Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/63c55f-41be-44b6-84cf-3e1086e73ade/1/Axrg595e2RBFnl_GJAgVFTwuZ44.mft
File: Axrg595e2RBFnl_GJAgVFTwuZ44.mft (raw, json)
Hash identifier: jBFoqSR0H4o0o23vsk0OODK0QwEDXYej2+QoNmB6Cs8=
Subject key identifier: 32:90:6D:8B:CC:DF:96:58:2F:B5:4A:CC:0D:31:A0:CB:93:F1:FE:25
Authority key identifier: 03:1A:E0:E7:DE:5E:D9:10:45:9E:5F:C6:24:08:15:15:3C:2E:67:8E
Certificate issuer: /CN=031ae0e7de5ed910459e5fc6240815153c2e678e
Certificate serial: 01A0CBFE0976E4F5AA5E1320C9C4799428A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Axrg595e2RBFnl_GJAgVFTwuZ44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/63c55f-41be-44b6-84cf-3e1086e73ade/1/Axrg595e2RBFnl_GJAgVFTwuZ44.mft
Manifest number: DE
Signing time: Wed 23 Sep 2026 02:00:18 +0000
Manifest this update: Wed 23 Sep 2026 02:00:18 +0000
Manifest next update: Thu 24 Sep 2026 02:00:18 +0000
Files and hashes: 1: Axrg595e2RBFnl_GJAgVFTwuZ44.crl (hash: 6z0KIgk3otARG/XXJkKgMA1On3Yf2JF5p0GIKYQ5pfE=)
2: ucADD6Yh4BlCI1nzbXrE79pdugQ.roa (hash: lIeb2K1Ku3XdMNralNbKNkojTmlUe23ubgq7NoIci/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/63c55f-41be-44b6-84cf-3e1086e73ade/1/Axrg595e2RBFnl_GJAgVFTwuZ44.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/63c55f-41be-44b6-84cf-3e1086e73ade/1/Axrg595e2RBFnl_GJAgVFTwuZ44.mft
rsync://rpki.ripe.net/repository/DEFAULT/Axrg595e2RBFnl_GJAgVFTwuZ44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:fe:09:76:e4:f5:aa:5e:13:20:c9:c4:79:94:28:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=031ae0e7de5ed910459e5fc6240815153c2e678e
Validity
Not Before: Sep 23 02:00:18 2026 GMT
Not After : Sep 24 02:00:18 2026 GMT
Subject: CN=32906d8bccdf96582fb54acc0d31a0cb93f1fe25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d0:c8:13:25:16:c1:e3:81:ad:6d:07:da:cd:
b3:82:08:03:d3:a2:16:dd:10:bc:b5:16:2b:96:93:
fd:0f:c1:2c:3e:43:2d:3d:e2:5b:d1:e7:14:95:67:
7a:7c:db:a5:7d:58:cc:ab:59:03:ed:e3:d5:cf:34:
e3:f4:e7:a7:ba:ea:f4:23:0c:51:e8:cb:5b:e1:f7:
bf:45:11:5e:67:99:9c:b8:66:f8:99:6b:e0:02:31:
22:d6:3e:09:a7:6d:72:5f:1b:83:9f:d5:aa:53:e6:
06:09:0e:6e:51:51:f6:e9:34:48:36:f5:15:3a:0e:
c7:e9:4c:c0:46:c3:9f:81:fc:ab:ef:51:07:7e:9a:
a3:da:34:22:8a:53:19:a1:1a:d4:39:c2:c9:40:33:
4f:7a:45:45:fc:27:e9:a1:f4:6c:cc:9f:6b:89:3e:
c2:bd:88:56:b8:12:3a:f0:e4:b9:9a:79:86:f8:ba:
8b:8b:cf:5b:60:78:79:0d:5c:e6:00:ff:6d:d0:07:
f5:23:1d:73:e9:94:a9:db:e2:cd:11:7f:88:c2:b1:
c1:38:bc:b6:c8:22:ac:17:16:72:66:fd:e5:ce:c0:
77:8d:35:21:5a:d5:4f:c9:ee:19:47:9a:f6:ef:ad:
eb:f0:22:54:b4:a4:d5:8b:a7:75:d8:cd:78:5b:e2:
2c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:90:6D:8B:CC:DF:96:58:2F:B5:4A:CC:0D:31:A0:CB:93:F1:FE:25
X509v3 Authority Key Identifier:
