Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
File: axoVfiCtyjtEBnuo2NyrrmmKi-w.mft (raw, json)
Hash identifier: qCBWlmL06ed26MC9XGVar0yr9vMy8Oa8tQ4/fuYOXWo=
Subject key identifier: 61:62:07:BD:1C:A8:0A:B3:8F:C6:D3:1D:23:52:63:99:94:5F:6B:E3
Authority key identifier: 6B:1A:15:7E:20:AD:CA:3B:44:06:7B:A8:D8:DC:AB:AE:69:8A:8B:EC
Certificate issuer: /CN=6b1a157e20adca3b44067ba8d8dcabae698a8bec
Certificate serial: 019D29614AC6072292998642BB1BFDC821F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
Manifest number: 1188
Signing time: Thu 26 Mar 2026 09:02:15 +0000
Manifest this update: Thu 26 Mar 2026 09:02:15 +0000
Manifest next update: Fri 27 Mar 2026 09:02:15 +0000
Files and hashes: 1: axoVfiCtyjtEBnuo2NyrrmmKi-w.crl (hash: n+F2r/df6zms39m3w80UH0chaU0IDLZ6YNBasbrH2nU=)
2: tp2VAgTi6H7UsWr3WWiFgob6-Yg.roa (hash: CPo8RNxtFyI7EIPAUaIjkVpI3fVg5oAaTxsNnGEN0eI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:4a:c6:07:22:92:99:86:42:bb:1b:fd:c8:21:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b1a157e20adca3b44067ba8d8dcabae698a8bec
Validity
Not Before: Mar 26 09:02:15 2026 GMT
Not After : Mar 27 09:02:15 2026 GMT
Subject: CN=616207bd1ca80ab38fc6d31d23526399945f6be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:8c:ce:cd:c1:58:bf:dc:44:4b:e3:b4:42:7f:
b4:16:76:ff:70:20:19:22:fd:16:78:ab:ac:99:07:
b6:f7:7a:34:36:57:27:72:8b:84:64:50:ae:12:91:
b2:f4:fb:cd:4d:8f:b5:ca:de:14:09:1d:80:f7:44:
0a:2c:47:c8:9f:5e:57:99:41:61:fd:12:6a:f3:e1:
31:03:42:4a:69:3f:60:8c:75:86:db:37:f2:c0:f8:
d4:74:16:c4:f1:00:58:ce:9d:91:6d:7a:83:d3:ec:
65:fa:00:c3:e3:1a:5d:58:95:f9:2b:ff:7a:15:1e:
bf:47:e4:62:d0:8f:11:3a:71:55:09:63:bd:0e:5a:
e0:f3:52:79:b9:d2:ae:90:b1:d9:21:63:94:64:aa:
91:0a:38:38:fa:ee:e5:ef:8a:43:54:01:ed:4a:e7:
db:df:75:fa:3d:cc:c5:79:f8:15:fe:d4:5f:86:a1:
bc:ac:e0:92:5e:31:31:d8:40:91:1e:12:46:5e:bf:
5f:87:58:54:6f:49:d1:ac:2f:4a:91:df:a9:a6:29:
40:fb:00:06:a4:63:29:ae:06:cc:95:dd:80:09:a4:
12:14:67:1d:df:1b:49:39:d9:89:69:93:7a:88:3c:
e5:5d:98:e2:75:a2:13:39:23:98:ba:36:ac:8a:15:
94:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:62:07:BD:1C:A8:0A:B3:8F:C6:D3:1D:23:52:63:99:94:5F:6B:E3
X509v3 Authority Key Identifier:
keyid:6B:1A:15:7E:20:AD:CA:3B:44:06:7B:A8:D8:DC:AB:AE:69:8A:8B:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:21:b7:07:94:93:2a:94:d2:9c:d8:43:e1:4d:1f:95:1d:72:
4e:84:ba:53:30:35:63:03:c3:ea:b5:5d:48:d7:0f:d4:62:5d:
f2:bf:47:a0:9d:8b:68:cf:42:be:e2:97:4a:ba:68:28:d6:78:
ea:e7:a0:82:81:43:b6:35:9c:e1:6e:57:d6:47:a1:e7:5f:4e:
32:72:c2:61:53:ce:db:1d:d4:e1:91:76:3e:06:34:ee:e3:d2:
9d:e0:5f:8a:ff:97:c5:a3:92:61:0f:89:54:47:70:1b:56:da:
4d:26:08:e0:bb:c7:79:d2:bb:39:73:38:03:71:28:07:26:a7:
86:4b:3d:59:ae:58:05:72:28:58:cb:e8:0b:24:6b:22:87:af:
20:a5:83:22:41:ae:4d:34:4e:65:4e:fd:20:74:20:7a:64:7d:
61:cb:08:ee:f3:2b:ce:7c:9b:46:df:ac:13:a8:22:bf:e6:fd:
a5:7a:de:ea:f3:76:47:ef:0a:f9:e1:63:92:63:4e:24:68:8e:
04:37:33:d3:1c:c9:65:46:ab:a1:1a:53:fb:c6:1b:56:84:60:
19:7d:10:b0:f6:b2:4c:49:41:3d:63:b5:19:d4:2b:55:41:2f:
32:58:79:d7:45:e7:45:47:3d:43:a7:41:4d:18:c7:c3:26:99:
02:9b:75:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:29:37 2026 by rpki-client