Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
File: AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft (raw, json)
Hash identifier: 1MpfXXPbUejpmr2lDQtoYPvyg3kUjIzykpCdDuxiYTo=
Subject key identifier: 52:D4:E9:BE:35:E4:5F:17:A6:3F:B4:AB:40:EC:0A:88:09:BE:64:87
Authority key identifier: 01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
Certificate issuer: /CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Certificate serial: 019DCD18F2E82E070E3F8BEF10BB53B5E469
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
Manifest number: 18F8
Signing time: Mon 27 Apr 2026 04:00:57 +0000
Manifest this update: Mon 27 Apr 2026 04:00:57 +0000
Manifest next update: Tue 28 Apr 2026 04:00:57 +0000
Files and hashes: 1: 0CvIXoHsvIs1B_YOF4uDh9JpSxE.roa (hash: 91sFZp4Lna3qg8mUoA4c/ZNk5BvTimCG0r/38G4vor4=)
2: 0mnkoAs85-mIhHxZL8fHwKRjWRc.roa (hash: eichc48YsRBfEc1NE+QI5LUu3kO43L633dCSshf5yAM=)
3: 5bPw81P_kxJyPAHehBzr4HJ5wlg.roa (hash: 4Hmum3YbvhBsvoDqD6ymCevyNK6B2cZ0Ry/48HKcZ6M=)
4: 6xtEtECX1hmiBfg2kCnuxEarwpg.roa (hash: 0EDHjBKP1TdEoYGKNKuRsh3vtzapWrWAjD4dmjk8Vc0=)
5: AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl (hash: vHrcgyKUzk/uwIC4ILKawNEb+AgzQTrirBrYZBRH3eg=)
6: FyvKrQlLQZ08OBN_anf4pBjOJb4.roa (hash: +pZffx5xsLckndXmwboiF/Rz+edr9+ScKLx8uBSEPfQ=)
7: Jfl2HZOv0aOpTlrzfTjwSjaabBA.roa (hash: 627r3CnYmsat7UpuE0Fbc/64Tgy4fFvd4NcmRN9aPno=)
8: yugxSbIwGxz1NU3UI7VHskkezds.roa (hash: SVtVdrynk9VJBORSgvdr3639uF3/kw+eYctyJwd4PmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:18:f2:e8:2e:07:0e:3f:8b:ef:10:bb:53:b5:e4:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Validity
Not Before: Apr 27 04:00:57 2026 GMT
Not After : Apr 28 04:00:57 2026 GMT
Subject: CN=52d4e9be35e45f17a63fb4ab40ec0a8809be6487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8f:d1:0a:ad:b5:e1:e7:d1:1d:b3:b5:20:39:
93:53:46:a9:a3:80:e3:61:c6:9e:3b:6d:39:01:d3:
79:81:e1:6c:64:ff:34:64:95:47:23:b6:59:81:6d:
72:a9:03:99:bf:66:59:06:82:94:17:b6:3f:19:c5:
89:32:ff:70:bb:dd:c2:30:4c:fb:05:a7:06:4e:d4:
54:40:69:94:c8:cf:52:b0:25:27:44:dc:2c:7e:37:
10:e3:ce:7d:dc:04:4d:8b:e2:e3:35:71:d9:be:66:
67:62:7b:b5:a1:d3:64:5c:23:82:bf:86:6e:3e:7f:
91:01:96:7b:65:fe:8d:e2:76:a4:0a:13:9f:92:27:
67:c9:7b:b1:5c:12:de:13:9d:ba:23:e8:ac:91:9a:
c1:67:77:9a:c4:84:45:1b:aa:50:1e:35:f8:77:c3:
95:6a:78:e0:1b:78:e5:8a:30:13:58:38:21:82:3b:
54:31:60:2d:10:00:28:24:18:e7:05:f7:38:79:76:
41:4c:87:2a:9b:ac:13:3d:6e:57:eb:95:67:b6:94:
5d:1b:30:14:d2:2f:78:61:e8:44:a4:4c:fb:dc:14:
b6:ff:ff:67:dc:a5:d3:c0:77:ec:57:b3:f5:90:18:
06:d4:0c:61:f2:8c:b5:34:d8:cf:31:47:fa:92:cc:
c6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D4:E9:BE:35:E4:5F:17:A6:3F:B4:AB:40:EC:0A:88:09:BE:64:87
X509v3 Authority Key Identifier:
keyid:01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:9d:82:12:c8:5c:03:10:e2:81:9e:30:a4:c0:03:cf:4d:ee:
f2:da:6b:6a:f6:89:8c:36:16:30:a8:b1:a4:81:4b:fd:24:a9:
4c:23:f1:21:1d:ec:9a:57:26:ec:ce:2e:b0:e2:e9:6c:5d:61:
39:4c:cd:c4:80:3e:b6:83:10:a0:d3:94:fa:66:2c:78:d6:72:
45:71:15:74:b3:41:90:c1:79:be:89:62:7e:01:20:a5:ed:ce:
10:9c:3f:9a:73:6c:52:14:8f:12:ce:48:a9:60:7f:47:b0:40:
80:26:d6:d6:9c:8e:02:ea:2c:c3:d2:47:fd:ee:23:71:96:24:
68:87:db:bf:c3:9f:1f:4d:7c:9f:c1:61:7a:2b:da:98:13:8a:
75:c5:e1:f6:78:d4:eb:5a:ad:18:ad:b5:fc:5c:36:14:b4:36:
f5:62:d7:09:86:7c:00:67:d9:aa:72:43:d1:b0:84:38:54:a0:
71:37:07:85:ea:43:21:af:18:c7:dd:a2:65:9b:05:07:a9:8e:
ac:1e:34:31:1d:63:56:88:8a:fa:56:ef:8d:7e:ae:be:40:c2:
2e:ad:b3:e3:01:2b:cb:32:a1:21:2f:ee:20:22:9f:54:67:e0:
42:09:0d:66:e7:22:a2:42:67:32:e4:cf:b5:a5:15:d8:21:27:
db:b9:ff:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:33:56 2026 by rpki-client