Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.mft
File: AXCkm2bRQaGePv12siXcoGwTjus.mft (raw, json)
Hash identifier: 1Jn3jI7ahk03Uv2VNl/p4rqsfAqKVYodZwXWmAGnBzg=
Subject key identifier: 6C:87:72:FC:A4:63:A6:78:F2:C8:16:6F:2C:F1:BA:11:30:E5:92:EA
Authority key identifier: 01:70:A4:9B:66:D1:41:A1:9E:3E:FD:76:B2:25:DC:A0:6C:13:8E:EB
Certificate issuer: /CN=0170a49b66d141a19e3efd76b225dca06c138eeb
Certificate serial: 019D258352691FB1AC186EA0F5340BD1BC2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXCkm2bRQaGePv12siXcoGwTjus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.mft
Manifest number: 54
Signing time: Wed 25 Mar 2026 15:00:56 +0000
Manifest this update: Wed 25 Mar 2026 15:00:56 +0000
Manifest next update: Thu 26 Mar 2026 15:00:56 +0000
Files and hashes: 1: AXCkm2bRQaGePv12siXcoGwTjus.crl (hash: p8FNM6SR49Uz3qrwvUIwwFyvhnbhCYEJmdyuHfCBIps=)
2: zlyCcC0Ul5zEfxfhjrFpAiSpAHQ.asa (hash: nGTbBj1nHurYFd5cQcZSNhQFoQXg2jJ4C1ZQY3Rxxv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXCkm2bRQaGePv12siXcoGwTjus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:52:69:1f:b1:ac:18:6e:a0:f5:34:0b:d1:bc:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0170a49b66d141a19e3efd76b225dca06c138eeb
Validity
Not Before: Mar 25 15:00:56 2026 GMT
Not After : Mar 26 15:00:56 2026 GMT
Subject: CN=6c8772fca463a678f2c8166f2cf1ba1130e592ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f8:43:cd:94:35:37:51:14:18:2a:2c:fa:69:
65:a9:c4:a2:cd:8b:92:14:b0:77:1e:9a:e0:86:22:
ed:5a:51:73:98:1d:3b:9a:e8:64:e3:05:18:2e:55:
d7:d7:1b:8c:a2:98:b2:83:43:e5:c5:6b:be:c3:a2:
84:16:e8:cd:ea:ba:43:dc:4e:0f:83:f9:b0:44:39:
10:aa:7c:cb:4f:a4:a1:e8:33:f9:c5:0c:dc:d5:1e:
fa:1f:57:f9:c6:ea:75:1c:d7:6e:f7:a8:e0:0d:61:
c0:4b:aa:b7:b1:b5:77:50:d8:ca:02:38:8d:62:66:
87:d3:9b:55:97:fc:6b:b2:f1:a7:97:54:58:8c:13:
5c:d7:3e:8d:30:57:2d:08:dc:03:f9:26:e5:0c:e8:
3f:d4:9c:8b:0c:59:0d:b7:5a:9c:d0:79:0c:8a:e0:
2a:3a:0e:5e:f1:6b:9e:54:6a:39:6e:90:13:4f:93:
8a:e8:af:25:8d:b3:68:a3:93:fe:63:aa:dc:33:e2:
78:21:e5:83:be:28:03:2d:67:6d:af:91:32:5b:68:
06:49:df:56:eb:f0:92:bc:52:68:4f:84:7a:64:e8:
29:cc:90:87:13:99:1b:31:68:74:24:dc:fe:ba:83:
33:f3:1b:e0:42:2e:a9:43:22:e6:89:84:6b:95:30:
04:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:87:72:FC:A4:63:A6:78:F2:C8:16:6F:2C:F1:BA:11:30:E5:92:EA
X509v3 Authority Key Identifier:
keyid:01:70:A4:9B:66:D1:41:A1:9E:3E:FD:76:B2:25:DC:A0:6C:13:8E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXCkm2bRQaGePv12siXcoGwTjus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:b3:b8:17:0e:37:54:04:5c:c1:c5:2d:0d:f8:93:8a:6b:82:
