Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.mft
File: AXCkm2bRQaGePv12siXcoGwTjus.mft (raw, json)
Hash identifier: i7XDNS9/MO6Hy18h5Zjlgy2ubR3OBn1NQer9V1xW4jg=
Subject key identifier: 59:71:FD:91:9E:B0:C5:44:D5:B0:73:B8:F5:37:1F:03:80:43:1E:5B
Authority key identifier: 01:70:A4:9B:66:D1:41:A1:9E:3E:FD:76:B2:25:DC:A0:6C:13:8E:EB
Certificate issuer: /CN=0170a49b66d141a19e3efd76b225dca06c138eeb
Certificate serial: 019E1CB530911BCA489D2AF7A57FAFED32A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXCkm2bRQaGePv12siXcoGwTjus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.mft
Manifest number: D4
Signing time: Tue 12 May 2026 15:01:36 +0000
Manifest this update: Tue 12 May 2026 15:01:36 +0000
Manifest next update: Wed 13 May 2026 15:01:36 +0000
Files and hashes: 1: AXCkm2bRQaGePv12siXcoGwTjus.crl (hash: VCM5vkeV9k96K0hY/LF0lL6hxstuT84K5ylzXdWAiL8=)
2: zlyCcC0Ul5zEfxfhjrFpAiSpAHQ.asa (hash: nGTbBj1nHurYFd5cQcZSNhQFoQXg2jJ4C1ZQY3Rxxv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXCkm2bRQaGePv12siXcoGwTjus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:30:91:1b:ca:48:9d:2a:f7:a5:7f:af:ed:32:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0170a49b66d141a19e3efd76b225dca06c138eeb
Validity
Not Before: May 12 15:01:36 2026 GMT
Not After : May 13 15:01:36 2026 GMT
Subject: CN=5971fd919eb0c544d5b073b8f5371f0380431e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:75:85:3a:f6:82:0d:95:68:ea:ee:5a:b0:3f:
d3:d8:4c:49:64:17:98:38:0e:0a:98:fb:a4:2d:c9:
42:31:2b:13:06:11:a8:b6:a9:9d:20:71:c8:ef:50:
ed:74:6a:16:7b:a4:8b:8d:e1:c3:19:18:54:81:b6:
7b:24:43:a8:37:e1:bd:db:3b:b7:97:8c:45:dd:13:
4e:28:10:ee:9b:10:35:f9:4f:ac:07:a6:5e:8e:df:
0d:d6:33:29:93:aa:e1:36:b6:2a:60:92:d2:de:fc:
63:63:89:14:a5:b1:d2:e7:75:bc:52:f0:5e:59:d8:
96:68:7b:44:32:a9:6c:5e:d4:6b:f2:6d:7d:f4:95:
9a:71:50:24:74:80:96:74:4c:7d:ec:25:c6:87:64:
7e:4a:b7:d1:19:4e:c0:8f:a9:76:b1:e8:3b:bd:6c:
13:e4:1a:62:97:9e:c8:44:81:a4:7a:cb:5f:69:91:
5c:a2:a9:29:47:cd:87:b8:1b:4f:b4:df:46:a5:da:
3a:8e:7a:dc:e4:67:78:8d:d4:f0:0d:23:e3:2f:bb:
d9:e8:a5:f1:5c:8c:9b:41:9b:56:55:91:18:55:a1:
77:eb:24:00:6d:7e:ae:63:b9:c2:38:f9:60:5e:85:
ff:b5:fa:7c:1a:4c:fd:32:44:9a:5a:f6:f8:c5:31:
3a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:71:FD:91:9E:B0:C5:44:D5:B0:73:B8:F5:37:1F:03:80:43:1E:5B
X509v3 Authority Key Identifier:
keyid:01:70:A4:9B:66:D1:41:A1:9E:3E:FD:76:B2:25:DC:A0:6C:13:8E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXCkm2bRQaGePv12siXcoGwTjus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:ea:7d:1d:32:b5:ea:90:cd:b0:34:ee:5f:7a:4e:c4:9e:ad:
