Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.mft
File: AXCkm2bRQaGePv12siXcoGwTjus.mft (raw, json)
Hash identifier: 9awfX2hJDStrPeeJw7UeZsuKLip+lhGEpvJ0d+VgfY4=
Subject key identifier: C1:97:5A:39:54:7C:97:59:42:03:FB:F5:A2:D3:F1:DB:AB:E9:AC:3A
Authority key identifier: 01:70:A4:9B:66:D1:41:A1:9E:3E:FD:76:B2:25:DC:A0:6C:13:8E:EB
Certificate issuer: /CN=0170a49b66d141a19e3efd76b225dca06c138eeb
Certificate serial: 019F8F7F8573F3FE59C9AC390270804D126D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXCkm2bRQaGePv12siXcoGwTjus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.mft
Manifest number: 0194
Signing time: Thu 23 Jul 2026 15:02:06 +0000
Manifest this update: Thu 23 Jul 2026 15:02:06 +0000
Manifest next update: Fri 24 Jul 2026 15:02:06 +0000
Files and hashes: 1: AXCkm2bRQaGePv12siXcoGwTjus.crl (hash: 8QWchFkoXFRGbXBl7KdqH5OLOIMGYJN21WaZNkvyFdk=)
2: zlyCcC0Ul5zEfxfhjrFpAiSpAHQ.asa (hash: nGTbBj1nHurYFd5cQcZSNhQFoQXg2jJ4C1ZQY3Rxxv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXCkm2bRQaGePv12siXcoGwTjus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:85:73:f3:fe:59:c9:ac:39:02:70:80:4d:12:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0170a49b66d141a19e3efd76b225dca06c138eeb
Validity
Not Before: Jul 23 15:02:06 2026 GMT
Not After : Jul 24 15:02:06 2026 GMT
Subject: CN=c1975a39547c97594203fbf5a2d3f1dbabe9ac3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:04:17:99:12:54:8b:dd:e5:79:38:b4:a1:e0:
00:e2:a5:b6:a2:06:84:70:a7:22:b2:de:fb:05:19:
17:d2:83:11:45:7e:06:7d:ec:50:e6:04:8c:9a:1b:
9a:70:3d:0f:1f:37:49:fa:53:53:68:0e:b7:82:57:
2b:5f:a5:d8:2b:a5:15:70:51:99:2f:3b:e5:2c:9d:
b4:98:f6:f6:84:b6:1e:69:dc:8d:02:bc:fa:d7:d7:
69:a4:96:0f:38:8a:5a:64:a5:6d:2a:6a:22:c4:46:
fd:24:ab:f8:36:b9:9b:91:4a:54:25:af:50:49:38:
3c:07:b8:eb:25:d7:70:a2:e3:8e:51:92:dc:93:50:
b1:84:1a:24:12:4d:ae:04:8e:e4:43:6e:41:d7:92:
0e:1a:bd:fb:db:7d:95:8b:7f:c0:2d:13:2e:fe:79:
09:40:b8:7c:a9:b4:02:fc:fe:02:b8:d3:44:a3:d6:
4d:12:1b:60:b1:0c:cc:71:4b:1f:b8:f7:5c:93:9d:
19:f9:d8:f1:09:44:cb:da:d4:ce:ee:84:88:32:84:
9b:4c:5c:c4:85:54:98:20:21:f9:f3:03:28:fe:ad:
fa:34:0a:75:eb:e8:c6:10:ff:cb:ee:70:f7:cd:0d:
6d:c7:70:45:05:77:e9:9d:a2:d5:5f:23:34:75:da:
eb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:97:5A:39:54:7C:97:59:42:03:FB:F5:A2:D3:F1:DB:AB:E9:AC:3A
X509v3 Authority Key Identifier:
keyid:01:70:A4:9B:66:D1:41:A1:9E:3E:FD:76:B2:25:DC:A0:6C:13:8E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXCkm2bRQaGePv12siXcoGwTjus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:75:b0:0d:41:96:00:6b:82:ba:65:50:51:92:56:e2:6c:35:
