Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft
File: axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft (raw, json)
Hash identifier: WUK4wjF+AoUFqoo+RSlWfp2WohmJ0Y2i05F34ISzJKo=
Subject key identifier: 90:58:7B:88:2F:9D:2B:39:DF:51:AF:E9:4C:7D:D6:55:D5:42:A7:B2
Authority key identifier: 6B:1A:C6:91:4B:F8:47:3D:18:0B:60:38:7B:D0:98:F1:D3:7D:AC:80
Certificate issuer: /CN=6b1ac6914bf8473d180b60387bd098f1d37dac80
Certificate serial: 019D2A3B506D4420170F5A63201B25F919E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axrGkUv4Rz0YC2A4e9CY8dN9rIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft
Manifest number: 04E1
Signing time: Thu 26 Mar 2026 13:00:23 +0000
Manifest this update: Thu 26 Mar 2026 13:00:23 +0000
Manifest next update: Fri 27 Mar 2026 13:00:23 +0000
Files and hashes: 1: axrGkUv4Rz0YC2A4e9CY8dN9rIA.crl (hash: W+E7OsueXkdLXLyGauGd+bXsPqjzHgsdEl9LGfK/mCc=)
2: nbQVjAOURx4Qwj5zIcKA26-Xktg.roa (hash: hXW2ndlgxtGzNC8sJFPsKR4NFW6NGQAmeQ9uAICL/bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/axrGkUv4Rz0YC2A4e9CY8dN9rIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:50:6d:44:20:17:0f:5a:63:20:1b:25:f9:19:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b1ac6914bf8473d180b60387bd098f1d37dac80
Validity
Not Before: Mar 26 13:00:23 2026 GMT
Not After : Mar 27 13:00:23 2026 GMT
Subject: CN=90587b882f9d2b39df51afe94c7dd655d542a7b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:93:3a:fe:04:71:35:56:5b:86:ae:34:9b:a3:
d6:d3:5e:8c:09:d2:be:9f:dd:e5:1f:a6:70:77:cd:
e7:6e:2c:3b:0e:4d:2b:0d:22:d8:47:04:84:d1:e9:
28:5c:06:df:c5:ff:ec:e9:22:94:2e:91:09:6c:08:
94:0d:6a:37:fa:b8:38:ca:ee:74:c5:2d:9a:c0:f1:
4d:9c:7a:ff:de:15:c0:2e:70:ea:6f:ba:ea:02:1e:
6e:bd:9c:69:e9:b3:77:de:83:4f:8d:33:a6:ec:1e:
b6:0e:21:be:5c:6d:cb:d0:d5:fe:40:4d:89:7e:2e:
63:27:3b:22:c2:90:dd:b3:34:96:9e:55:9c:c8:0f:
52:61:be:c7:34:31:31:2a:68:d0:d3:b2:4a:4c:fb:
09:ad:69:2d:30:c4:2b:90:ee:f8:4d:c9:6e:a2:df:
16:66:11:bb:f5:6a:5d:aa:5c:b8:e5:6d:81:69:ba:
11:e2:f2:cd:f5:10:da:31:4a:20:ea:0b:1b:e2:03:
53:11:0e:81:b8:ab:17:48:5a:0d:74:90:40:30:da:
60:7d:64:c9:93:87:6f:87:e8:6c:d7:c9:aa:d7:0a:
31:24:b2:4d:8c:34:99:90:13:27:e5:8f:35:47:56:
16:9f:23:fa:e8:28:b8:f9:ef:95:0d:fa:af:25:63:
00:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:58:7B:88:2F:9D:2B:39:DF:51:AF:E9:4C:7D:D6:55:D5:42:A7:B2
X509v3 Authority Key Identifier:
keyid:6B:1A:C6:91:4B:F8:47:3D:18:0B:60:38:7B:D0:98:F1:D3:7D:AC:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axrGkUv4Rz0YC2A4e9CY8dN9rIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:f6:17:9e:b2:eb:68:01:4b:17:c7:f1:c1:55:84:a5:05:f0:
d5:ac:07:7b:64:fc:a5:a8:2e:ab:33:f5:92:10:e7:24:c0:01:
17:f7:ff:c8:86:3f:09:b2:08:5b:3a:3b:94:0f:40:f7:da:65:
e9:a7:1a:da:f7:d1:fe:db:a5:0d:e1:4a:59:2b:1a:d5:6b:2e:
7b:dc:7e:92:c3:c6:fc:75:fc:05:b4:67:2f:ea:a3:7d:b1:3d:
06:8a:3b:c3:12:ca:89:11:78:f2:28:75:6b:87:65:62:6a:cf:
2a:1b:22:12:db:ed:76:21:6e:1f:00:77:74:f7:4c:f0:ce:a3:
e9:12:fa:f8:e5:e2:a6:a4:84:4c:7e:14:df:d1:7a:51:30:66:
1e:de:64:9b:fa:a2:53:61:fd:5e:2a:9f:08:16:4b:5e:2c:36:
14:9d:f9:72:92:16:63:f6:a9:8d:3c:85:c6:ff:49:21:03:ea:
a6:95:23:04:4a:08:7d:d2:b3:c9:e3:56:2f:b2:ea:ec:7c:bc:
8f:b0:4d:b4:bf:a4:75:e6:42:3f:c2:4c:a2:d8:0f:a7:75:08:
5f:62:8d:40:a0:35:21:48:c2:c6:13:4f:fe:c6:64:0f:59:23:
f6:86:42:42:22:44:d2:04:49:d1:59:3e:ec:e7:35:fa:3e:8a:
ee:fd:e0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:38:48 2026 by rpki-client