Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft
File: axnRvKx1IxLsTeb1vTmszjKra9Y.mft (raw, json)
Hash identifier: /x7NjGU5lGxRkTJoFBbelrlmQKMjfumKzYhDAwQvnCo=
Subject key identifier: EE:C2:4F:54:20:7F:0D:76:D0:09:90:85:A1:B8:DB:79:AE:F9:5B:1A
Authority key identifier: 6B:19:D1:BC:AC:75:23:12:EC:4D:E6:F5:BD:39:AC:CE:32:AB:6B:D6
Certificate issuer: /CN=6b19d1bcac752312ec4de6f5bd39acce32ab6bd6
Certificate serial: 01A165346060D3991C8121CCEE1DA7FAA1B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axnRvKx1IxLsTeb1vTmszjKra9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft
Manifest number: 18AE
Signing time: Thu 22 Oct 2026 20:01:33 +0000
Manifest this update: Thu 22 Oct 2026 20:01:33 +0000
Manifest next update: Fri 23 Oct 2026 20:01:33 +0000
Files and hashes: 1: URIXovot20BpTLwGW5N6pOlLgy4.roa (hash: wvN6iNM+Z86YXZPPdosS4TWVox9d1Df0z+4sQXyWazA=)
2: axnRvKx1IxLsTeb1vTmszjKra9Y.crl (hash: cgeGOscSdqICyU+Z69e4S2lELj8GT2nONvK90TfRVgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/axnRvKx1IxLsTeb1vTmszjKra9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:65:34:60:60:d3:99:1c:81:21:cc:ee:1d:a7:fa:a1:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b19d1bcac752312ec4de6f5bd39acce32ab6bd6
Validity
Not Before: Oct 22 20:01:33 2026 GMT
Not After : Oct 23 20:01:33 2026 GMT
Subject: CN=eec24f54207f0d76d0099085a1b8db79aef95b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c3:53:0a:0d:4b:bf:dc:04:81:60:ca:99:01:
c5:5a:57:65:60:f5:00:8d:9a:86:43:8c:7f:a2:d8:
ff:d9:d6:34:5a:07:a1:d7:e4:80:6f:1d:34:60:ed:
c1:1f:c8:4b:5f:a2:e7:cb:96:f6:d2:c4:e8:a5:9f:
0f:8d:99:ff:7c:db:20:52:c4:c5:97:39:b9:15:03:
5e:b2:78:c3:2e:2a:cd:2d:3f:19:fb:64:00:03:09:
c3:c1:e9:c7:82:0e:37:14:a6:47:45:f4:57:f3:13:
7b:24:48:3e:17:31:22:1e:7d:89:cb:c1:97:8f:61:
dc:8e:41:a9:ea:d7:53:62:2d:f3:80:bd:29:9e:1c:
a7:74:a7:8d:14:c7:0a:cd:18:37:89:92:3d:46:1f:
18:c6:42:55:df:65:b7:ba:15:fe:bc:83:90:5b:da:
0c:e1:11:50:4b:4f:ed:d3:43:81:9d:dd:bb:14:22:
a9:e2:e0:32:9d:70:ca:41:bc:90:95:5a:ce:3a:e0:
07:b3:50:68:a9:e1:e3:fa:a4:7d:a1:59:42:2c:3f:
8f:8a:4d:41:4d:b0:53:3e:77:e2:f6:a9:ca:47:2b:
5a:b7:b5:3f:10:a3:6c:5c:d8:72:46:a3:7f:d7:74:
e5:d2:67:50:bd:84:86:83:88:44:11:9b:ba:dd:45:
34:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C2:4F:54:20:7F:0D:76:D0:09:90:85:A1:B8:DB:79:AE:F9:5B:1A
X509v3 Authority Key Identifier:
keyid:6B:19:D1:BC:AC:75:23:12:EC:4D:E6:F5:BD:39:AC:CE:32:AB:6B:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axnRvKx1IxLsTeb1vTmszjKra9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:19:d2:ea:c5:bb:d3:bf:d0:f2:ae:84:cf:77:e1:c9:f3:99:
0f:9d:c1:f7:a5:9a:6e:13:46:71:3b:7b:50:97:50:ad:51:54:
84:ae:5f:00:0f:f2:67:52:74:2b:5d:2b:a1:6f:0f:02:5f:b3:
d6:e0:79:01:b1:19:77:3a:3d:9a:a6:0e:68:52:4c:6f:bd:2a:
69:05:85:e7:84:da:c9:41:46:18:27:11:33:01:3f:57:a0:49:
e9:b1:a6:1d:1f:78:01:5a:2c:95:5d:d3:37:29:91:88:f4:44:
c8:67:71:35:17:85:5a:3b:7b:7f:7a:76:f0:ee:7f:19:9a:12:
0c:bf:94:5c:2c:04:09:d5:07:8b:1b:31:15:c8:54:75:6d:e4:
bd:0d:9e:4a:02:ff:ab:a4:d8:5c:5f:80:07:49:1b:9f:ba:9e:
d8:92:f2:55:63:7a:69:43:36:58:79:53:23:0e:00:d6:eb:b4:
ef:c0:84:1d:94:10:57:e4:f3:1d:2b:3c:9f:58:5e:5a:a6:59:
15:a1:19:83:a5:86:f6:60:cb:b4:c0:ee:d0:64:8e:96:00:6c:
a1:bf:7f:22:df:6b:59:37:3b:72:53:19:11:98:08:62:d9:4e:
ef:44:5d:f2:04:46:00:5d:54:74:a5:0b:eb:b0:af:15:55:c9:
e1:73:f4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 03:51:52 2026 by rpki-client