Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
File: AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft (raw, json)
Hash identifier: 7ffe/SroJPq9XHQnwCF5x2CxCHHoP4qKPju8m8lLNb4=
Subject key identifier: 97:61:C9:D0:A9:34:00:95:44:86:BA:75:8D:5A:AA:C1:90:0A:CE:7A
Authority key identifier: 03:1C:8E:8C:C0:75:C2:D0:43:13:B9:11:D9:3D:61:FE:2A:9A:DE:A2
Certificate issuer: /CN=031c8e8cc075c2d04313b911d93d61fe2a9adea2
Certificate serial: 019F90FF20683D0A16EA104C95156318B734
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AxyOjMB1wtBDE7kR2T1h_iqa3qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
Manifest number: 0945
Signing time: Thu 23 Jul 2026 22:01:06 +0000
Manifest this update: Thu 23 Jul 2026 22:01:06 +0000
Manifest next update: Fri 24 Jul 2026 22:01:06 +0000
Files and hashes: 1: AxyOjMB1wtBDE7kR2T1h_iqa3qI.crl (hash: qIVblz3Vzf2dfx5v1JCQ5giLrcI8npMYwRJa3YKCaBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AxyOjMB1wtBDE7kR2T1h_iqa3qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:20:68:3d:0a:16:ea:10:4c:95:15:63:18:b7:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=031c8e8cc075c2d04313b911d93d61fe2a9adea2
Validity
Not Before: Jul 23 22:01:06 2026 GMT
Not After : Jul 24 22:01:06 2026 GMT
Subject: CN=9761c9d0a93400954486ba758d5aaac1900ace7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f0:52:d7:06:67:25:6a:3e:76:dd:59:a5:d9:
7e:60:92:5c:12:fa:d0:c7:1e:42:19:e6:90:08:45:
9f:c8:d4:bb:94:a3:b9:fa:aa:92:ee:40:37:0b:a4:
17:cf:84:23:91:bb:e7:c4:f2:2a:12:10:67:d9:a8:
8f:f7:d1:21:48:12:0f:a4:0c:06:56:e6:65:90:f3:
b6:eb:19:ac:3a:3d:ab:18:76:73:94:6e:74:db:79:
f1:1c:19:e9:58:fe:3e:21:c3:5a:ef:99:49:1d:02:
a5:b3:0a:6f:63:28:c6:b3:50:3f:ce:7e:17:1d:87:
e1:fc:7f:97:3b:85:c6:1a:a7:b6:4f:70:4b:7f:84:
a6:2c:eb:d1:9d:48:45:b2:ad:e0:de:7f:6e:c5:ea:
05:fb:e7:fc:d7:c2:0f:81:48:74:96:6a:d8:e5:da:
90:66:fb:d4:3a:db:8a:05:94:b3:58:db:91:a3:b5:
cd:8f:e4:0a:27:e0:17:2d:3f:54:df:d8:81:8d:19:
8a:f7:fa:c6:1e:a0:68:6d:be:8a:9a:00:9d:a9:c1:
ca:de:51:b5:f1:cb:64:e3:15:32:d7:3d:35:26:59:
e9:b9:84:90:a5:1b:a7:cd:40:c9:55:03:bd:41:9a:
61:dc:18:de:b1:41:60:2c:35:0e:f3:91:52:fd:37:
94:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:61:C9:D0:A9:34:00:95:44:86:BA:75:8D:5A:AA:C1:90:0A:CE:7A
X509v3 Authority Key Identifier:
keyid:03:1C:8E:8C:C0:75:C2:D0:43:13:B9:11:D9:3D:61:FE:2A:9A:DE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxyOjMB1wtBDE7kR2T1h_iqa3qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:c6:08:31:eb:75:4e:bc:d3:5b:7d:6b:c5:b2:44:83:5a:1c:
18:b8:62:2f:4a:22:20:22:8d:05:52:80:30:93:18:b3:2f:61:
dd:1b:57:7c:76:9a:6e:68:20:d6:98:54:e8:df:e3:d2:aa:3b:
9c:6e:48:f4:c4:16:b2:5b:14:bc:7f:d4:ba:33:d7:53:a4:99:
3b:42:e7:7a:93:48:54:7c:55:50:e2:14:91:92:4b:2d:ff:25:
36:21:00:56:c6:43:28:f3:fa:2e:0f:9c:7e:e0:f4:a0:85:db:
34:06:79:5f:1c:c1:b4:97:3b:3b:7e:b4:6b:e6:72:c2:17:f2:
03:44:1d:5a:68:ea:85:36:5b:21:36:55:b8:a6:e1:ae:bf:f3:
0a:d1:64:10:f1:0b:15:ec:09:d3:0f:cf:c9:f2:49:18:ae:4d:
87:ca:51:35:42:35:c1:30:59:43:59:ba:c2:da:0e:0b:88:cc:
fa:ac:a3:ea:91:68:af:76:0a:73:5d:74:83:60:72:f1:2e:8a:
b4:e8:22:3a:7e:8d:67:34:26:8b:2a:e8:0e:3f:c2:7b:c5:f4:
3c:ac:f2:b2:bc:8b:d7:42:04:cb:08:21:db:99:2f:57:71:b9:
7c:ab:99:17:0a:ee:2d:bf:4f:27:07:64:24:8c:86:84:00:02:
06:3a:4d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:51:21 2026 by rpki-client