5f:b4:19:3a:b3:96:3f:13:03:f6:8c:45:e5:a4:a1:b3:19:7f:
b3:56:5d:d8:c4:73:5a:6f:17:57:76:30:b8:05:39:bc:12:0e:
92:ea:e1:79:98:83:e6:8b:55:2d:53:e4:8a:d5:65:94:e8:84:
93:1f:51:c3:4b:66:79:53:02:ff:19:e2:a1:c8:d9:5d:40:b9:
e4:be:3d:d9:34:c6:24:5f:f5:b8:85:f7:d6:d4:f2:2e:c4:fb:
9b:c9:a4:3e:b5:b7:88:1d:0f:76:45:6c:91:8a:c2:e6:d2:b6:
16:d4:0f:ff:e6:58:3c:08:95:27:44:63:04:ae:70:54:b8:f8:
46:2a:1c:4e:44:5a:7a:b3:c2:3a:c2:ba:91:40:76:bf:02:d4:
f5:85:62:70:3d:f8:d3:90:40:e6:c2:d3:c1:5b:81:53:55:dc:
7e:84:8b:01:8f:ce:9d:47:39:57:db:4d:8b:ff:98:bc:90:fe:
7f:cb:74:23:8d:21:3b:6d:6f:d6:f3:f7:09:01:74:da:1e:2f:
b2:75:75:b1:69:c8:97:b7:64:a8:f4:12:a5:da:20:02:78:f1:
34:ed:5c:43:9c:fd:fb:d6:50:4e:06:90:c9:82:c3:b3:6a:d3:
9a:b8:d0:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ctTCRG8pInSr3pX+v7TKlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNzBhNDliNjZkMTQxYTE5ZTNlZmQ3NmIyMjVkY2EwNmMx
MzhlZWIwHhcNMjYwNTEyMTUwMTM2WhcNMjYwNTEzMTUwMTM2WjAzMTEwLwYDVQQD
Eyg1OTcxZmQ5MTllYjBjNTQ0ZDViMDczYjhmNTM3MWYwMzgwNDMxZTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnWFOvaCDZVo6u5asD/T2ExJZBeY
OA4KmPukLclCMSsTBhGotqmdIHHI71DtdGoWe6SLjeHDGRhUgbZ7JEOoN+G92zu3
l4xF3RNOKBDumxA1+U+sB6Zejt8N1jMpk6rhNrYqYJLS3vxjY4kUpbHS53W8UvBe
WdiWaHtEMqlsXtRr8m199JWacVAkdICWdEx97CXGh2R+SrfRGU7Aj6l2seg7vWwT
5Bpil57IRIGkestfaZFcoqkpR82HuBtPtN9Gpdo6jnrc5Gd4jdTwDSPjL7vZ6KXx
XIybQZtWVZEYVaF36yQAbX6uY7nCOPlgXoX/tfp8Gkz9MkSaWvb4xTE67wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFlx/ZGesMVE1bBzuPU3HwOAQx5bMB8GA1UdIwQY
MBaAFAFwpJtm0UGhnj79drIl3KBsE47rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVhDa20yYlJRYUdlUHYxMnNpWGNvR3dUanVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8wMGUxMWYtOTIwOS00MzcwLWE5Yzgt
NzQ4ODZlMTE4MTBlLzEvQVhDa20yYlJRYUdlUHYxMnNpWGNvR3dUanVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC8wMGUxMWYtOTIwOS00MzcwLWE5YzgtNzQ4ODZlMTE4MTBl
LzEvQVhDa20yYlJRYUdlUHYxMnNpWGNvR3dUanVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoup9HTK1
6pDNsDTuX3pOxJ6tX7QZOrOWPxMD9oxF5aShsxl/s1Zd2MRzWm8XV3YwuAU5vBIO
kurheZiD5otVLVPkitVllOiEkx9Rw0tmeVMC/xniocjZXUC55L492TTGJF/1uIX3
1tTyLsT7m8mkPrW3iB0PdkVskYrC5tK2FtQP/+ZYPAiVJ0RjBK5wVLj4RiocTkRa
erPCOsK6kUB2vwLU9YVicD3405BA5sLTwVuBU1XcfoSLAY/OnUc5V9tNi/+YvJD+
f8t0I40hO21v1vP3CQF02h4vsnV1sWnIl7dkqPQSpdogAnjxNO1cQ5z9+9ZQTgaQ
yYLDs2rTmrjQbQ==
-----END CERTIFICATE-----
Generated at Wed May 13 01:43:20 2026 by rpki-client