Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
File: AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft (raw, json)
Hash identifier: SPiolEM1DOaaeWqpy3jWrVlp+BDs6g56KQgnIApJtn4=
Subject key identifier: 05:41:34:77:76:0B:58:A8:38:4B:3A:FC:C3:4F:BB:93:56:AA:A2:3E
Authority key identifier: 01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
Certificate issuer: /CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Certificate serial: 01A17CCEDE820BD2301366F11CD05D65A81C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
Manifest number: 1AE2
Signing time: Tue 27 Oct 2026 10:01:34 +0000
Manifest this update: Tue 27 Oct 2026 10:01:34 +0000
Manifest next update: Wed 28 Oct 2026 10:01:34 +0000
Files and hashes: 1: 0CvIXoHsvIs1B_YOF4uDh9JpSxE.roa (hash: 91sFZp4Lna3qg8mUoA4c/ZNk5BvTimCG0r/38G4vor4=)
2: 0mnkoAs85-mIhHxZL8fHwKRjWRc.roa (hash: eichc48YsRBfEc1NE+QI5LUu3kO43L633dCSshf5yAM=)
3: 5bPw81P_kxJyPAHehBzr4HJ5wlg.roa (hash: 4Hmum3YbvhBsvoDqD6ymCevyNK6B2cZ0Ry/48HKcZ6M=)
4: 6xtEtECX1hmiBfg2kCnuxEarwpg.roa (hash: 0EDHjBKP1TdEoYGKNKuRsh3vtzapWrWAjD4dmjk8Vc0=)
5: AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl (hash: 5+Ig4I5V7einnCn6PNi526hifCk2nb5Goi2kMgjBq8A=)
6: FyvKrQlLQZ08OBN_anf4pBjOJb4.roa (hash: +pZffx5xsLckndXmwboiF/Rz+edr9+ScKLx8uBSEPfQ=)
7: Jfl2HZOv0aOpTlrzfTjwSjaabBA.roa (hash: 627r3CnYmsat7UpuE0Fbc/64Tgy4fFvd4NcmRN9aPno=)
8: yugxSbIwGxz1NU3UI7VHskkezds.roa (hash: SVtVdrynk9VJBORSgvdr3639uF3/kw+eYctyJwd4PmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:ce:de:82:0b:d2:30:13:66:f1:1c:d0:5d:65:a8:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Validity
Not Before: Oct 27 10:01:34 2026 GMT
Not After : Oct 28 10:01:34 2026 GMT
Subject: CN=05413477760b58a8384b3afcc34fbb9356aaa23e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4b:03:aa:03:60:13:79:f1:b2:a3:11:43:26:
d0:f6:e0:43:c8:f0:ae:87:4b:72:b8:30:f3:bf:f8:
48:fb:18:e0:a2:37:9f:05:61:2a:a0:b6:2f:ea:c8:
4e:a0:84:eb:48:8c:a0:a7:a2:93:cd:e2:d0:3f:b9:
76:15:be:11:b7:07:d0:51:02:67:03:7d:95:6b:c2:
74:5b:6a:a6:62:91:23:68:d4:3a:28:ec:ef:ad:c0:
ba:60:72:d1:85:bf:5e:47:c4:4a:c7:fb:60:06:56:
90:7e:bb:f6:1b:eb:cb:52:e7:b0:32:c6:15:b0:32:
b4:42:74:a1:37:31:89:21:4b:06:4c:f6:6c:8d:3c:
23:b3:dc:ed:41:3b:d9:b2:eb:d5:80:f8:8e:ef:d0:
97:1e:be:be:2c:4e:34:29:62:1a:ad:99:af:ef:1c:
a1:8d:56:f9:04:7c:bc:da:66:ec:87:c0:35:bd:0c:
1d:6a:90:51:44:fc:de:ca:cb:fa:67:ed:2b:31:76:
d0:c1:0f:3f:89:9c:36:71:99:2e:61:4b:56:06:12:
07:84:a5:67:4c:9c:f9:93:da:8f:7c:5e:0d:f5:17:
af:3b:d4:33:26:84:58:17:8b:36:10:b5:e7:c2:f9:
59:44:3f:12:e0:84:9b:d1:09:cd:37:dc:61:a5:a9:
84:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:41:34:77:76:0B:58:A8:38:4B:3A:FC:C3:4F:BB:93:56:AA:A2:3E
X509v3 Authority Key Identifier:
keyid:01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:41:23:6d:47:8f:7d:64:c2:23:4b:d3:8f:04:30:f8:44:ea:
99:92:26:05:d0:4c:2b:22:21:21:64:04:bb:c7:ff:6a:f4:26:
f1:85:65:2f:45:d8:b9:39:00:f1:88:4b:4a:a6:3b:cd:3a:e2:
f1:6a:30:13:e3:58:ef:62:d9:31:a5:18:bd:5a:f8:88:a8:5d:
a9:ec:3f:99:a8:33:8e:90:ad:91:69:4a:f2:12:46:da:ce:e9:
bd:21:2e:a2:f0:cb:a9:37:77:da:b2:bb:10:b4:92:59:1a:78:
a3:ad:52:a8:a1:28:73:b3:7c:b4:28:02:ac:8a:ad:af:2f:4f:
61:5d:f0:21:e6:09:c7:fc:c2:ef:16:bd:94:9b:65:ab:a1:4d:
9d:ed:11:f1:a8:3a:1c:6c:3d:51:1d:e0:69:70:8e:8c:30:d1:
26:bf:de:6c:31:43:b5:05:6b:6b:bb:6c:b0:e5:31:bc:ff:fe:
ee:58:9c:5b:3d:7c:f9:cf:81:fd:2d:97:73:64:80:6c:b4:4a:
fa:8f:dd:6c:70:60:c3:7b:57:f2:bd:b0:48:86:80:69:dc:d5:
26:f1:d4:b7:c1:f9:8e:12:a2:01:63:ce:13:0e:07:10:25:af:
13:1d:df:b0:b8:bd:d1:b0:74:81:1e:e4:99:22:34:66:90:78:
f2:81:a9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:33:30 2026 by rpki-client