keyid:03:1A:E0:E7:DE:5E:D9:10:45:9E:5F:C6:24:08:15:15:3C:2E:67:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Axrg595e2RBFnl_GJAgVFTwuZ44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/63c55f-41be-44b6-84cf-3e1086e73ade/1/Axrg595e2RBFnl_GJAgVFTwuZ44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/63c55f-41be-44b6-84cf-3e1086e73ade/1/Axrg595e2RBFnl_GJAgVFTwuZ44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:b2:be:39:9d:b8:fa:76:dc:77:8e:f7:98:36:4d:a6:6d:91:
b7:87:fe:41:19:c2:e8:7c:49:d4:00:8f:db:59:59:56:4c:82:
39:6f:d9:72:eb:ce:49:79:85:c8:df:25:63:66:95:4d:7d:35:
5e:76:bc:60:b0:ae:d7:80:c2:a6:b2:bc:44:f9:8d:d8:c5:b0:
f8:5b:6c:62:58:32:3a:49:5e:db:24:81:77:cf:b0:2f:4f:b8:
18:f2:9d:77:df:c3:65:dc:c3:a7:89:5d:13:7f:c5:52:6b:ce:
b3:97:30:1e:bf:d1:62:52:5d:41:00:3a:18:37:75:0f:c2:ec:
e7:84:40:7f:47:90:95:2b:fe:0e:df:32:57:f5:62:50:85:9c:
4f:93:a9:8e:75:e7:c5:96:d3:c1:48:07:55:e3:b3:02:03:32:
b3:c9:04:19:03:8a:c1:d5:e7:3c:11:64:04:be:06:30:68:58:
9e:4b:a8:65:31:0d:3a:64:78:15:ee:53:51:8c:84:5c:12:96:
25:08:1e:7e:f6:e7:52:4f:a5:53:ee:55:fb:cf:3f:ee:99:d4:
db:6b:21:d7:2b:cd:a4:42:df:ef:12:34:7b:62:6d:73:1c:07:
72:2a:f6:31:76:92:dd:7d:c8:2b:1e:ed:48:e7:2b:41:38:ec:
dc:6c:ba:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDL/gl25PWqXhMgycR5lCilMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMWFlMGU3ZGU1ZWQ5MTA0NTllNWZjNjI0MDgxNTE1M2My
ZTY3OGUwHhcNMjYwOTIzMDIwMDE4WhcNMjYwOTI0MDIwMDE4WjAzMTEwLwYDVQQD
EygzMjkwNmQ4YmNjZGY5NjU4MmZiNTRhY2MwZDMxYTBjYjkzZjFmZTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49DIEyUWweOBrW0H2s2zgggD06IW
3RC8tRYrlpP9D8EsPkMtPeJb0ecUlWd6fNulfVjMq1kD7ePVzzTj9Oenuur0IwxR
6Mtb4fe/RRFeZ5mcuGb4mWvgAjEi1j4Jp21yXxuDn9WqU+YGCQ5uUVH26TRINvUV
Og7H6UzARsOfgfyr71EHfpqj2jQiilMZoRrUOcLJQDNPekVF/CfpofRszJ9riT7C
vYhWuBI68OS5mnmG+LqLi89bYHh5DVzmAP9t0Af1Ix1z6ZSp2+LNEX+IwrHBOLy2
yCKsFxZyZv3lzsB3jTUhWtVPye4ZR5r2763r8CJUtKTVi6d12M14W+IsdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDKQbYvM35ZYL7VKzA0xoMuT8f4lMB8GA1UdIwQY
MBaAFAMa4OfeXtkQRZ5fxiQIFRU8LmeOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXhyZzU5NWUyUkJGbmxfR0pBZ1ZGVHd1WjQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi82M2M1NWYtNDFiZS00NGI2LTg0Y2Yt
M2UxMDg2ZTczYWRlLzEvQXhyZzU5NWUyUkJGbmxfR0pBZ1ZGVHd1WjQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi82M2M1NWYtNDFiZS00NGI2LTg0Y2YtM2UxMDg2ZTczYWRl
LzEvQXhyZzU5NWUyUkJGbmxfR0pBZ1ZGVHd1WjQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPLK+OZ24
+nbcd473mDZNpm2Rt4f+QRnC6HxJ1ACP21lZVkyCOW/ZcuvOSXmFyN8lY2aVTX01
Xna8YLCu14DCprK8RPmN2MWw+FtsYlgyOkle2ySBd8+wL0+4GPKdd9/DZdzDp4ld
E3/FUmvOs5cwHr/RYlJdQQA6GDd1D8Ls54RAf0eQlSv+Dt8yV/ViUIWcT5OpjnXn
xZbTwUgHVeOzAgMys8kEGQOKwdXnPBFkBL4GMGhYnkuoZTENOmR4Fe5TUYyEXBKW
JQgefvbnUk+lU+5V+88/7pnU22sh1yvNpELf7xI0e2JtcxwHcir2MXaS3X3IKx7t
SOcrQTjs3Gy6YQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 09:06:37 2026 by rpki-client