Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
File: AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft (raw, json)
Hash identifier: 3/Lxl1xWj0URATbq/G3lnkGb/sZzC2hPx0sIDcYUzmY=
Subject key identifier: 96:F0:1E:C3:65:B7:1E:4E:DB:0A:CF:96:B5:54:9A:1E:C6:E1:35:D6
Authority key identifier: 03:1C:8E:8C:C0:75:C2:D0:43:13:B9:11:D9:3D:61:FE:2A:9A:DE:A2
Certificate issuer: /CN=031c8e8cc075c2d04313b911d93d61fe2a9adea2
Certificate serial: 01A0D192E68987EE78361EEF867BE2A6FA3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AxyOjMB1wtBDE7kR2T1h_iqa3qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
Manifest number: 09EB
Signing time: Thu 24 Sep 2026 04:01:00 +0000
Manifest this update: Thu 24 Sep 2026 04:01:00 +0000
Manifest next update: Fri 25 Sep 2026 04:01:00 +0000
Files and hashes: 1: AxyOjMB1wtBDE7kR2T1h_iqa3qI.crl (hash: De3Tf5mQ/Bgtxsyn8lFHTZDz9RQJuvUDy8aRhZ8s/Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AxyOjMB1wtBDE7kR2T1h_iqa3qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:e6:89:87:ee:78:36:1e:ef:86:7b:e2:a6:fa:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=031c8e8cc075c2d04313b911d93d61fe2a9adea2
Validity
Not Before: Sep 24 04:01:00 2026 GMT
Not After : Sep 25 04:01:00 2026 GMT
Subject: CN=96f01ec365b71e4edb0acf96b5549a1ec6e135d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b3:cc:5a:31:ee:5c:f7:71:bb:d3:c8:77:0a:
85:64:38:f7:77:bf:e5:c7:18:2f:2b:be:b1:92:d5:
c4:d1:30:45:c1:85:e3:d2:79:11:3d:24:a8:69:c8:
48:31:a6:2f:e8:e1:e8:85:ed:fd:ca:fa:1f:c9:ed:
1c:c8:f7:35:44:47:15:3e:41:de:52:95:3d:1f:1f:
75:c4:b4:86:03:1c:31:c3:ce:c9:63:9b:dd:47:9d:
cf:04:28:0c:aa:47:5c:46:aa:b3:b2:59:70:5c:00:
05:b6:08:9a:9f:1f:ad:24:89:01:1b:cf:53:30:47:
80:1a:b2:94:18:ca:48:31:2c:b8:de:73:6b:de:63:
96:19:a7:e9:35:c6:52:20:6e:fc:cc:bb:bb:43:c1:
25:b6:0f:ea:ee:36:de:51:71:ab:1c:d5:39:73:4b:
5c:7d:5f:23:38:22:f9:8f:92:27:0c:2b:e1:52:7c:
9a:9c:fd:9e:1d:a1:33:c9:1a:33:1b:0c:29:97:b7:
76:6e:7e:76:5b:c4:18:61:4c:a6:a5:29:1c:a5:cc:
d6:91:42:58:1b:fa:4c:73:bd:50:1e:0c:e7:86:92:
a0:fc:37:99:fc:8a:bb:4f:b0:57:d5:6c:db:a1:04:
9c:cc:86:a3:2b:6b:7d:9a:ee:73:3f:5f:56:e0:8a:
8a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F0:1E:C3:65:B7:1E:4E:DB:0A:CF:96:B5:54:9A:1E:C6:E1:35:D6
X509v3 Authority Key Identifier:
keyid:03:1C:8E:8C:C0:75:C2:D0:43:13:B9:11:D9:3D:61:FE:2A:9A:DE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxyOjMB1wtBDE7kR2T1h_iqa3qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:41:b0:b8:80:a3:00:cb:5a:25:c7:df:e3:9c:c8:dd:60:e7:
