6
Certificate serial: 019D37525BC957528C48104E7C9C54DCBE71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axnRvKx1IxLsTeb1vTmszjKra9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft
Manifest number: 1684
Signing time: Sun 29 Mar 2026 02:00:37 +0000
Manifest this update: Sun 29 Mar 2026 02:00:37 +0000
Manifest next update: Mon 30 Mar 2026 02:00:37 +0000
Files and hashes: 1: URIXovot20BpTLwGW5N6pOlLgy4.roa (hash: wvN6iNM+Z86YXZPPdosS4TWVox9d1Df0z+4sQXyWazA=)
2: axnRvKx1IxLsTeb1vTmszjKra9Y.crl (hash: cE+jAmisxs+zRlkChAtSHTQDX99esgre6jEdq03jPn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/axnRvKx1IxLsTeb1vTmszjKra9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:5b:c9:57:52:8c:48:10:4e:7c:9c:54:dc:be:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b19d1bcac752312ec4de6f5bd39acce32ab6bd6
Validity
Not Before: Mar 29 02:00:37 2026 GMT
Not After : Mar 30 02:00:37 2026 GMT
Subject: CN=97b335515ff96b84d28fd2cb4c4ae94ba8e2d67c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:78:b8:a1:8c:a0:ac:67:55:77:5e:fd:46:cb:
eb:60:af:77:1f:e8:00:16:1b:ed:8b:da:bc:22:f1:
97:74:7d:36:c8:d6:ba:05:a7:84:92:4f:ca:03:2d:
44:94:3d:f2:ce:27:ad:27:af:15:64:1a:4f:ee:3d:
a0:73:4f:07:3d:20:ab:a1:cf:ed:b2:e7:7c:e2:ab:
7c:2f:37:bc:b0:20:4a:71:92:c8:47:61:e9:32:8f:
b3:c6:9a:71:53:3b:60:3f:ba:36:c1:b3:9d:52:e1:
c3:0c:8c:8e:6a:ec:0a:9e:56:84:fb:27:16:da:6a:
1a:45:79:7c:0b:5f:6a:30:a0:e3:50:7b:77:44:85:
bb:22:49:1b:ec:c7:f7:f8:67:b3:a1:9b:bc:8e:4f:
b0:b0:07:23:af:cd:a1:cf:2a:ed:32:35:02:a9:c7:
45:4b:bd:b3:d3:f4:67:ab:d4:62:b6:36:b4:72:c2:
57:d3:27:f6:78:a1:90:13:f8:27:ab:a9:c6:7f:fa:
ff:a5:c5:dc:de:4b:6e:93:0c:96:43:0e:5f:b3:fc:
63:7b:3e:88:1a:7a:25:38:ca:93:ad:cd:ae:ab:75:
7e:e5:04:bc:43:bb:64:b3:8a:66:18:db:aa:70:07:
6c:f3:99:9a:17:1a:06:1e:92:0f:71:f6:5c:f9:db:
6b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B3:35:51:5F:F9:6B:84:D2:8F:D2:CB:4C:4A:E9:4B:A8:E2:D6:7C
X509v3 Authority Key Identifier:
keyid:6B:19:D1:BC:AC:75:23:12:EC:4D:E6:F5:BD:39:AC:CE:32:AB:6B:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axnRvKx1IxLsTeb1vTmszjKra9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:6d:04:e2:64:71:ee:f3:3a:84:99:f3:c0:8c:09:a7:15:65:
97:b7:f8:40:56:d7:f9:9f:83:99:7c:75:d3:8c:f9:1c:df:89:
b4:ad:8c:07:ff:3b:ec:98:d0:02:6c:6c:20:83:d5:9e:e0:ba:
