Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.mft
File: AXCkm2bRQaGePv12siXcoGwTjus.mft (raw, json)
Hash identifier: WtMsKHzQGGDbGhajMhsYwPzxM/eXkyTve+Evh5mroyQ=
Subject key identifier: 4F:03:F2:F4:F7:79:4A:CD:4D:D9:54:10:6B:83:08:20:9D:33:57:E3
Authority key identifier: 01:70:A4:9B:66:D1:41:A1:9E:3E:FD:76:B2:25:DC:A0:6C:13:8E:EB
Certificate issuer: /CN=0170a49b66d141a19e3efd76b225dca06c138eeb
Certificate serial: 01A0D012C4408D67C9F303618682B0EFA557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXCkm2bRQaGePv12siXcoGwTjus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.mft
Manifest number: 023A
Signing time: Wed 23 Sep 2026 21:01:25 +0000
Manifest this update: Wed 23 Sep 2026 21:01:25 +0000
Manifest next update: Thu 24 Sep 2026 21:01:25 +0000
Files and hashes: 1: AXCkm2bRQaGePv12siXcoGwTjus.crl (hash: z14OtpYBnMFAtilLzlCQG5LfB3NjSriiPC5KbDqPKGs=)
2: zlyCcC0Ul5zEfxfhjrFpAiSpAHQ.asa (hash: nGTbBj1nHurYFd5cQcZSNhQFoQXg2jJ4C1ZQY3Rxxv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXCkm2bRQaGePv12siXcoGwTjus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:c4:40:8d:67:c9:f3:03:61:86:82:b0:ef:a5:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0170a49b66d141a19e3efd76b225dca06c138eeb
Validity
Not Before: Sep 23 21:01:25 2026 GMT
Not After : Sep 24 21:01:25 2026 GMT
Subject: CN=4f03f2f4f7794acd4dd954106b8308209d3357e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1f:6a:8b:0a:4b:a6:55:81:be:97:70:30:d6:
69:63:83:86:c6:d4:0b:4d:cb:9e:7b:4c:bc:71:98:
8e:b8:7b:d6:13:09:71:5f:fd:2a:a6:04:5e:f1:f0:
cc:27:17:74:72:fd:b2:e3:88:f7:b0:b3:9a:1c:45:
16:e6:f6:32:35:5d:48:72:94:c7:89:a0:e5:3c:c0:
52:75:d2:a8:94:e1:6d:7c:3a:b4:80:51:d9:27:db:
b2:b7:97:2a:35:dd:9d:b6:b4:40:d7:e1:51:6c:56:
6e:ae:eb:d4:f5:e4:67:38:1c:7b:e7:cc:ac:d0:3d:
e2:da:d1:67:d4:aa:31:f7:12:6d:c8:63:9b:39:f3:
22:d4:2b:ee:21:b3:ca:5a:b8:2d:13:5b:92:50:b5:
a8:af:d5:7c:b8:16:0a:69:b0:c6:90:c8:cc:5d:d2:
64:56:cc:a3:69:e8:a0:be:4d:4e:2a:74:ba:66:dc:
a0:96:e9:cb:58:6f:3d:5f:73:ff:bf:d7:c5:d5:90:
42:13:10:6e:3d:ee:c7:f4:42:14:ed:b3:83:12:04:
11:a0:3a:22:86:04:1a:3a:69:c2:77:42:61:7c:17:
d7:5a:b6:e9:11:26:07:f5:20:42:ba:60:aa:2b:c7:
e4:2a:a6:9e:0f:78:fc:c2:28:fc:dc:d1:18:c5:ac:
d3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:03:F2:F4:F7:79:4A:CD:4D:D9:54:10:6B:83:08:20:9D:33:57:E3
X509v3 Authority Key Identifier:
keyid:01:70:A4:9B:66:D1:41:A1:9E:3E:FD:76:B2:25:DC:A0:6C:13:8E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXCkm2bRQaGePv12siXcoGwTjus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:de:ea:ab:16:77:2b:3e:9b:6b:27:94:df:13:40:a8:63:2b:
26:4a:ba:fb:62:8f:4f:27:dd:a1:46:7c:31:91:9f:24:7e:e0:
fc:af:4b:a3:da:b1:4d:d0:0d:cc:09:3b:f7:82:94:7a:bc:7a:
8d:09:7a:bb:61:db:fb:7c:92:d6:20:68:a1:c2:c7:b3:18:25:
2c:dc:01:89:b3:32:9f:55:3e:6c:6a:42:33:b3:56:2d:53:a1:
34:94:6f:08:ab:bc:a4:51:8b:04:f8:93:ad:4e:3e:cc:7d:31:
ca:73:40:40:05:ef:ba:40:a4:5f:28:83:e2:6f:2a:f8:e7:1d:
2a:60:9d:64:b3:0d:d6:69:67:a1:c8:ed:31:40:e1:8a:38:0f:
d1:db:89:5f:00:70:0c:8b:a1:10:f7:77:3c:24:83:59:fe:0d:
1c:a6:ee:c5:7f:ca:85:b9:36:f3:b8:47:0a:c6:28:ae:2d:85:
9b:12:a3:49:f3:8d:27:d3:ce:b3:b5:94:b6:49:ff:fa:61:a3:
db:78:4d:fb:2a:e7:73:bf:df:58:74:e6:f6:b6:44:27:00:78:
bc:76:2c:fd:54:db:4c:bf:4d:13:31:8f:ed:f9:5d:fc:aa:4d:
9d:94:5a:31:a3:9e:35:4f:9b:e0:e0:61:61:3e:08:05:b6:59:
a1:41:d5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:08:05 2026 by rpki-client