Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
File: AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft (raw, json)
Hash identifier: Uax2xyoh4w3sMQD8M7EFJl5n8yXMzHijfba7WLwyZkk=
Subject key identifier: 0E:F1:6A:81:52:19:24:F0:0A:42:FE:BF:D7:65:E5:23:82:87:F3:1A
Authority key identifier: 01:7C:90:65:46:53:AC:15:00:28:56:2B:32:43:14:91:B5:21:47:D1
Certificate issuer: /CN=017c90654653ac150028562b32431491b52147d1
Certificate serial: 01A0D6149A7F5EF7BF0A7B312A55A711DCD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
Manifest number: 124E
Signing time: Fri 25 Sep 2026 01:01:09 +0000
Manifest this update: Fri 25 Sep 2026 01:01:09 +0000
Manifest next update: Sat 26 Sep 2026 01:01:09 +0000
Files and hashes: 1: AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl (hash: RPF2eUW2sCtMzWO9NIMsnfmJ1BXNCrkVgjhHEdEVPoI=)
2: Bi1XXzWo6lnTEVYADTXqjFg4Phs.roa (hash: CcN3AAar9jL+JjbAjisL+jzrcTOAzrlyvwRjw6mb2gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:14:9a:7f:5e:f7:bf:0a:7b:31:2a:55:a7:11:dc:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=017c90654653ac150028562b32431491b52147d1
Validity
Not Before: Sep 25 01:01:09 2026 GMT
Not After : Sep 26 01:01:09 2026 GMT
Subject: CN=0ef16a81521924f00a42febfd765e5238287f31a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5f:cd:e0:3a:58:61:75:45:be:3e:e2:a7:19:
d2:96:1f:17:7f:c9:82:01:b4:8b:a8:af:58:38:5f:
af:cb:49:6e:da:e4:70:b4:a5:af:7b:c4:0e:25:6e:
f5:62:67:e6:e8:88:cd:ae:25:82:e2:62:99:51:80:
8d:79:5b:bb:0f:40:cd:56:f1:26:64:97:4a:72:47:
f5:82:db:18:fe:31:85:4b:c1:a7:d8:b7:65:3a:b6:
7a:4d:df:2a:b2:47:c9:a3:53:81:d1:b8:5c:9d:9a:
97:9c:eb:48:a2:2d:90:94:68:02:e6:0a:29:75:62:
85:83:f0:6d:d6:d3:7c:e1:3d:b8:14:d8:c9:4c:4a:
39:c6:2d:d5:5e:79:48:f6:4f:77:9b:79:df:f4:df:
e1:89:8f:8c:a1:79:e6:f4:c1:07:50:ac:98:4c:a9:
4f:fc:18:e8:d6:53:36:bd:3d:7e:24:e0:8d:ee:3f:
7a:f0:aa:f3:a3:ee:46:9d:23:97:02:3f:ba:34:cf:
d1:48:54:d4:dd:06:af:9b:42:5f:59:ba:b6:75:72:
50:3c:ee:25:37:45:a0:42:70:12:8c:a7:9f:96:87:
8c:49:23:7b:75:22:95:7e:eb:b8:fb:22:e7:43:5d:
0a:8a:03:1f:d8:71:9c:4e:07:d3:b8:da:b0:6b:55:
dd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F1:6A:81:52:19:24:F0:0A:42:FE:BF:D7:65:E5:23:82:87:F3:1A
X509v3 Authority Key Identifier:
keyid:01:7C:90:65:46:53:AC:15:00:28:56:2B:32:43:14:91:B5:21:47:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:c5:95:32:2b:dc:57:dd:2c:8d:f6:84:7e:83:a2:4c:de:0e:
c7:af:d6:bd:21:0e:95:92:dd:10:5f:39:ee:3b:7a:53:8f:18:
32:7f:99:70:65:cd:e0:5a:63:af:5b:0c:c9:27:11:f5:13:6f:
4d:ed:49:5f:2a:58:93:f1:56:76:43:1d:36:31:97:eb:f8:59:
af:72:a1:d6:18:6f:84:7d:08:8f:4e:88:cb:06:8e:3c:3d:1c:
ca:d2:e2:f7:38:5d:f0:18:00:a9:12:4b:e7:15:6f:a9:de:a9:
81:b7:6b:dc:45:8f:36:ea:30:dc:6b:4f:c2:c5:b1:50:72:f7:
0d:a0:cb:25:47:a4:9b:30:c2:19:d4:82:9e:f4:33:17:36:a0:
89:e3:d2:11:00:b7:02:cf:17:5e:18:fb:87:f4:fb:f9:39:6c:
3a:d4:75:91:7a:27:a5:fd:6c:a5:6d:2c:14:6c:96:00:3f:c4:
8b:c9:65:e7:ef:ba:b5:49:38:6f:a5:a5:c2:16:3e:d2:a8:03:
1a:44:2a:a4:3d:71:34:22:97:4b:a4:8b:75:5c:7c:8e:5e:41:
94:59:01:19:33:d9:8e:23:80:44:e4:0d:e3:75:21:29:b4:b5:
11:bf:f9:0f:4b:15:02:eb:6c:df:8b:3f:48:40:f6:49:20:ae:
99:17:f3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:12:23 2026 by rpki-client