Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.mft
File: aXC3r07RGKBaFTFefYuUY0yf6iA.mft (raw, json)
Hash identifier: tx99VXJ2nKnlAI/PbWTcTysBfHeiCOWmPI+EsPh5/2w=
Subject key identifier: 13:44:AC:A8:DE:43:05:EC:4E:2B:98:EB:26:AA:6B:79:F0:B1:FB:B1
Authority key identifier: 69:70:B7:AF:4E:D1:18:A0:5A:15:31:5E:7D:8B:94:63:4C:9F:EA:20
Certificate issuer: /CN=6970b7af4ed118a05a15315e7d8b94634c9fea20
Certificate serial: 019D284E21D21AE9F7AC17A5C813D78EB0EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXC3r07RGKBaFTFefYuUY0yf6iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.mft
Manifest number: 0E11
Signing time: Thu 26 Mar 2026 04:01:42 +0000
Manifest this update: Thu 26 Mar 2026 04:01:42 +0000
Manifest next update: Fri 27 Mar 2026 04:01:42 +0000
Files and hashes: 1: aXC3r07RGKBaFTFefYuUY0yf6iA.crl (hash: BwZbnDPp0M45Mgxd0R5XLNbOr8FalSIVWIe5FbS5FW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXC3r07RGKBaFTFefYuUY0yf6iA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:21:d2:1a:e9:f7:ac:17:a5:c8:13:d7:8e:b0:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6970b7af4ed118a05a15315e7d8b94634c9fea20
Validity
Not Before: Mar 26 04:01:42 2026 GMT
Not After : Mar 27 04:01:42 2026 GMT
Subject: CN=1344aca8de4305ec4e2b98eb26aa6b79f0b1fbb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f2:06:19:70:81:63:08:a2:ce:33:74:6e:df:
11:80:25:b8:2a:68:f3:ff:82:2f:46:5c:a9:76:16:
82:e4:57:31:fc:3a:15:e9:29:22:7a:a6:e9:76:74:
5d:a0:84:ed:c2:9f:0a:78:5e:ec:d4:98:81:2f:56:
ee:c5:5d:1a:63:54:8d:fe:e8:da:a7:85:fb:06:f8:
fd:a2:b6:ef:0e:8b:96:7f:69:92:1e:57:09:4f:82:
ac:cc:99:d0:e4:58:71:e9:1d:2f:70:b1:af:8b:41:
48:20:76:f8:cb:04:f2:ad:51:ea:32:e6:2d:e0:d9:
6e:2d:e9:19:cb:3f:dd:7a:b9:20:c3:8e:95:ac:60:
43:ee:41:1e:30:45:7d:dd:bc:e0:5c:eb:1f:08:84:
83:9b:34:93:a4:f8:66:ac:7f:02:16:23:cc:9d:1a:
15:1f:40:a7:bd:af:64:ca:f9:a4:78:b7:56:24:c0:
9e:02:ac:72:53:c1:24:27:f3:af:87:d6:0c:c7:9d:
04:7f:91:b4:ad:78:ef:1f:eb:82:bc:3b:f1:58:a8:
7e:77:1a:c9:ef:71:e7:06:39:44:42:38:b8:53:15:
86:04:e0:12:77:73:5d:4e:7c:07:de:f4:72:cd:68:
70:87:02:e1:41:09:59:e7:06:f1:da:72:fc:8c:e0:
74:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:44:AC:A8:DE:43:05:EC:4E:2B:98:EB:26:AA:6B:79:F0:B1:FB:B1
X509v3 Authority Key Identifier:
keyid:69:70:B7:AF:4E:D1:18:A0:5A:15:31:5E:7D:8B:94:63:4C:9F:EA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXC3r07RGKBaFTFefYuUY0yf6iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:fb:78:8c:39:0a:d2:96:ca:43:b5:a6:e4:23:95:37:51:0f:
