Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
File: AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft (raw, json)
Hash identifier: e9xPbQmJmKieon2Uoaa5RBkaxdIopneQlKXokI9pAmM=
Subject key identifier: 32:CD:49:B2:40:BA:77:32:2D:24:D8:3D:02:F8:0A:D6:2A:5E:E7:B9
Authority key identifier: 01:72:35:06:71:8D:FC:F2:A8:BD:17:6D:4E:A2:4E:27:53:22:FC:FB
Certificate issuer: /CN=01723506718dfcf2a8bd176d4ea24e275322fcfb
Certificate serial: 019F935C0A861026D75119D433E825A5FBF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 09:01:50 +0000
Manifest this update: Fri 24 Jul 2026 09:01:50 +0000
Manifest next update: Sat 25 Jul 2026 09:01:50 +0000
Files and hashes: 1: AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl (hash: YVDsBq+S1FTJld3wygCnFAjPbHZT7VaCL9PpxwHM+y8=)
2: EK4O0xHWKJmmPQygRY3dmzgeTsI.roa (hash: m1XR1i5Us8oblIUOIQzSE1h5zvdVSIn8gW8k8tGSpec=)
3: Ql95-IGW0X06XmkQjeBmRl8NR5M.roa (hash: U0YHtEFSJr7CqFsN6UUpHO3sj4tjBDK3Qns3+4dEtP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5c:0a:86:10:26:d7:51:19:d4:33:e8:25:a5:fb:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01723506718dfcf2a8bd176d4ea24e275322fcfb
Validity
Not Before: Jul 24 09:01:50 2026 GMT
Not After : Jul 25 09:01:50 2026 GMT
Subject: CN=32cd49b240ba77322d24d83d02f80ad62a5ee7b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:aa:c7:1a:9f:05:71:a2:19:04:9d:b8:9a:f4:
dd:59:c3:85:e4:4d:7a:c2:b5:c1:59:6e:68:c7:8e:
2b:d7:a6:29:8a:82:a1:ad:3b:da:2c:bb:84:33:96:
8e:b7:e8:49:e7:fa:c9:f8:00:f0:86:c6:42:a1:68:
90:2d:0b:8a:a1:d4:78:0e:ce:ee:3e:f9:5d:dc:93:
a0:bb:cb:9d:d8:48:38:1c:34:7d:e8:74:51:f4:d0:
b2:53:6d:d2:73:3d:90:a3:d1:f9:00:6c:73:0d:e5:
c4:25:2f:3e:25:06:c9:7d:f9:ba:36:ad:1c:51:c6:
1a:e4:ca:81:34:b9:f4:37:8f:a3:64:47:01:d7:ae:
7e:ca:34:93:67:88:c9:3c:be:98:29:a5:81:da:8c:
8b:36:e7:ce:cd:e4:7a:f0:73:dd:bf:cc:ab:50:d2:
2d:b4:eb:69:80:47:3c:85:ff:e7:30:43:1e:f6:1a:
5a:75:82:d9:06:69:21:d4:47:6f:f9:4f:8d:ec:aa:
75:d5:61:6c:a0:7e:f6:d9:41:bd:3a:bf:9e:cf:f0:
f7:16:51:d9:3a:58:aa:06:0b:8f:a4:97:99:5b:61:
5d:87:a3:ec:f3:5b:4e:63:96:f6:b9:da:12:6b:72:
50:fd:ce:a2:52:d7:c0:ca:fc:da:bf:76:4e:a7:dc:
f7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:CD:49:B2:40:BA:77:32:2D:24:D8:3D:02:F8:0A:D6:2A:5E:E7:B9
X509v3 Authority Key Identifier:
keyid:01:72:35:06:71:8D:FC:F2:A8:BD:17:6D:4E:A2:4E:27:53:22:FC:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:8c:23:27:a7:cf:5e:b8:a4:ed:6e:9f:cc:2d:52:3f:8b:84:
11:5c:de:88:ac:c8:70:69:dd:a1:08:18:49:0b:7d:ba:af:3d:
12:7a:b6:74:66:d9:2d:f6:76:0d:a1:30:21:37:6a:da:85:b6:
65:3f:04:d2:fb:23:e1:2c:75:38:9f:56:5e:29:f1:c1:17:33:
35:90:33:f3:1f:19:e3:11:a5:7d:51:9d:94:e3:62:01:73:12:
70:6f:f8:1a:b3:0e:0d:84:c1:78:dd:62:51:52:62:1b:0a:f2:
0b:1e:77:a0:39:fe:dd:61:66:dc:87:e8:37:6a:bc:2f:d5:b0:
f2:98:4a:29:8c:13:c8:04:a6:86:28:2f:0b:6a:f3:88:f9:8b:
97:38:26:6b:ad:37:cb:f3:8e:f0:b6:39:25:a0:58:59:01:4c:
21:75:f8:62:77:42:fe:85:62:6a:78:a5:8e:c2:9b:73:73:2b:
e8:5e:21:40:d2:bf:d1:4e:62:58:ee:2d:37:5f:f1:df:2e:6b:
7e:c3:84:42:e5:7d:51:f1:c5:8c:b3:a8:c3:d3:d5:bd:fd:e3:
07:cb:90:65:1d:54:4e:2e:d6:82:6c:3f:e4:48:5e:52:58:db:
9c:af:41:9e:a0:c9:79:44:c1:bb:21:24:7a:da:52:0b:6d:34:
0c:10:e4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:50:45 2026 by rpki-client