Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
File: AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft (raw, json)
Hash identifier: csB36h9eW8G1Mrpj+bMYkJQFuvgs0kCW4R6QAJpbi7c=
Subject key identifier: A3:A3:D9:AE:96:90:89:74:7F:86:3E:59:ED:FA:22:54:F7:8C:24:F7
Authority key identifier: 01:7C:90:65:46:53:AC:15:00:28:56:2B:32:43:14:91:B5:21:47:D1
Certificate issuer: /CN=017c90654653ac150028562b32431491b52147d1
Certificate serial: 019F91A3D8210D9A3896F6A57034E57CB455
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
Manifest number: 11A6
Signing time: Fri 24 Jul 2026 01:01:01 +0000
Manifest this update: Fri 24 Jul 2026 01:01:01 +0000
Manifest next update: Sat 25 Jul 2026 01:01:01 +0000
Files and hashes: 1: AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl (hash: 34Fp2/7hcPQjNgXYDyNmRw5qs/uGGQ3GUtcDOXgWoVU=)
2: Bi1XXzWo6lnTEVYADTXqjFg4Phs.roa (hash: CcN3AAar9jL+JjbAjisL+jzrcTOAzrlyvwRjw6mb2gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:d8:21:0d:9a:38:96:f6:a5:70:34:e5:7c:b4:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=017c90654653ac150028562b32431491b52147d1
Validity
Not Before: Jul 24 01:01:01 2026 GMT
Not After : Jul 25 01:01:01 2026 GMT
Subject: CN=a3a3d9ae969089747f863e59edfa2254f78c24f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:91:57:1c:67:fd:97:cb:54:e4:b0:f1:4e:d2:
6e:18:21:dc:b5:fc:6f:22:df:53:e2:9a:32:56:9b:
43:09:76:97:fb:4c:27:b7:81:5a:ce:79:ce:4f:85:
f8:cd:f1:8a:44:da:41:3d:e3:0f:cc:5b:65:56:51:
f1:50:76:90:8d:0c:d2:61:53:33:27:31:d1:b3:18:
cf:b4:46:f1:fd:e2:06:c9:ac:ee:4c:9a:99:bf:02:
e3:9d:0d:9a:3b:a4:c5:8f:20:3c:41:c5:e7:55:94:
4e:e3:53:f3:4d:55:6c:4d:2e:7e:1c:3e:66:a5:50:
77:ff:11:94:84:53:44:00:77:63:ce:be:5e:15:03:
6f:6f:c2:e4:65:98:68:5f:f6:88:15:8f:6e:03:a2:
56:28:22:07:70:82:9e:77:04:bb:23:69:27:f8:95:
6f:75:d4:b4:ef:bf:7d:41:cc:ee:59:7e:a4:08:da:
67:c2:85:ce:db:54:12:25:2b:4c:9a:d5:50:7c:db:
59:cc:a2:99:a3:bd:55:01:19:70:63:52:77:07:c2:
78:9d:49:6a:3b:29:bf:7a:b0:5c:93:7b:30:e1:8a:
24:39:cf:4c:ae:51:d0:ea:33:0d:7b:c6:c4:cd:8e:
62:b5:f3:e2:cb:4d:f4:a8:60:29:1f:87:39:95:4b:
a0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A3:D9:AE:96:90:89:74:7F:86:3E:59:ED:FA:22:54:F7:8C:24:F7
X509v3 Authority Key Identifier:
keyid:01:7C:90:65:46:53:AC:15:00:28:56:2B:32:43:14:91:B5:21:47:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:00:5a:2c:af:7e:cb:43:ae:42:33:99:8f:0c:dc:56:05:62:
5e:3b:0a:36:89:9d:4f:1e:2a:2b:f0:b3:61:e9:01:a2:62:27:
a9:eb:97:39:56:71:15:56:a4:90:a8:cb:43:68:2a:e5:4c:55:
90:2c:cd:a5:57:15:2a:18:01:4a:45:58:02:15:bf:05:b5:58:
3c:3d:45:7c:7f:02:0a:3f:c6:06:43:03:8d:d7:84:ac:c1:d4:
8d:38:09:4a:1f:83:bb:fe:ae:4f:c2:31:cf:c2:0d:32:f9:28:
50:d4:8d:56:50:b1:85:2c:0f:65:67:77:36:c3:f9:0d:8a:2d:
2f:bc:8e:86:0a:ea:0e:78:f4:ff:6f:9b:15:c5:20:cc:21:73:
df:5c:3e:d2:9a:9a:87:6e:d1:5c:0b:0e:73:25:08:fa:87:a1:
bc:7b:0b:f3:89:af:89:4a:6f:63:f1:2c:7b:3a:f1:8a:70:b7:
b6:91:5d:61:44:e4:4f:e6:83:10:40:b9:30:f1:fe:22:e0:49:
88:0a:55:97:4b:26:3a:86:9a:10:31:39:17:06:34:5f:19:84:
60:6d:9c:ca:ac:b6:71:8c:79:12:7f:e8:02:8d:10:93:53:76:
6c:56:c4:7d:54:95:d2:96:46:25:92:9c:8d:61:a8:9e:c8:f5:
dc:7b:d1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:24:55 2026 by rpki-client