Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/5ce86e-27d2-48c2-88b5-f181b6e80a62/1/2axioKJWftFz3CqtN25FXIW8trs.mft
File: 2axioKJWftFz3CqtN25FXIW8trs.mft (raw, json)
Hash identifier: q6nJdfyIqcit9gqdM0c9MMl8S5m/eHvpyfxqU7MJEJs=
Subject key identifier: 98:7E:14:6F:10:56:A3:48:CC:F4:F7:0F:E7:96:EB:56:65:25:B9:CA
Authority key identifier: D9:AC:62:A0:A2:56:7E:D1:73:DC:2A:AD:37:6E:45:5C:85:BC:B6:BB
Certificate issuer: /CN=d9ac62a0a2567ed173dc2aad376e455c85bcb6bb
Certificate serial: 01A0D56FCD4E80C3E0496DBF849D268D01F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2axioKJWftFz3CqtN25FXIW8trs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/5ce86e-27d2-48c2-88b5-f181b6e80a62/1/2axioKJWftFz3CqtN25FXIW8trs.mft
Manifest number: 1A6A
Signing time: Thu 24 Sep 2026 22:01:09 +0000
Manifest this update: Thu 24 Sep 2026 22:01:09 +0000
Manifest next update: Fri 25 Sep 2026 22:01:09 +0000
Files and hashes: 1: 2axioKJWftFz3CqtN25FXIW8trs.crl (hash: goX7mMsbtV4CApwSI6MfXAi45imKlsFbsDv2ldKD5cM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/5ce86e-27d2-48c2-88b5-f181b6e80a62/1/2axioKJWftFz3CqtN25FXIW8trs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/5ce86e-27d2-48c2-88b5-f181b6e80a62/1/2axioKJWftFz3CqtN25FXIW8trs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2axioKJWftFz3CqtN25FXIW8trs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:6f:cd:4e:80:c3:e0:49:6d:bf:84:9d:26:8d:01:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ac62a0a2567ed173dc2aad376e455c85bcb6bb
Validity
Not Before: Sep 24 22:01:09 2026 GMT
Not After : Sep 25 22:01:09 2026 GMT
Subject: CN=987e146f1056a348ccf4f70fe796eb566525b9ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e0:e8:77:0b:40:5f:a7:c9:93:71:95:e3:5e:
dd:20:3e:f4:10:c3:8d:2a:52:e8:ef:ad:ae:f4:c3:
15:99:e3:1b:9c:58:41:6c:13:ca:08:fa:6d:45:54:
53:35:1a:3b:35:e0:28:54:f5:62:4d:da:01:59:b6:
7a:1a:72:13:6f:03:44:65:9a:89:40:56:12:76:c6:
d5:66:7b:d3:b6:84:d7:28:fd:48:95:33:44:55:72:
78:b0:df:db:24:87:86:f3:bf:3f:35:cf:7f:36:6c:
0a:eb:95:05:45:6e:a0:f6:84:02:c4:af:e6:4b:91:
d9:13:1d:47:b8:98:88:54:cb:98:ad:27:11:70:6b:
05:cf:a4:d6:8f:06:99:4a:a1:81:3e:dc:be:97:3b:
4d:3d:57:28:b0:e2:73:15:1c:9d:c7:50:02:07:48:
1f:01:b1:d6:cb:2a:1d:57:66:94:17:22:fe:b4:e6:
b4:c9:a8:11:db:a9:19:7c:c2:3f:e6:15:0e:e2:83:
ff:c6:6b:b8:92:7b:63:29:e2:f9:be:bd:1d:fe:b6:
37:62:8d:8b:2e:52:53:24:c9:d9:0f:14:34:e9:b6:
7f:f0:a9:e7:0d:04:76:14:2d:56:54:9d:5a:5b:23:
ed:58:fb:cd:cd:6f:f3:7c:e4:2d:9a:74:9f:aa:b0:
7b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:7E:14:6F:10:56:A3:48:CC:F4:F7:0F:E7:96:EB:56:65:25:B9:CA
X509v3 Authority Key Identifier:
