Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
File: AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft (raw, json)
Hash identifier: PjLJOJtaTldaO7u/J8GZ1SQrowWdZ8Z3ioSRBmsjSyI=
Subject key identifier: C7:9C:40:23:8A:F0:AD:AC:1B:0D:47:D2:EC:49:A9:A1:02:F5:F9:8A
Authority key identifier: 01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
Certificate issuer: /CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Certificate serial: 019EB8B4A9FC563E044A0E19A0672F973786
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
Manifest number: 1972
Signing time: Thu 11 Jun 2026 22:01:48 +0000
Manifest this update: Thu 11 Jun 2026 22:01:48 +0000
Manifest next update: Fri 12 Jun 2026 22:01:48 +0000
Files and hashes: 1: 0CvIXoHsvIs1B_YOF4uDh9JpSxE.roa (hash: 91sFZp4Lna3qg8mUoA4c/ZNk5BvTimCG0r/38G4vor4=)
2: 0mnkoAs85-mIhHxZL8fHwKRjWRc.roa (hash: eichc48YsRBfEc1NE+QI5LUu3kO43L633dCSshf5yAM=)
3: 5bPw81P_kxJyPAHehBzr4HJ5wlg.roa (hash: 4Hmum3YbvhBsvoDqD6ymCevyNK6B2cZ0Ry/48HKcZ6M=)
4: 6xtEtECX1hmiBfg2kCnuxEarwpg.roa (hash: 0EDHjBKP1TdEoYGKNKuRsh3vtzapWrWAjD4dmjk8Vc0=)
5: AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl (hash: tNOQhhv/+gkxvRWoCHXwhb1OJYfbWCpq51CleiYOEZ8=)
6: FyvKrQlLQZ08OBN_anf4pBjOJb4.roa (hash: +pZffx5xsLckndXmwboiF/Rz+edr9+ScKLx8uBSEPfQ=)
7: Jfl2HZOv0aOpTlrzfTjwSjaabBA.roa (hash: 627r3CnYmsat7UpuE0Fbc/64Tgy4fFvd4NcmRN9aPno=)
8: yugxSbIwGxz1NU3UI7VHskkezds.roa (hash: SVtVdrynk9VJBORSgvdr3639uF3/kw+eYctyJwd4PmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:b4:a9:fc:56:3e:04:4a:0e:19:a0:67:2f:97:37:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Validity
Not Before: Jun 11 22:01:48 2026 GMT
Not After : Jun 12 22:01:48 2026 GMT
Subject: CN=c79c40238af0adac1b0d47d2ec49a9a102f5f98a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4e:96:4a:14:c0:5f:97:7b:48:85:88:e2:a1:
6d:d9:e3:cf:5a:be:c5:0b:0d:c4:bb:26:ad:1a:d4:
87:32:3b:5e:b5:0c:74:96:08:5f:e5:d5:f1:1d:57:
8e:8f:8a:e6:af:3c:97:b2:d5:cf:e7:c9:e5:a0:93:
37:20:5f:23:be:be:48:ed:99:54:46:5e:f1:4e:52:
63:80:4c:5c:5f:e4:e5:8c:72:dc:40:41:df:80:4e:
0e:8c:29:db:69:c1:9f:37:0f:f1:95:d6:dd:21:85:
6a:1c:ee:90:91:24:5a:3a:df:e3:22:47:b9:2b:f3:
03:0f:c9:71:b0:56:19:39:29:e7:2a:13:92:c6:15:
59:ee:9f:17:36:17:07:ed:12:0c:2d:b7:26:1b:10:
5e:ff:13:fe:8e:9d:60:0e:38:14:4c:87:23:16:ab:
a2:23:f3:3e:8e:e1:78:7a:ea:b6:26:2d:89:72:9b:
c7:2e:e7:41:66:6c:bf:de:38:9e:e3:58:bf:76:9c:
73:fb:21:af:26:1e:0a:bd:e9:65:94:aa:91:a4:69:
f1:b5:0e:d2:26:86:43:26:8b:7d:a1:22:56:a5:db:
d1:3a:5c:d1:b6:68:b4:4f:a3:f1:c4:4a:1c:15:36:
e4:2b:5e:19:1f:7e:5e:84:e0:e2:c6:09:17:c8:6f:
2c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:9C:40:23:8A:F0:AD:AC:1B:0D:47:D2:EC:49:A9:A1:02:F5:F9:8A
X509v3 Authority Key Identifier:
keyid:01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:15:08:39:28:79:2a:a8:1e:7b:a0:0e:4c:b7:14:e8:33:6d:
75:e2:a8:5e:20:c9:44:89:95:fd:1c:35:9e:75:40:20:01:28:
81:8e:0a:bf:af:89:10:40:09:a7:08:24:78:21:75:5b:ab:78:
d0:8c:6e:c7:0f:9d:47:c7:96:6f:cc:07:9a:03:e1:b9:ee:2a:
3d:85:43:e4:c4:60:b0:e2:b0:95:94:84:55:f4:13:a8:a1:4e:
b4:80:2b:ff:3e:33:c6:8d:32:86:90:8c:4c:61:1c:59:a9:89:
d4:91:02:e7:e3:00:8f:ac:61:45:52:f8:10:25:22:6f:1f:4c:
93:bc:f3:79:b5:eb:f9:1b:cb:e6:50:0e:84:ad:67:09:4d:9b:
da:12:1b:76:e2:b1:8e:28:ec:83:19:ec:d2:81:6a:3f:c4:fb:
a0:f4:ad:f9:da:f3:09:73:62:cf:6a:04:e1:d5:38:6f:74:34:
9f:f2:e6:5d:17:74:8b:1c:fe:63:4e:1e:7f:c4:51:c1:88:0d:
48:cb:12:23:7b:17:8b:a0:37:f5:5e:b2:0c:e2:91:9e:38:dd:
9b:f3:2d:78:2d:42:01:8c:51:18:a0:b1:5a:dc:75:48:f6:77:
a3:6d:07:20:14:0a:97:61:ef:de:d3:cc:a6:ef:1a:d3:93:10:
9e:85:52:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:38:44 2026 by rpki-client