07:91:bc:10:4c:f3:0d:8a:9a:48:4c:4e:05:24:9e:44:94:ab:
dc:9f:d6:a3:c8:66:2a:50:30:21:b1:15:dd:4f:da:e8:9b:ca:
7e:4d:d8:8d:35:80:30:ff:8a:b5:71:a9:a7:4a:45:1e:47:0f:
d4:63:83:9e:68:76:b1:67:7e:8f:92:e6:31:3d:7e:71:cc:6e:
e7:04:5e:da:6f:f8:62:53:d6:30:0e:9f:99:1b:69:b8:f3:5f:
f5:9d:22:d0:a4:ff:45:33:8e:9b:43:29:29:db:a3:5a:60:ae:
bf:17:41:e4:42:47:dc:6e:b3:a7:18:7d:ff:56:b3:9c:e5:90:
9a:05:a5:ef:77:3a:1e:e2:81:ac:7f:42:0b:96:c7:38:fa:de:
e2:42:fb:f5:19:27:9f:83:a5:76:b6:af:96:f7:8f:34:08:a3:
97:af:b6:0d:fa:ce:02:f5:8a:3e:cc:6f:ca:bc:51:49:59:53:
d9:9e:6f:07:04:1e:a4:a4:b4:10:79:d6:53:d2:8a:df:44:01:
a8:7d:2a:85:75:53:54:69:69:3c:cb:75:70:8a:f1:23:a5:e3:
8f:ad:a1:95:75:11:5c:cc:a5:82:ba:bb:20:7c:95:4e:b5:fd:
1f:d9:d4:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Pf4Vz8/5Zyaw5AnCATRJtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNzBhNDliNjZkMTQxYTE5ZTNlZmQ3NmIyMjVkY2EwNmMx
MzhlZWIwHhcNMjYwNzIzMTUwMjA2WhcNMjYwNzI0MTUwMjA2WjAzMTEwLwYDVQQD
EyhjMTk3NWEzOTU0N2M5NzU5NDIwM2ZiZjVhMmQzZjFkYmFiZTlhYzNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gQXmRJUi93leTi0oeAA4qW2ogaE
cKcist77BRkX0oMRRX4GfexQ5gSMmhuacD0PHzdJ+lNTaA63glcrX6XYK6UVcFGZ
LzvlLJ20mPb2hLYeadyNArz619dppJYPOIpaZKVtKmoixEb9JKv4NrmbkUpUJa9Q
STg8B7jrJddwouOOUZLck1CxhBokEk2uBI7kQ25B15IOGr37232Vi3/ALRMu/nkJ
QLh8qbQC/P4CuNNEo9ZNEhtgsQzMcUsfuPdck50Z+djxCUTL2tTO7oSIMoSbTFzE
hVSYICH58wMo/q36NAp16+jGEP/L7nD3zQ1tx3BFBXfpnaLVXyM0ddrrfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMGXWjlUfJdZQgP79aLT8dur6aw6MB8GA1UdIwQY
MBaAFAFwpJtm0UGhnj79drIl3KBsE47rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVhDa20yYlJRYUdlUHYxMnNpWGNvR3dUanVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8wMGUxMWYtOTIwOS00MzcwLWE5Yzgt
NzQ4ODZlMTE4MTBlLzEvQVhDa20yYlJRYUdlUHYxMnNpWGNvR3dUanVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC8wMGUxMWYtOTIwOS00MzcwLWE5YzgtNzQ4ODZlMTE4MTBl
LzEvQVhDa20yYlJRYUdlUHYxMnNpWGNvR3dUanVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFHWwDUGW
AGuCumVQUZJW4mw1B5G8EEzzDYqaSExOBSSeRJSr3J/Wo8hmKlAwIbEV3U/a6JvK
fk3YjTWAMP+KtXGpp0pFHkcP1GODnmh2sWd+j5LmMT1+ccxu5wRe2m/4YlPWMA6f
mRtpuPNf9Z0i0KT/RTOOm0MpKdujWmCuvxdB5EJH3G6zpxh9/1aznOWQmgWl73c6
HuKBrH9CC5bHOPre4kL79Rknn4OldravlvePNAijl6+2DfrOAvWKPsxvyrxRSVlT
2Z5vBwQepKS0EHnWU9KK30QBqH0qhXVTVGlpPMt1cIrxI6Xjj62hlXURXMylgrq7
IHyVTrX9H9nU9g==
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:26:56 2026 by rpki-client