Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
File: axoVfiCtyjtEBnuo2NyrrmmKi-w.mft (raw, json)
Hash identifier: dUx2exceIyncUSiPf7+18/tcWf+cjC5a90fiBB80CuY=
Subject key identifier: 11:45:2D:3E:40:25:46:02:04:DB:F1:7A:D3:A4:78:9D:5D:97:73:37
Authority key identifier: 6B:1A:15:7E:20:AD:CA:3B:44:06:7B:A8:D8:DC:AB:AE:69:8A:8B:EC
Certificate issuer: /CN=6b1a157e20adca3b44067ba8d8dcabae698a8bec
Certificate serial: 019E2091BED5D86D662E581BDA384D35C409
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
Manifest number: 1208
Signing time: Wed 13 May 2026 09:01:22 +0000
Manifest this update: Wed 13 May 2026 09:01:22 +0000
Manifest next update: Thu 14 May 2026 09:01:22 +0000
Files and hashes: 1: axoVfiCtyjtEBnuo2NyrrmmKi-w.crl (hash: AR2eyW21/DtKXWV/ayAMrfUpo6s4zMYz3lguTKWCnuU=)
2: tp2VAgTi6H7UsWr3WWiFgob6-Yg.roa (hash: CPo8RNxtFyI7EIPAUaIjkVpI3fVg5oAaTxsNnGEN0eI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:be:d5:d8:6d:66:2e:58:1b:da:38:4d:35:c4:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b1a157e20adca3b44067ba8d8dcabae698a8bec
Validity
Not Before: May 13 09:01:22 2026 GMT
Not After : May 14 09:01:22 2026 GMT
Subject: CN=11452d3e4025460204dbf17ad3a4789d5d977337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f4:80:29:63:05:91:74:e8:95:20:33:05:24:
a0:ca:42:2e:ff:e7:0c:0f:90:31:d7:c4:a4:4d:84:
4d:33:d7:5d:34:d8:be:29:71:70:c2:ac:1e:2e:00:
83:dc:36:e3:0c:ef:3e:99:98:8d:64:ad:2a:a9:b0:
2d:41:cb:36:8a:be:1f:dd:c1:23:01:33:97:4d:c6:
da:b9:07:98:f0:cf:53:90:db:e5:c8:20:0f:c2:44:
31:76:31:bf:16:34:2b:dd:8e:ca:2a:d0:d9:e2:2c:
15:d0:60:8d:8c:28:e3:a1:ed:36:60:14:8a:5d:1d:
27:45:47:85:b1:65:41:f8:e3:c4:0d:8c:02:b1:45:
30:30:31:6e:82:b7:d7:cd:48:65:d5:c8:a3:9a:5f:
28:b2:e5:1d:b1:5e:ca:6d:28:df:71:87:bf:2e:16:
f5:45:82:c1:ed:ab:1a:06:86:f0:79:cf:b6:4b:f9:
0e:02:55:8f:cf:1f:96:e6:68:68:69:06:c1:0c:14:
fd:6c:05:93:75:a5:30:1f:4c:f8:2d:1b:31:27:4b:
80:6f:d6:3c:fb:c2:39:7d:57:20:7d:8b:3e:ff:e2:
a5:0a:8c:f8:b6:3a:16:af:d9:94:0f:71:8f:92:4c:
9c:e7:6a:ca:4c:76:0e:0e:d4:d3:c8:4a:f2:90:62:
6c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:45:2D:3E:40:25:46:02:04:DB:F1:7A:D3:A4:78:9D:5D:97:73:37
X509v3 Authority Key Identifier:
keyid:6B:1A:15:7E:20:AD:CA:3B:44:06:7B:A8:D8:DC:AB:AE:69:8A:8B:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:7a:50:24:96:74:4d:a2:e7:24:ef:32:2d:0f:b3:f6:a4:f2:
54:99:85:7f:4c:fa:b8:38:5c:c6:ba:4d:57:2a:58:49:25:f3:
cb:d9:b3:ab:2e:44:93:1b:bd:f1:c3:30:60:db:23:4d:2a:82:
03:2f:4b:13:e1:84:c5:76:ed:09:2f:3c:60:40:1b:d6:48:bd:
54:bf:33:f5:19:e1:91:21:04:70:60:ff:9e:e2:4e:6e:4c:8c:
d4:bf:d0:3d:13:cc:e8:c7:52:0c:6a:ea:94:61:24:cb:93:be:
d8:5d:f9:82:be:c6:4b:4a:6e:fc:9a:27:b3:90:5a:ab:2d:ee:
84:e5:9e:bd:c5:09:68:5d:57:9c:ea:9b:74:a9:58:80:73:f9:
ac:97:12:ac:18:a9:5a:1e:45:19:1c:72:ed:76:2a:31:0d:ba:
76:64:c7:9b:76:9b:98:96:7a:4f:6c:7d:d3:66:99:89:19:f9:
b0:c9:18:31:c0:bd:aa:b7:26:96:c8:14:93:df:e5:5c:60:be:
f9:6a:fc:71:92:39:b0:89:54:dc:8b:d0:8f:a7:4a:0e:78:f5:
9f:57:51:d8:66:34:98:0b:f0:1a:bd:7c:c8:a0:9d:3d:26:39:
c8:6c:0e:d1:94:14:f4:75:5d:30:9e:e1:36:fa:d0:4f:0a:fc:
93:1f:e4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:52:42 2026 by rpki-client