41:48:d1:91:de:d9:dc:34:75:88:e4:8c:58:69:f5:80:95:d6:
ed:72:4f:1c:75:4a:64:dd:81:34:8c:c3:f4:0c:18:b3:5d:82:
1d:68:d0:ac:87:15:e1:df:83:fd:94:73:c2:80:90:e6:23:e1:
a1:85:b5:2f:3c:3f:35:06:da:07:ae:f6:35:a6:7a:4b:d0:21:
9f:d6:76:3f:d8:86:b2:1e:0c:a2:2c:2e:f3:05:76:1e:dc:b6:
a4:4e:bd:b5:16:96:eb:2c:7f:93:29:a8:20:40:4e:c6:6d:bc:
cf:fe:85:fe:6d:ed:97:43:8d:75:5a:97:8b:38:bc:b3:2c:c7:
3f:92:64:6e:6f:a6:55:5a:1a:3f:28:7f:c6:7b:6a:f4:c5:7c:
7e:b5:ee:75:a1:5d:ca:82:af:49:9c:ac:7a:47:1c:d6:69:43:
1a:2d:6d:d7:1c:0c:d0:d6:da:dc:81:a3:21:c4:e2:82:0f:90:
d1:b0:dc:da:5b:b1:b1:0b:d8:ef:34:49:96:e4:1e:b8:9c:58:
21:0d:92:3f:7d:63:1d:a8:f4:46:40:02:16:7b:40:c7:1d:34:
3e:b7:3f:10:d6:68:80:c3:c0:60:66:96:3d:e7:44:74:d2:0c:
16:f4:a7:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRkuaJh+54Nh7vhnvipvo9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMWM4ZThjYzA3NWMyZDA0MzEzYjkxMWQ5M2Q2MWZlMmE5
YWRlYTIwHhcNMjYwOTI0MDQwMTAwWhcNMjYwOTI1MDQwMTAwWjAzMTEwLwYDVQQD
Eyg5NmYwMWVjMzY1YjcxZTRlZGIwYWNmOTZiNTU0OWExZWM2ZTEzNWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbPMWjHuXPdxu9PIdwqFZDj3d7/l
xxgvK76xktXE0TBFwYXj0nkRPSSoachIMaYv6OHohe39yvofye0cyPc1REcVPkHe
UpU9Hx91xLSGAxwxw87JY5vdR53PBCgMqkdcRqqzsllwXAAFtgianx+tJIkBG89T
MEeAGrKUGMpIMSy43nNr3mOWGafpNcZSIG78zLu7Q8Eltg/q7jbeUXGrHNU5c0tc
fV8jOCL5j5InDCvhUnyanP2eHaEzyRozGwwpl7d2bn52W8QYYUympSkcpczWkUJY
G/pMc71QHgznhpKg/DeZ/Iq7T7BX1WzboQSczIajK2t9mu5zP19W4IqKPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJbwHsNltx5O2wrPlrVUmh7G4TXWMB8GA1UdIwQY
MBaAFAMcjozAdcLQQxO5Edk9Yf4qmt6iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXh5T2pNQjF3dEJERTdrUjJUMWhfaXFhM3FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy83NTIxM2QtMDFhNC00YjYxLWI1OTQt
NjI2OGNlZGFiZDg0LzEvQXh5T2pNQjF3dEJERTdrUjJUMWhfaXFhM3FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy83NTIxM2QtMDFhNC00YjYxLWI1OTQtNjI2OGNlZGFiZDg0
LzEvQXh5T2pNQjF3dEJERTdrUjJUMWhfaXFhM3FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtUGwuICj
AMtaJcff45zI3WDnQUjRkd7Z3DR1iOSMWGn1gJXW7XJPHHVKZN2BNIzD9AwYs12C
HWjQrIcV4d+D/ZRzwoCQ5iPhoYW1Lzw/NQbaB672NaZ6S9Ahn9Z2P9iGsh4Moiwu
8wV2Hty2pE69tRaW6yx/kymoIEBOxm28z/6F/m3tl0ONdVqXizi8syzHP5Jkbm+m
VVoaPyh/xntq9MV8frXudaFdyoKvSZysekcc1mlDGi1t1xwM0Nba3IGjIcTigg+Q
0bDc2luxsQvY7zRJluQeuJxYIQ2SP31jHaj0RkACFntAxx00Prc/ENZogMPAYGaW
PedEdNIMFvSnQg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 13:38:10 2026 by rpki-client