5e:54:ab:c8:25:e8:1f:8f:76:77:5a:12:eb:46:0b:eb:fb:13:
0b:60:41:40:a6:2e:24:29:e1:31:8e:f1:c3:da:d6:e1:af:2c:
29:1a:3e:e6:c8:99:5e:c7:8e:c4:c9:79:2c:14:72:5d:31:8c:
43:1e:e4:60:2f:53:60:0f:8a:6a:15:a2:a4:f9:d3:e9:04:e7:
fd:2e:70:44:c7:bb:46:e2:74:9c:ff:d7:0b:51:02:3a:49:5a:
7a:44:e8:3a:9a:8c:ee:b9:b5:f9:ce:94:52:ad:1e:2e:3e:34:
98:f5:b4:25:65:5a:8c:48:2e:68:ed:06:36:fb:74:a2:1a:f4:
3f:a5:e2:d7:48:c1:1b:ae:ab:71:9f:04:c9:a7:10:a9:07:75:
cb:97:6a:69:2d:ad:93:b4:aa:f1:8a:02:c3:ee:35:d6:8a:5d:
cc:e8:43:19:d4:79:99:40:ae:b0:c5:81:73:e4:92:9c:0b:4e:
2f:dc:2e:58:62:1c:12:99:2d:5c:8f:df:73:87:b3:7d:f2:b4:
2a:7d:61:c9:6d:f3:c0:e9:2f:53:6a:5d:71:83:b3:db:13:81:
2b:1f:bf:2c:91:99:a3:5e:59:2d:21:2a:7f:d1:e0:88:7f:62:
bc:46:8f:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTiHSGun3rBelyBPXjrDsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NzBiN2FmNGVkMTE4YTA1YTE1MzE1ZTdkOGI5NDYzNGM5
ZmVhMjAwHhcNMjYwMzI2MDQwMTQyWhcNMjYwMzI3MDQwMTQyWjAzMTEwLwYDVQQD
EygxMzQ0YWNhOGRlNDMwNWVjNGUyYjk4ZWIyNmFhNmI3OWYwYjFmYmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/IGGXCBYwiizjN0bt8RgCW4Kmjz
/4IvRlypdhaC5Fcx/DoV6SkieqbpdnRdoITtwp8KeF7s1JiBL1buxV0aY1SN/uja
p4X7Bvj9orbvDouWf2mSHlcJT4KszJnQ5Fhx6R0vcLGvi0FIIHb4ywTyrVHqMuYt
4NluLekZyz/derkgw46VrGBD7kEeMEV93bzgXOsfCISDmzSTpPhmrH8CFiPMnRoV
H0Cnva9kyvmkeLdWJMCeAqxyU8EkJ/Ovh9YMx50Ef5G0rXjvH+uCvDvxWKh+dxrJ
73HnBjlEQji4UxWGBOASd3NdTnwH3vRyzWhwhwLhQQlZ5wbx2nL8jOB0MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBNErKjeQwXsTiuY6yaqa3nwsfuxMB8GA1UdIwQY
MBaAFGlwt69O0RigWhUxXn2LlGNMn+ogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVhDM3IwN1JHS0JhRlRGZWZZdVVZMHlmNmlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS82YzEzYWMtMzhhNy00NjhjLWI3ZjEt
YjEwNjIzMmEzNDJjLzEvYVhDM3IwN1JHS0JhRlRGZWZZdVVZMHlmNmlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS82YzEzYWMtMzhhNy00NjhjLWI3ZjEtYjEwNjIzMmEzNDJj
LzEvYVhDM3IwN1JHS0JhRlRGZWZZdVVZMHlmNmlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUPt4jDkK
0pbKQ7Wm5COVN1EPXlSryCXoH492d1oS60YL6/sTC2BBQKYuJCnhMY7xw9rW4a8s
KRo+5siZXseOxMl5LBRyXTGMQx7kYC9TYA+KahWipPnT6QTn/S5wRMe7RuJ0nP/X
C1ECOklaekToOpqM7rm1+c6UUq0eLj40mPW0JWVajEguaO0GNvt0ohr0P6Xi10jB
G66rcZ8EyacQqQd1y5dqaS2tk7Sq8YoCw+411opdzOhDGdR5mUCusMWBc+SSnAtO
L9wuWGIcEpktXI/fc4ezffK0Kn1hyW3zwOkvU2pdcYOz2xOBKx+/LJGZo15ZLSEq
f9HgiH9ivEaPNQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:39:48 2026 by rpki-client