keyid:D9:AC:62:A0:A2:56:7E:D1:73:DC:2A:AD:37:6E:45:5C:85:BC:B6:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2axioKJWftFz3CqtN25FXIW8trs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5ce86e-27d2-48c2-88b5-f181b6e80a62/1/2axioKJWftFz3CqtN25FXIW8trs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5ce86e-27d2-48c2-88b5-f181b6e80a62/1/2axioKJWftFz3CqtN25FXIW8trs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:65:5c:bb:8c:9f:5a:ad:75:1a:c9:67:b0:7a:ea:b8:82:1b:
20:33:7f:b7:40:34:07:66:e5:95:aa:1d:08:c6:e5:12:c8:cb:
22:a3:c9:cc:a9:7d:fd:23:c0:0c:e9:46:2a:c8:84:fb:2d:bc:
06:df:92:ba:06:7a:a9:87:22:41:97:dc:c0:89:54:30:d6:6f:
58:b2:e4:6b:8d:f6:4d:9c:8f:3c:b4:65:84:f3:c0:dd:72:26:
b7:d9:14:48:f9:f0:be:d4:1e:05:72:1c:8a:84:af:95:2a:4c:
58:4b:48:85:e9:e3:00:9e:f1:30:36:43:51:92:3a:5e:97:cb:
8f:a3:fa:8c:26:58:61:2a:bb:61:8d:00:00:5f:28:10:d8:27:
3a:74:80:81:68:63:63:55:36:e5:93:0f:e1:62:d2:0a:0a:09:
77:a6:58:08:1d:06:b3:0a:c3:1e:bc:ec:f5:d8:e3:58:92:3e:
64:43:ac:77:45:d5:e0:14:07:49:d4:76:6a:72:29:02:d5:04:
11:fa:0a:3e:0d:b7:81:01:bb:7b:ae:db:fa:d4:f0:8b:66:38:
98:65:74:a3:a8:68:02:c7:59:4d:a0:34:68:24:9a:7b:eb:3b:
7d:bd:bf:42:57:88:be:f0:5f:97:0a:66:97:06:10:0e:25:d2:
2b:e0:6e:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVb81OgMPgSW2/hJ0mjQH0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5YWM2MmEwYTI1NjdlZDE3M2RjMmFhZDM3NmU0NTVjODVi
Y2I2YmIwHhcNMjYwOTI0MjIwMTA5WhcNMjYwOTI1MjIwMTA5WjAzMTEwLwYDVQQD
Eyg5ODdlMTQ2ZjEwNTZhMzQ4Y2NmNGY3MGZlNzk2ZWI1NjY1MjViOWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+DodwtAX6fJk3GV417dID70EMON
KlLo762u9MMVmeMbnFhBbBPKCPptRVRTNRo7NeAoVPViTdoBWbZ6GnITbwNEZZqJ
QFYSdsbVZnvTtoTXKP1IlTNEVXJ4sN/bJIeG878/Nc9/NmwK65UFRW6g9oQCxK/m
S5HZEx1HuJiIVMuYrScRcGsFz6TWjwaZSqGBPty+lztNPVcosOJzFRydx1ACB0gf
AbHWyyodV2aUFyL+tOa0yagR26kZfMI/5hUO4oP/xmu4kntjKeL5vr0d/rY3Yo2L
LlJTJMnZDxQ06bZ/8KnnDQR2FC1WVJ1aWyPtWPvNzW/zfOQtmnSfqrB7QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJh+FG8QVqNIzPT3D+eW61ZlJbnKMB8GA1UdIwQY
MBaAFNmsYqCiVn7Rc9wqrTduRVyFvLa7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmF4aW9LSldmdEZ6M0NxdE4yNUZYSVc4dHJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81Y2U4NmUtMjdkMi00OGMyLTg4YjUt
ZjE4MWI2ZTgwYTYyLzEvMmF4aW9LSldmdEZ6M0NxdE4yNUZYSVc4dHJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi81Y2U4NmUtMjdkMi00OGMyLTg4YjUtZjE4MWI2ZTgwYTYy
LzEvMmF4aW9LSldmdEZ6M0NxdE4yNUZYSVc4dHJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX2Vcu4yf
Wq11GslnsHrquIIbIDN/t0A0B2bllaodCMblEsjLIqPJzKl9/SPADOlGKsiE+y28
Bt+SugZ6qYciQZfcwIlUMNZvWLLka432TZyPPLRlhPPA3XImt9kUSPnwvtQeBXIc
ioSvlSpMWEtIhenjAJ7xMDZDUZI6XpfLj6P6jCZYYSq7YY0AAF8oENgnOnSAgWhj
Y1U25ZMP4WLSCgoJd6ZYCB0GswrDHrzs9djjWJI+ZEOsd0XV4BQHSdR2anIpAtUE
EfoKPg23gQG7e67b+tTwi2Y4mGV0o6hoAsdZTaA0aCSae+s7fb2/QleIvvBflwpm
lwYQDiXSK+Bung==
-----END CERTIFICATE-----
Generated at Fri Sep 25 04:08:07 2026 by rpki-client