Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.mft
File: axa8EQuqKsnRYgwlBxdXfeZKkks.mft (raw, json)
Hash identifier: sN7g/YdBydNM/JZvbuo0pwcZHrqs1jq0Ms0RizCYC+I=
Subject key identifier: EB:2F:00:FC:A1:0C:48:D4:2B:F7:46:61:D0:63:45:5D:A5:06:04:93
Authority key identifier: 6B:16:BC:11:0B:AA:2A:C9:D1:62:0C:25:07:17:57:7D:E6:4A:92:4B
Certificate issuer: /CN=6b16bc110baa2ac9d1620c250717577de64a924b
Certificate serial: 019D28F226E9E3A584DF5CB7A3DCC1F14FA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axa8EQuqKsnRYgwlBxdXfeZKkks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.mft
Manifest number: 1884
Signing time: Thu 26 Mar 2026 07:00:51 +0000
Manifest this update: Thu 26 Mar 2026 07:00:51 +0000
Manifest next update: Fri 27 Mar 2026 07:00:51 +0000
Files and hashes: 1: axa8EQuqKsnRYgwlBxdXfeZKkks.crl (hash: TxrJurRHNu2cNEb00rkSAUm6gptnL1Z0P6TWpiwEG5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.mft
rsync://rpki.ripe.net/repository/DEFAULT/axa8EQuqKsnRYgwlBxdXfeZKkks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:26:e9:e3:a5:84:df:5c:b7:a3:dc:c1:f1:4f:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b16bc110baa2ac9d1620c250717577de64a924b
Validity
Not Before: Mar 26 07:00:51 2026 GMT
Not After : Mar 27 07:00:51 2026 GMT
Subject: CN=eb2f00fca10c48d42bf74661d063455da5060493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c4:bc:cd:71:d0:86:ab:87:5b:b0:d0:e5:2a:
26:13:d9:f1:29:1f:b9:88:d8:2e:a8:94:0c:34:b4:
3e:15:18:67:4d:9e:eb:c4:2a:d6:97:fc:cd:33:1e:
1a:c2:2c:ec:14:1b:fd:99:79:6e:76:6f:d6:30:be:
ba:ba:c6:fb:2d:63:c3:17:81:de:59:ba:e8:3a:6a:
fc:14:fb:c0:8a:3a:d2:14:b5:f8:a8:b8:72:14:91:
85:a3:12:fc:7e:06:63:4d:11:3d:65:61:0e:56:ad:
3d:af:71:49:9b:14:05:e5:07:6e:e1:ec:0f:6a:ed:
f9:7c:8d:1b:af:1f:b6:84:1a:d3:97:63:2e:ec:d6:
33:d7:55:45:1c:bc:38:d8:75:a0:3f:d0:23:c9:6e:
e8:cc:74:06:8e:4a:d4:89:c7:1a:28:e5:dc:21:35:
86:49:f9:d0:74:ab:64:00:91:aa:93:76:f8:d9:ca:
d0:f2:81:f2:65:ef:e6:ec:e2:be:ab:d8:5c:a1:2a:
72:b9:17:23:fa:d1:87:d5:82:38:45:04:da:0d:2c:
9b:c9:12:4e:93:b9:30:32:5b:f6:f4:fc:bc:d9:e9:
17:46:92:70:01:a8:ef:18:06:f8:31:8e:37:d3:07:
47:f2:4a:f5:62:73:d7:b3:2e:92:aa:4b:2a:d5:6e:
7e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:2F:00:FC:A1:0C:48:D4:2B:F7:46:61:D0:63:45:5D:A5:06:04:93
X509v3 Authority Key Identifier:
keyid:6B:16:BC:11:0B:AA:2A:C9:D1:62:0C:25:07:17:57:7D:E6:4A:92:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axa8EQuqKsnRYgwlBxdXfeZKkks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:7b:ad:04:7c:00:09:fd:89:67:27:bb:09:56:09:a7:2c:58:
a4:c5:8e:2e:86:2a:c1:4a:2a:e2:45:09:4b:c3:b0:91:8a:3f:
4d:09:d3:68:e7:35:d4:13:4d:80:a7:85:06:32:4a:e6:3d:75:
61:a9:18:32:f8:79:a0:3c:5b:b6:16:06:f8:ac:ca:4c:c3:a2:
75:97:5d:99:58:22:9e:1e:96:0e:6e:1c:31:41:23:48:d2:1a:
33:55:f0:37:ac:d0:fa:00:5f:9f:06:01:8c:b0:d5:cb:bc:b8:
8e:0d:b1:ff:38:c3:37:0f:92:87:ce:22:20:24:8d:3d:63:62:
a8:0b:c7:d7:16:95:42:0d:e3:69:d4:17:91:2c:27:f9:1a:f4:
a2:ce:35:54:18:ab:34:1d:a9:93:4c:22:69:b0:61:3c:1a:16:
1d:73:b6:d9:02:31:a8:3f:1a:8c:8a:11:1a:c0:22:83:6b:be:
05:b7:2e:ef:24:97:b0:b5:f9:b6:d8:af:2a:83:85:48:9f:3d:
90:f5:f5:b5:c8:81:d7:bb:14:27:bb:1f:40:df:40:19:5e:b3:
3f:e9:a9:51:c3:45:5d:cf:8b:43:5a:ab:8a:e0:f8:be:c5:a4:
7e:99:29:ff:a5:13:d7:2b:e0:d0:d8:74:e7:ff:c9:87:71:65:
9a:f8:8d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:18:58 2026 by rpki-client