5d:51:02:13:4c:89:d9:67:17:f2:d5:81:ee:86:55:3f:8c:c8:
33:6b:4b:6d:c3:01:28:44:44:3f:9c:61:48:f5:ce:7c:46:06:
43:7b:4c:7f:2b:ae:1c:ce:55:fc:b4:f4:f3:23:67:65:db:5c:
4d:bb:99:03:87:b5:e1:24:f3:77:d0:61:d4:c7:1a:97:34:28:
cb:e0:c4:3a:2c:26:36:f3:52:69:58:bd:dd:57:c1:48:a7:3a:
e3:94:a1:81:be:a8:55:c5:da:91:07:8e:99:d5:3e:8b:90:c8:
1a:cf:08:af:9b:ec:62:8b:bd:ce:a1:40:e5:4c:55:38:d5:21:
84:ab:60:cd:bc:02:ee:c6:7f:1c:02:cb:b7:14:72:cd:a6:16:
3f:38:62:0d:a4:5d:bc:78:5f:c6:9f:e1:56:93:19:3e:fa:46:
99:e5:0f:3d:f1:dd:93:17:b5:8f:c7:51:6e:52:08:30:38:4d:
41:70:f3:3f:57:b1:9a:36:f8:af:66:ae:86:d3:cc:ec:c1:6b:
ef:a6:78:2d:d7:8c:d1:ac:9d:13:9e:6f:14:97:76:52:cf:67:
ff:56:39:da:c5:8d:52:df:41:fa:53:78:e8:b7:5a:47:82:d0:
aa:12:dc:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lg1JpH7GsGG6g9TQL0bwuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNzBhNDliNjZkMTQxYTE5ZTNlZmQ3NmIyMjVkY2EwNmMx
MzhlZWIwHhcNMjYwMzI1MTUwMDU2WhcNMjYwMzI2MTUwMDU2WjAzMTEwLwYDVQQD
Eyg2Yzg3NzJmY2E0NjNhNjc4ZjJjODE2NmYyY2YxYmExMTMwZTU5MmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/hDzZQ1N1EUGCos+mllqcSizYuS
FLB3HprghiLtWlFzmB07muhk4wUYLlXX1xuMopiyg0PlxWu+w6KEFujN6rpD3E4P
g/mwRDkQqnzLT6Sh6DP5xQzc1R76H1f5xup1HNdu96jgDWHAS6q3sbV3UNjKAjiN
YmaH05tVl/xrsvGnl1RYjBNc1z6NMFctCNwD+SblDOg/1JyLDFkNt1qc0HkMiuAq
Og5e8WueVGo5bpATT5OK6K8ljbNoo5P+Y6rcM+J4IeWDvigDLWdtr5EyW2gGSd9W
6/CSvFJoT4R6ZOgpzJCHE5kbMWh0JNz+uoMz8xvgQi6pQyLmiYRrlTAEDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGyHcvykY6Z48sgWbyzxuhEw5ZLqMB8GA1UdIwQY
MBaAFAFwpJtm0UGhnj79drIl3KBsE47rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVhDa20yYlJRYUdlUHYxMnNpWGNvR3dUanVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8wMGUxMWYtOTIwOS00MzcwLWE5Yzgt
NzQ4ODZlMTE4MTBlLzEvQVhDa20yYlJRYUdlUHYxMnNpWGNvR3dUanVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC8wMGUxMWYtOTIwOS00MzcwLWE5YzgtNzQ4ODZlMTE4MTBl
LzEvQVhDa20yYlJRYUdlUHYxMnNpWGNvR3dUanVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADLO4Fw43
VARcwcUtDfiTimuCXVECE0yJ2WcX8tWB7oZVP4zIM2tLbcMBKEREP5xhSPXOfEYG
Q3tMfyuuHM5V/LT08yNnZdtcTbuZA4e14STzd9Bh1McalzQoy+DEOiwmNvNSaVi9
3VfBSKc645Shgb6oVcXakQeOmdU+i5DIGs8Ir5vsYou9zqFA5UxVONUhhKtgzbwC
7sZ/HALLtxRyzaYWPzhiDaRdvHhfxp/hVpMZPvpGmeUPPfHdkxe1j8dRblIIMDhN
QXDzP1exmjb4r2auhtPM7MFr76Z4LdeM0aydE55vFJd2Us9n/1Y52sWNUt9B+lN4
6LdaR4LQqhLcMw==
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:01:58 2026 by rpki-client