Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
File: AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft (raw, json)
Hash identifier: yBCHjwOxr71K1vsuoRb1TV7ykpi5QSVM0XjBHsiCFB8=
Subject key identifier: DB:12:DB:50:91:1E:72:77:77:34:25:89:AE:58:EC:FD:96:03:31:BB
Authority key identifier: 01:72:35:06:71:8D:FC:F2:A8:BD:17:6D:4E:A2:4E:27:53:22:FC:FB
Certificate issuer: /CN=01723506718dfcf2a8bd176d4ea24e275322fcfb
Certificate serial: 019D25838A951CD386A005584E9E45394C48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 15:01:10 +0000
Manifest this update: Wed 25 Mar 2026 15:01:10 +0000
Manifest next update: Thu 26 Mar 2026 15:01:10 +0000
Files and hashes: 1: AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl (hash: WjDuMwPa75DPTRnmyqQR23eSX7wVIDK3m9xf+6AEA4s=)
2: EK4O0xHWKJmmPQygRY3dmzgeTsI.roa (hash: m1XR1i5Us8oblIUOIQzSE1h5zvdVSIn8gW8k8tGSpec=)
3: Ql95-IGW0X06XmkQjeBmRl8NR5M.roa (hash: U0YHtEFSJr7CqFsN6UUpHO3sj4tjBDK3Qns3+4dEtP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:8a:95:1c:d3:86:a0:05:58:4e:9e:45:39:4c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01723506718dfcf2a8bd176d4ea24e275322fcfb
Validity
Not Before: Mar 25 15:01:10 2026 GMT
Not After : Mar 26 15:01:10 2026 GMT
Subject: CN=db12db50911e727777342589ae58ecfd960331bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:6d:61:0c:0c:28:a2:9a:a7:6c:6e:d2:f4:e2:
aa:a5:c6:1e:f0:3b:f4:89:be:6b:81:28:11:c6:b2:
30:c8:3d:8a:3f:1a:3b:81:89:7d:7c:f5:df:83:83:
cd:61:88:8d:60:a9:04:7c:6a:47:ff:cd:03:d3:28:
8e:76:0a:af:07:a6:5e:3c:26:cf:da:64:bf:c8:99:
4f:66:5c:8e:a1:8b:dc:53:0d:bd:93:92:fc:6a:c4:
0a:ed:51:41:cc:b4:53:e0:ab:31:f7:70:23:1e:35:
ac:7a:4b:b7:0f:3a:29:1e:a8:ad:8e:c2:c5:2c:63:
db:1f:52:8d:66:d3:28:14:15:a3:6d:8a:f0:2a:0d:
04:06:60:17:a8:71:c8:f0:22:46:3d:e0:24:5d:58:
8a:3f:30:a1:20:d7:35:40:b6:12:10:0a:9f:21:93:
e7:11:91:2c:0b:ce:cf:78:3d:94:3a:bb:8b:fc:5e:
46:93:20:a2:4f:ae:f0:9c:08:6e:66:87:48:c9:45:
f1:45:32:0c:e4:05:4e:29:63:1f:73:df:d5:6a:b3:
a6:39:1b:08:b8:bb:b7:9c:9f:91:20:ef:2c:8f:17:
65:d8:e7:24:aa:49:eb:0e:93:05:89:f2:cf:e7:d9:
9e:85:6b:1f:c7:81:2c:4c:df:5d:d6:3a:7c:d3:dd:
3f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:12:DB:50:91:1E:72:77:77:34:25:89:AE:58:EC:FD:96:03:31:BB
X509v3 Authority Key Identifier:
keyid:01:72:35:06:71:8D:FC:F2:A8:BD:17:6D:4E:A2:4E:27:53:22:FC:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:de:68:92:1c:11:09:99:2c:ad:d5:10:80:16:7c:7b:61:7b:
1d:c5:af:1d:67:26:30:42:4b:f3:d8:bb:67:4c:27:4a:c8:3d:
fd:cf:f0:a5:93:2a:f2:42:5c:5c:ec:c6:4d:b5:7c:bf:8f:68:
d1:29:df:53:f4:ad:98:9b:88:d0:2f:d9:48:d9:ae:2e:95:ab:
62:9b:91:66:be:37:72:ed:14:cd:03:af:f7:26:aa:83:bf:63:
af:85:d6:66:74:74:e6:78:09:7c:73:8b:d5:69:fc:b7:79:ac:
81:4c:a9:65:5d:b4:e0:f1:65:ca:79:bc:4b:f2:e2:6d:1e:72:
6e:6d:6b:17:ec:9c:d7:78:c3:99:99:2c:7c:a2:c6:fa:0c:ad:
aa:10:3d:c9:a3:b9:ac:49:d4:b0:f7:c4:ea:63:c4:fb:d9:54:
3f:3b:67:c2:e4:3d:b9:af:fa:69:7f:64:a2:0b:9c:ee:a9:21:
07:58:82:8c:ae:57:d0:e3:1e:90:1f:4e:e4:f9:86:77:9e:eb:
84:df:25:26:50:38:3d:40:eb:e5:45:7a:1b:a7:60:86:8d:46:
f1:51:4b:f7:52:41:8c:06:ac:37:d9:25:f4:4f:b5:d5:53:92:
37:b7:2a:69:98:ee:b7:ae:52:92:b5:4b:f7:94:08:cc:3b:d5:
37:c7:58:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:01:19 2026 by rpki-client