90:95:0c:81:d6:34:2b:38:86:9b:5a:47:03:34:94:c0:51:70:
4c:66:71:a4:60:8d:7a:1c:68:c3:c3:43:1e:2b:e9:c3:aa:96:
03:57:c1:da:8a:86:92:fc:70:27:8c:93:46:99:73:aa:77:e8:
55:89:78:2d:a1:cf:af:a9:b3:c7:85:39:40:dc:63:7f:99:2f:
f5:bb:84:66:f2:fe:17:95:8f:8d:70:74:11:c3:db:5c:ac:07:
bd:cd:e8:7f:34:c0:97:ca:41:9c:a6:0e:01:b7:6f:58:a8:2c:
f4:45:99:5b:af:8b:f4:26:fd:a3:16:03:bc:ab:e7:16:c4:c2:
e6:ad:2e:e5:c6:82:50:7c:6d:e7:f4:ae:f7:7c:0a:cb:9f:36:
57:ed:4b:0a:4d:f4:ce:e9:a1:db:da:41:bc:ae:68:5d:cb:20:
9d:00:5f:43:b0:5d:d0:27:5c:f8:a4:12:26:2c:23:c8:d1:a7:
19:72:42:61:61:2a:56:c1:48:a3:09:bc:e4:22:eb:56:47:ba:
16:2e:8a:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UlvJV1KMSBBOfJxU3L5xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMTlkMWJjYWM3NTIzMTJlYzRkZTZmNWJkMzlhY2NlMzJh
YjZiZDYwHhcNMjYwMzI5MDIwMDM3WhcNMjYwMzMwMDIwMDM3WjAzMTEwLwYDVQQD
Eyg5N2IzMzU1MTVmZjk2Yjg0ZDI4ZmQyY2I0YzRhZTk0YmE4ZTJkNjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA93i4oYygrGdVd179RsvrYK93H+gA
Fhvti9q8IvGXdH02yNa6BaeEkk/KAy1ElD3yzietJ68VZBpP7j2gc08HPSCroc/t
sud84qt8Lze8sCBKcZLIR2HpMo+zxppxUztgP7o2wbOdUuHDDIyOauwKnlaE+ycW
2moaRXl8C19qMKDjUHt3RIW7Ikkb7Mf3+GezoZu8jk+wsAcjr82hzyrtMjUCqcdF
S72z0/Rnq9Ritja0csJX0yf2eKGQE/gnq6nGf/r/pcXc3ktukwyWQw5fs/xjez6I
GnolOMqTrc2uq3V+5QS8Q7tks4pmGNuqcAds85maFxoGHpIPcfZc+dtrdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJezNVFf+WuE0o/Sy0xK6Uuo4tZ8MB8GA1UdIwQY
MBaAFGsZ0bysdSMS7E3m9b05rM4yq2vWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXhuUnZLeDFJeExzVGViMXZUbXN6aktyYTlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC83Nzc3NDYtZmJlZi00ZTU4LWFmZGYt
YjU1MWU0OTQzNWEyLzEvYXhuUnZLeDFJeExzVGViMXZUbXN6aktyYTlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC83Nzc3NDYtZmJlZi00ZTU4LWFmZGYtYjU1MWU0OTQzNWEy
LzEvYXhuUnZLeDFJeExzVGViMXZUbXN6aktyYTlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkm0E4mRx
7vM6hJnzwIwJpxVll7f4QFbX+Z+DmXx104z5HN+JtK2MB/877JjQAmxsIIPVnuC6
kJUMgdY0KziGm1pHAzSUwFFwTGZxpGCNehxow8NDHivpw6qWA1fB2oqGkvxwJ4yT
RplzqnfoVYl4LaHPr6mzx4U5QNxjf5kv9buEZvL+F5WPjXB0EcPbXKwHvc3ofzTA
l8pBnKYOAbdvWKgs9EWZW6+L9Cb9oxYDvKvnFsTC5q0u5caCUHxt5/Su93wKy582
V+1LCk30zumh29pBvK5oXcsgnQBfQ7Bd0Cdc+KQSJiwjyNGnGXJCYWEqVsFIowm8
5CLrVke6Fi6KDw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:23 2026 by rpki-client