Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
File: AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft (raw, json)
Hash identifier: 12+4/UhjnkOCnkB0ODgdXtwJemDICymerIpmSaMEeo8=
Subject key identifier: 71:B7:CA:9C:84:71:05:FF:19:1E:55:F7:CD:50:1D:8F:92:40:D5:01
Authority key identifier: 01:72:35:06:71:8D:FC:F2:A8:BD:17:6D:4E:A2:4E:27:53:22:FC:FB
Certificate issuer: /CN=01723506718dfcf2a8bd176d4ea24e275322fcfb
Certificate serial: 01A10059F2F6B8E3FEF0A2AF28EF9F56BB4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
Manifest number: 1A87
Signing time: Sat 03 Oct 2026 06:00:57 +0000
Manifest this update: Sat 03 Oct 2026 06:00:57 +0000
Manifest next update: Sun 04 Oct 2026 06:00:57 +0000
Files and hashes: 1: AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl (hash: /4OB7GmV9ZYnb/nQY8tfHbvjL2fobf0wbkKm62h0Lm4=)
2: EK4O0xHWKJmmPQygRY3dmzgeTsI.roa (hash: m1XR1i5Us8oblIUOIQzSE1h5zvdVSIn8gW8k8tGSpec=)
3: Ql95-IGW0X06XmkQjeBmRl8NR5M.roa (hash: U0YHtEFSJr7CqFsN6UUpHO3sj4tjBDK3Qns3+4dEtP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:59:f2:f6:b8:e3:fe:f0:a2:af:28:ef:9f:56:bb:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01723506718dfcf2a8bd176d4ea24e275322fcfb
Validity
Not Before: Oct 3 06:00:57 2026 GMT
Not After : Oct 4 06:00:57 2026 GMT
Subject: CN=71b7ca9c847105ff191e55f7cd501d8f9240d501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:05:90:a9:cf:ca:47:a3:0a:df:c0:00:6d:a8:
66:ed:fa:1f:1b:79:eb:0b:15:93:9d:45:e1:fe:db:
b4:c3:23:58:61:26:d6:21:f7:00:7d:6a:3c:36:07:
2b:9b:eb:03:dd:f1:5b:c3:f7:c8:bf:70:e6:a0:35:
83:b5:d7:17:38:c8:91:ee:58:69:61:03:d9:1a:d2:
6e:06:58:4f:c4:2b:2d:18:22:45:90:f5:cd:9e:9f:
5c:10:f4:f2:98:e3:20:5a:ff:a4:8f:cf:8c:08:0b:
87:6b:8a:4a:69:77:19:86:c3:df:da:d5:e8:e0:16:
3a:52:58:d0:9d:ff:d8:cb:3f:1d:6b:f0:53:f6:78:
4f:80:1d:f0:3a:ef:97:b9:2f:32:27:4d:4d:91:83:
73:22:f6:46:c5:4e:3d:79:be:dc:5b:ee:d7:dd:15:
b4:50:a6:e0:1c:c7:2d:fa:f6:dc:1f:00:0f:99:28:
74:99:ae:95:5d:86:60:75:bf:05:b6:1a:09:09:3e:
d2:24:7f:45:f9:f1:25:a7:d7:66:52:ab:76:59:59:
f7:9c:dd:d0:c7:4e:d3:ab:d2:4c:b4:3f:e9:11:b5:
58:01:36:59:54:87:fd:b7:09:f8:8f:7e:c6:44:07:
d6:cf:f0:25:92:77:c4:60:51:ea:0d:1b:9b:89:fb:
53:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B7:CA:9C:84:71:05:FF:19:1E:55:F7:CD:50:1D:8F:92:40:D5:01
X509v3 Authority Key Identifier:
keyid:01:72:35:06:71:8D:FC:F2:A8:BD:17:6D:4E:A2:4E:27:53:22:FC:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:3c:18:77:4d:8b:45:41:5f:e3:58:90:62:6f:2d:6d:f9:8d:
1a:fb:4e:af:cb:ef:b5:ce:31:0f:25:2d:15:0f:91:f5:4e:76:
42:99:38:0c:de:6a:3d:bd:74:83:20:59:2e:4b:33:5f:a2:39:
e4:41:f8:31:34:69:24:51:7e:d7:c3:b1:80:4d:1f:26:da:e6:
d0:d4:59:43:4e:9e:6c:73:cf:37:6b:39:96:b6:ad:c4:ac:de:
9e:30:3a:62:76:ac:e6:3b:ae:c4:f1:b3:ef:d5:8d:e8:40:96:
e2:3a:b7:2f:95:21:3a:8f:77:40:45:9c:ab:95:6e:a1:e2:8a:
d0:e9:e5:69:fb:39:c5:6d:25:88:de:e4:4e:e0:e1:8b:05:64:
ca:d0:e2:f2:44:90:32:b6:f2:4f:e5:7a:6d:d2:9d:8c:de:51:
7d:56:89:98:fd:0b:da:79:f0:e1:80:c9:ca:a7:39:36:d0:c7:
9f:61:65:f9:6e:03:f1:e0:6f:16:5a:d2:f3:a1:f1:ab:7a:f6:
2a:94:4c:c1:d2:c7:c8:6f:b2:dd:63:3a:57:1c:67:dc:11:15:
05:d8:8d:6f:fa:31:22:08:9f:46:f2:3a:6c:ea:d5:d1:f0:c3:
00:7b:35:da:2a:9a:98:11:8f:45:2a:cb:43:5d:6d:13:3f:af:
6d:48:44:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 10:46:28 2026 by rpki-client