Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/5ce86e-27d2-48c2-88b5-f181b6e80a62/1/2axioKJWftFz3CqtN25FXIW8trs.mft
File: 2axioKJWftFz3CqtN25FXIW8trs.mft (raw, json)
Hash identifier: PXXPfJNIjOfaFmR3v59DvmtWIvGBN3Nz0QwvZOe9vzE=
Subject key identifier: 85:4C:25:1E:8C:D2:21:0A:94:AE:39:D1:C1:49:A9:99:D0:C5:62:2C
Authority key identifier: D9:AC:62:A0:A2:56:7E:D1:73:DC:2A:AD:37:6E:45:5C:85:BC:B6:BB
Certificate issuer: /CN=d9ac62a0a2567ed173dc2aad376e455c85bcb6bb
Certificate serial: 019F90FEBA66261320FBD63A71AA5E1F4B87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2axioKJWftFz3CqtN25FXIW8trs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/5ce86e-27d2-48c2-88b5-f181b6e80a62/1/2axioKJWftFz3CqtN25FXIW8trs.mft
Manifest number: 19C2
Signing time: Thu 23 Jul 2026 22:00:40 +0000
Manifest this update: Thu 23 Jul 2026 22:00:40 +0000
Manifest next update: Fri 24 Jul 2026 22:00:40 +0000
Files and hashes: 1: 2axioKJWftFz3CqtN25FXIW8trs.crl (hash: /ycYcovpuA8WeHx6ff4y/DyDdX566AGW5rCs8Qc4OdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/5ce86e-27d2-48c2-88b5-f181b6e80a62/1/2axioKJWftFz3CqtN25FXIW8trs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/5ce86e-27d2-48c2-88b5-f181b6e80a62/1/2axioKJWftFz3CqtN25FXIW8trs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2axioKJWftFz3CqtN25FXIW8trs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:ba:66:26:13:20:fb:d6:3a:71:aa:5e:1f:4b:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ac62a0a2567ed173dc2aad376e455c85bcb6bb
Validity
Not Before: Jul 23 22:00:40 2026 GMT
Not After : Jul 24 22:00:40 2026 GMT
Subject: CN=854c251e8cd2210a94ae39d1c149a999d0c5622c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8d:e9:59:6e:b6:50:e6:71:da:42:8b:65:e6:
88:7c:2f:83:40:0f:89:34:a9:4d:21:ee:93:61:98:
ff:c9:26:13:81:de:6b:6b:ea:26:2e:fe:4c:3f:0b:
6d:cc:46:4d:ad:15:9f:26:68:de:ef:38:7c:0a:97:
92:98:c3:65:9c:36:60:4a:fd:91:03:da:84:f2:1e:
19:72:14:c4:aa:d2:72:57:fe:36:88:47:48:f8:2e:
b1:05:1a:02:c3:e5:ae:ab:3f:6b:a5:a6:c5:6f:a2:
9a:d7:cb:29:89:a4:7f:93:23:7b:2d:08:c3:8c:ce:
bf:5c:e0:e4:3b:a7:30:52:50:a2:93:6a:c9:f5:a4:
45:4e:e6:b4:60:05:94:dd:29:a3:51:34:63:f6:01:
69:f0:29:6d:64:02:a8:99:1e:87:77:90:e8:e5:25:
7c:c3:57:7b:71:f0:fe:eb:f7:60:93:91:70:6e:81:
ee:d9:c3:3b:67:74:b0:6e:25:86:20:b1:f2:1b:f0:
3a:8e:6c:04:aa:ad:e3:06:8f:d8:16:eb:e8:a2:fc:
cb:b2:3a:ba:e1:b4:0a:db:de:10:27:16:b3:d8:73:
96:bd:2f:19:17:17:ef:3d:14:6d:19:cc:8e:82:ac:
cb:81:42:5f:6f:56:ea:2b:41:37:1c:59:ed:18:81:
f6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:4C:25:1E:8C:D2:21:0A:94:AE:39:D1:C1:49:A9:99:D0:C5:62:2C
X509v3 Authority Key Identifier:
keyid:D9:AC:62:A0:A2:56:7E:D1:73:DC:2A:AD:37:6E:45:5C:85:BC:B6:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2axioKJWftFz3CqtN25FXIW8trs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5ce86e-27d2-48c2-88b5-f181b6e80a62/1/2axioKJWftFz3CqtN25FXIW8trs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5ce86e-27d2-48c2-88b5-f181b6e80a62/1/2axioKJWftFz3CqtN25FXIW8trs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:5f:29:15:d8:dd:b3:c3:cd:66:bd:76:5b:6e:86:0e:12:ac:
11:80:e2:12:6b:40:a0:0a:bc:c1:c1:4a:39:8e:bf:06:11:3b:
d6:fe:22:29:2e:68:eb:8e:5c:cc:f8:b4:47:10:be:80:86:e9:
74:81:a8:da:4a:c1:26:07:27:ed:87:75:6b:94:6d:d2:f3:ff:
57:8c:99:97:55:ba:6b:ba:dc:a9:f4:fe:51:58:46:3d:90:83:
88:40:7a:a6:02:8f:cd:99:ff:06:57:46:38:3d:ed:5c:bc:33:
6e:df:38:88:63:c0:5f:20:28:54:48:c0:2f:4f:b7:f7:02:92:
ed:0b:5f:a3:2c:25:57:41:98:33:0e:c5:0e:d5:80:31:b5:2a:
ff:c6:78:05:6f:9c:25:3d:ec:0f:87:e6:74:68:da:93:91:3c:
9f:8a:75:2f:91:e0:43:08:44:56:76:c6:6c:81:e6:28:29:b6:
d5:4c:eb:17:91:cb:8d:2f:60:7e:c0:cb:c6:94:49:e1:5e:b4:
f7:50:cf:b9:04:01:87:77:4d:c5:c3:4e:fa:d1:6d:8f:72:34:
85:74:38:9f:4a:41:d7:04:fe:63:27:e0:35:fc:21:39:e9:e3:
3c:51:b5:b4:f6:99:09:e5:9b:0c:4e:01:cc:7f:d6:6f:1f:57:
02:74:e8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:13:03 2026 by rpki-client