Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
File: AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft (raw, json)
Hash identifier: nWSAhMCSvYJrR2gkUbPWnlk0IV9UgMgUW3VwaW09WDQ=
Subject key identifier: DD:D2:08:32:32:F1:C4:49:89:CA:39:84:33:FD:DF:4C:6B:B8:A1:CB
Authority key identifier: 01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
Certificate issuer: /CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Certificate serial: 01A08B689C3C1FD36245C260F00D8BEC2F91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
Manifest number: 1A65
Signing time: Thu 10 Sep 2026 13:01:23 +0000
Manifest this update: Thu 10 Sep 2026 13:01:23 +0000
Manifest next update: Fri 11 Sep 2026 13:01:23 +0000
Files and hashes: 1: 0CvIXoHsvIs1B_YOF4uDh9JpSxE.roa (hash: 91sFZp4Lna3qg8mUoA4c/ZNk5BvTimCG0r/38G4vor4=)
2: 0mnkoAs85-mIhHxZL8fHwKRjWRc.roa (hash: eichc48YsRBfEc1NE+QI5LUu3kO43L633dCSshf5yAM=)
3: 5bPw81P_kxJyPAHehBzr4HJ5wlg.roa (hash: 4Hmum3YbvhBsvoDqD6ymCevyNK6B2cZ0Ry/48HKcZ6M=)
4: 6xtEtECX1hmiBfg2kCnuxEarwpg.roa (hash: 0EDHjBKP1TdEoYGKNKuRsh3vtzapWrWAjD4dmjk8Vc0=)
5: AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl (hash: WdOE+WRiKP84dNJcPKQR8klUUzjYlmQ/BNETRgT/z70=)
6: FyvKrQlLQZ08OBN_anf4pBjOJb4.roa (hash: +pZffx5xsLckndXmwboiF/Rz+edr9+ScKLx8uBSEPfQ=)
7: Jfl2HZOv0aOpTlrzfTjwSjaabBA.roa (hash: 627r3CnYmsat7UpuE0Fbc/64Tgy4fFvd4NcmRN9aPno=)
8: yugxSbIwGxz1NU3UI7VHskkezds.roa (hash: SVtVdrynk9VJBORSgvdr3639uF3/kw+eYctyJwd4PmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:68:9c:3c:1f:d3:62:45:c2:60:f0:0d:8b:ec:2f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Validity
Not Before: Sep 10 13:01:23 2026 GMT
Not After : Sep 11 13:01:23 2026 GMT
Subject: CN=ddd2083232f1c44989ca398433fddf4c6bb8a1cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f4:25:f1:4a:e7:bd:28:72:72:b6:15:8a:37:
e1:7d:a4:1d:a6:80:d6:67:05:b1:95:87:b0:4a:ad:
c7:55:b9:e6:47:fb:a2:f3:73:ae:a7:10:32:02:94:
c9:b6:fb:46:8c:22:10:9c:f6:e9:38:fd:7e:0a:2a:
a8:2d:ac:9b:b6:88:18:49:96:d0:3b:6a:1f:fa:cf:
93:76:b8:ed:f3:a5:f4:f3:f2:a6:0e:ee:c1:ca:cd:
98:df:12:27:42:2c:a6:60:a8:13:5d:97:69:f4:c7:
1f:0d:a7:a3:7b:4e:8b:bc:89:36:ad:08:13:e1:d9:
b5:f4:58:f3:1b:26:37:a5:7d:64:71:05:fe:d6:72:
dd:bd:17:34:4c:72:ec:3c:65:b7:29:d2:12:7b:45:
75:b3:51:ac:2d:41:e4:bf:7a:f4:b1:36:2d:23:48:
2b:79:5e:69:38:db:78:83:80:1d:15:4d:67:b8:02:
0c:5a:62:b3:d3:21:cf:c7:8a:b1:3c:25:34:e1:a7:
93:65:14:83:f1:6a:95:69:a0:a6:69:0a:3a:cd:90:
8c:0e:19:11:eb:e0:5c:a6:d9:a1:a5:71:32:5d:b1:
12:28:b8:6b:ee:00:c4:b3:1a:8f:49:aa:3b:82:36:
d6:2d:55:7f:f8:37:f8:2b:11:24:60:4d:92:57:e2:
d5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D2:08:32:32:F1:C4:49:89:CA:39:84:33:FD:DF:4C:6B:B8:A1:CB
X509v3 Authority Key Identifier:
keyid:01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:b4:48:35:3a:e9:91:50:60:1f:4c:af:21:fe:f9:dc:65:d8:
cf:e7:c7:53:7c:62:5c:3e:b8:de:91:a6:5b:ca:e5:cf:ac:1e:
31:a7:55:da:a1:25:1f:68:a2:f2:f6:28:fa:8b:c9:7a:6c:1e:
13:f3:7c:a1:b2:8d:98:5d:5f:d9:28:60:34:0d:35:54:36:62:
5a:01:c9:60:68:20:20:10:ae:da:c7:8f:12:af:21:30:77:a9:
9b:d6:a4:9b:45:f0:d0:da:a7:e5:95:c9:c9:01:80:27:49:73:
71:b6:2a:1f:6d:0d:0d:61:71:2b:4f:a8:1e:98:54:8f:ae:80:
b4:c5:72:e7:a1:d1:37:3e:96:78:bc:1f:b3:9c:9c:1a:f3:41:
dd:d9:05:2b:fe:bd:24:61:3a:9f:6c:db:94:de:69:4c:bd:7f:
e6:47:8d:98:f4:2c:e1:b7:f8:15:ea:a0:c5:8d:c4:25:33:64:
57:37:ff:df:a3:6e:33:09:3b:56:fa:aa:bd:df:bb:80:e4:2c:
ec:dc:ae:fe:ee:65:05:b1:79:cf:33:b0:7b:77:65:3f:8e:bd:
c5:90:ab:21:73:40:43:97:ca:47:7f:f0:3f:f4:05:78:0b:9f:
f5:ab:d0:39:b3:39:ae:dc:76:9e:3b:42:eb:6e:24:a4:80:8e:
d0:18:04:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:23:50 2026 by rpki-client