Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
File: axpX8G73IAfdYZP5YKYWNEtzMB8.mft (raw, json)
Hash identifier: y7zZ1DrKAy7vduWygg2WVVXx6kr2PaDhLgcs7IDNafk=
Subject key identifier: 59:0F:7F:03:07:D3:2D:5A:F1:FF:0B:52:40:76:F9:A6:E9:20:E5:72
Authority key identifier: 6B:1A:57:F0:6E:F7:20:07:DD:61:93:F9:60:A6:16:34:4B:73:30:1F
Certificate issuer: /CN=6b1a57f06ef72007dd6193f960a616344b73301f
Certificate serial: 019D2772F1ABF0D4E1363504B806AE9C74E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
Manifest number: 159E
Signing time: Thu 26 Mar 2026 00:02:17 +0000
Manifest this update: Thu 26 Mar 2026 00:02:17 +0000
Manifest next update: Fri 27 Mar 2026 00:02:17 +0000
Files and hashes: 1: axpX8G73IAfdYZP5YKYWNEtzMB8.crl (hash: hgsTQXbpkWmV60LahuY2V3IssXIUmacp0OLCnh7V0TY=)
2: yWDSl9yDDWwKXKm5areAK-BgE_4.roa (hash: 9t658G/RphCv/dZEb8OenZ41/3jlcAPrpuRTSbCffNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:f1:ab:f0:d4:e1:36:35:04:b8:06:ae:9c:74:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b1a57f06ef72007dd6193f960a616344b73301f
Validity
Not Before: Mar 26 00:02:17 2026 GMT
Not After : Mar 27 00:02:17 2026 GMT
Subject: CN=590f7f0307d32d5af1ff0b524076f9a6e920e572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f2:81:12:d6:a2:1b:04:b1:5f:1d:cf:02:a3:
d9:dc:ee:72:d6:9f:98:27:be:c1:57:1a:0b:1e:43:
e5:4b:92:2e:1b:ed:2e:13:6e:8a:30:95:d5:1f:0d:
12:df:8b:27:95:b6:57:57:f9:6b:e2:94:ca:99:b5:
4f:02:59:2a:e7:ff:93:ce:06:9f:ea:89:50:a6:96:
74:d4:a9:b1:68:6c:f3:96:3d:69:47:31:b5:e7:dc:
50:36:68:f3:50:da:c9:72:e0:5d:33:f6:87:be:ed:
6d:0e:b9:3c:ef:aa:f2:db:dc:29:6c:ab:22:3c:b7:
31:5c:ff:8f:f6:00:f8:a6:69:c6:24:49:43:df:7e:
82:04:cb:cf:1e:3b:9b:20:1d:5b:0e:77:4a:4f:34:
ee:cb:1f:09:cb:dd:64:4c:97:c3:d3:21:4c:be:fd:
6d:72:f9:ba:1b:5e:f9:d2:b3:57:ee:3b:c7:63:a7:
a0:71:db:c4:f2:ba:c0:c2:c3:4d:2a:a8:e6:8e:9c:
2a:ff:86:c4:68:f5:ae:5a:81:35:ce:a1:6b:e5:84:
9f:0e:d6:37:ac:ce:9b:9a:bc:55:49:a2:47:5c:b1:
b3:37:39:e9:82:bc:21:f7:c6:c8:74:0e:f5:a9:5a:
6a:d7:7d:36:be:8b:cd:cb:a6:86:14:fb:da:fa:7b:
f9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:0F:7F:03:07:D3:2D:5A:F1:FF:0B:52:40:76:F9:A6:E9:20:E5:72
X509v3 Authority Key Identifier:
keyid:6B:1A:57:F0:6E:F7:20:07:DD:61:93:F9:60:A6:16:34:4B:73:30:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:2d:58:fa:e2:b1:c6:5b:de:c3:df:f9:5d:92:ae:86:49:f2:
3e:af:15:46:e5:83:0c:8c:e8:59:b6:09:4a:0e:36:cf:6a:ae:
36:2c:d3:13:f1:a3:cf:25:d5:db:cf:37:92:28:62:0f:dc:4b:
18:4a:86:e8:f4:07:68:3f:c1:ca:12:82:47:ce:30:91:e6:07:
30:60:ed:8b:3f:3a:4f:71:a5:05:54:ba:22:ab:d7:52:29:c2:
2d:b6:2f:d7:34:c0:f1:01:b2:17:fc:bb:04:9a:93:65:ab:17:
dd:a5:ae:a5:c7:84:72:64:91:d7:c5:d7:f9:6a:4c:1e:ea:23:
0c:50:13:e6:6e:18:e9:3e:7e:83:96:01:32:72:4e:68:e3:08:
0f:52:70:53:64:da:51:08:67:87:b7:c1:cd:18:62:83:cf:1c:
c3:e5:5a:a7:98:b8:81:23:8c:40:2a:91:a5:00:8b:ae:6d:0b:
aa:d1:30:7b:70:83:52:5e:4f:d1:f1:f7:c3:e2:b7:66:f3:29:
6f:94:69:73:38:84:1c:f7:46:73:39:64:f2:d1:e8:ba:33:49:
52:d1:23:c0:0a:0c:cf:1d:0f:3d:e4:37:5d:3b:b4:7c:9b:0b:
e9:3f:5b:c8:6c:35:7b:33:b8:1e:93:4c:4e:b1:be:04:ae:78:
ef:cb:50:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:14:31 2026 by rpki-client