Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/421476-b808-485e-bb56-f19a2fde1e6a/1/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.mft
File: Ax7Erh0E2uFAFcYn-jlrPvzlYGI.mft (raw, json)
Hash identifier: /8+P+yGUNny+I15mbfgWRL8l5ca6sKrZKr3PLVckUCc=
Subject key identifier: 3A:59:87:EE:38:1B:44:AE:BD:A3:70:EC:64:DC:2E:9D:70:6C:C3:2B
Authority key identifier: 03:1E:C4:AE:1D:04:DA:E1:40:15:C6:27:FA:39:6B:3E:FC:E5:60:62
Certificate issuer: /CN=031ec4ae1d04dae14015c627fa396b3efce56062
Certificate serial: 01A03F3B81A3A6A0C7F9A2F0CCDDCC53D4DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/421476-b808-485e-bb56-f19a2fde1e6a/1/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.mft
Manifest number: 041B
Signing time: Wed 26 Aug 2026 18:00:59 +0000
Manifest this update: Wed 26 Aug 2026 18:00:59 +0000
Manifest next update: Thu 27 Aug 2026 18:00:59 +0000
Files and hashes: 1: 4insj3pucuWS5WBRNtcX06ZuH-Y.roa (hash: VUuXsJpu6FaH+zLOTesRLETFV8rJOEX7P+g0BMZ48VA=)
2: Ax7Erh0E2uFAFcYn-jlrPvzlYGI.crl (hash: nWlM81D9ngLaIajzyL/7X7vGndudttyQmpg+M4N8HhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/421476-b808-485e-bb56-f19a2fde1e6a/1/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/421476-b808-485e-bb56-f19a2fde1e6a/1/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 18:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:3b:81:a3:a6:a0:c7:f9:a2:f0:cc:dd:cc:53:d4:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=031ec4ae1d04dae14015c627fa396b3efce56062
Validity
Not Before: Aug 26 18:00:59 2026 GMT
Not After : Aug 27 18:00:59 2026 GMT
Subject: CN=3a5987ee381b44aebda370ec64dc2e9d706cc32b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ca:89:4b:fa:8b:2a:44:36:f8:79:12:92:22:
a8:7c:42:aa:7d:c9:c4:2a:c1:7e:34:cd:d5:5b:95:
d7:a0:47:90:cc:25:c2:83:c6:34:55:6b:61:11:8d:
00:52:86:69:73:63:76:00:d9:11:70:04:85:e6:9e:
02:62:d7:c9:bb:dc:45:26:c6:18:5c:3e:bb:cf:73:
4a:46:d2:79:91:ba:88:c7:e3:71:c8:ad:01:79:d7:
20:72:d5:4c:d4:a8:ed:25:4a:f6:10:91:0a:7f:80:
87:3d:d6:12:d1:18:c2:2c:ed:c1:0a:02:7a:30:d8:
f2:f3:b3:29:be:df:28:87:e2:ca:52:73:d9:a7:89:
89:29:08:ec:98:47:6c:fa:68:b6:06:dc:e1:82:b9:
15:c8:39:52:bf:aa:76:2a:91:e9:fd:b8:cc:23:60:
0f:b8:0d:de:0e:c7:6e:f5:33:28:d9:91:a2:1b:d3:
f4:ae:3b:71:9b:9e:71:08:58:29:6c:e7:66:9b:56:
98:c5:ed:41:50:56:76:7d:76:57:0e:f1:8b:f3:fc:
12:03:a3:e1:22:37:54:76:cb:e1:8c:7f:4f:54:19:
c9:88:fb:a7:6f:d3:27:68:70:ae:f9:6f:36:01:47:
2a:0f:a7:6d:07:ec:7c:18:24:1f:36:2a:ce:32:c4:
71:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:59:87:EE:38:1B:44:AE:BD:A3:70:EC:64:DC:2E:9D:70:6C:C3:2B
X509v3 Authority Key Identifier:
keyid:03:1E:C4:AE:1D:04:DA:E1:40:15:C6:27:FA:39:6B:3E:FC:E5:60:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/421476-b808-485e-bb56-f19a2fde1e6a/1/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/421476-b808-485e-bb56-f19a2fde1e6a/1/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:0b:6b:6e:bc:9d:81:a9:39:51:af:3e:fc:5a:20:a5:34:4d:
ca:f1:db:c1:25:c7:73:d9:94:e6:f7:38:b9:cc:0a:0b:cc:ba:
3f:90:cc:71:70:15:ca:38:e9:bd:04:18:41:e1:22:6b:54:41:
96:5e:6c:df:cd:52:61:64:e5:19:e9:39:6a:9a:7d:59:01:96:
c7:c5:1d:ba:5f:41:9a:9c:1a:f9:27:53:8d:27:6f:7a:61:bb:
0e:79:7c:d7:9b:56:fa:ac:0c:83:58:2a:9c:53:4c:56:51:bd:
4f:15:75:91:cf:49:63:62:87:16:3a:cb:23:68:7c:13:93:aa:
d9:36:d3:32:33:57:c2:3a:79:4c:4c:7b:cc:92:3e:64:a6:e8:
30:2d:06:fe:d4:fb:b3:e2:e7:bd:f4:cc:a1:74:3a:56:3e:02:
73:6b:ab:8b:9c:47:86:36:97:8b:33:d5:90:24:dd:e0:8c:58:
fa:ee:65:e3:ee:5d:a9:05:88:7f:b3:45:17:b3:ad:44:c1:91:
f8:d8:a9:b4:1b:f0:9f:1a:95:90:2b:ee:43:bf:37:85:c0:79:
42:03:6a:33:69:0b:cf:bc:3b:37:6c:99:54:9f:b3:13:47:5a:
94:b7:dc:a1:57:30:8b:4d:c9:7e:5c:68:54:be:64:14:63:8b:
1c:7b:1d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:54:12 2026 by rpki-client