
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
File: axpX8G73IAfdYZP5YKYWNEtzMB8.mft (raw, json)
Hash identifier: xK9PjAJVjc/pIdSLx0pFRCObYIghBwpSUYVyRlFuSx4=
Subject key identifier: E9:2D:EE:88:40:3B:C8:E3:AD:A1:F0:E8:97:DC:57:82:B3:6A:A9:9E
Authority key identifier: 6B:1A:57:F0:6E:F7:20:07:DD:61:93:F9:60:A6:16:34:4B:73:30:1F
Certificate issuer: /CN=6b1a57f06ef72007dd6193f960a616344b73301f
Certificate serial: 019CA9EADE6A8E0C01437CBFE0514FD88496
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
Manifest number: 155D
Signing time: Sun 01 Mar 2026 15:01:07 +0000
Manifest this update: Sun 01 Mar 2026 15:01:07 +0000
Manifest next update: Mon 02 Mar 2026 15:01:07 +0000
Files and hashes: 1: axpX8G73IAfdYZP5YKYWNEtzMB8.crl (hash: 1GMhK8BwW/KVPBz/tFT5e2GVEiYA5OLyAWMCss6l40s=)
2: yWDSl9yDDWwKXKm5areAK-BgE_4.roa (hash: 9t658G/RphCv/dZEb8OenZ41/3jlcAPrpuRTSbCffNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:de:6a:8e:0c:01:43:7c:bf:e0:51:4f:d8:84:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b1a57f06ef72007dd6193f960a616344b73301f
Validity
Not Before: Mar 1 15:01:07 2026 GMT
Not After : Mar 2 15:01:07 2026 GMT
Subject: CN=e92dee88403bc8e3ada1f0e897dc5782b36aa99e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0d:b2:32:d3:6f:e6:db:fa:22:0d:8b:76:73:
9f:e4:ae:0f:b0:07:39:c4:a7:e1:7f:a5:6a:6a:99:
ba:bd:fe:ce:b3:e3:72:97:e1:b0:6b:b0:d6:6c:47:
f8:09:50:6b:49:82:29:86:1b:ff:9c:a2:70:2d:f0:
e7:b6:6a:a0:52:5d:00:09:34:a8:2f:04:1c:2a:01:
c4:02:8a:44:4b:e6:a5:47:cf:4b:67:7e:58:6f:ee:
9e:35:a3:5f:d9:3f:56:49:3d:20:5d:f7:a4:f8:d5:
f4:75:11:f5:19:8d:e2:84:b4:75:74:d2:09:7b:40:
08:1d:3d:fd:de:ca:31:30:64:b2:7e:45:e6:1e:fb:
d2:66:a0:86:e1:ef:c6:bc:c1:0c:7e:a5:5d:69:65:
85:e6:ac:d3:19:1d:00:87:b9:ae:ed:f0:84:8c:f4:
0a:f1:ad:94:5a:32:35:3c:aa:d8:35:d6:5c:18:4b:
fd:81:1a:0c:b4:2d:15:68:5a:30:59:d7:c5:88:af:
b8:ed:3b:cc:a4:01:4c:8f:67:8c:24:4b:59:0b:ea:
20:03:7b:6d:35:92:1f:94:63:6f:6f:09:da:5a:18:
89:20:b4:5e:d2:1e:ee:68:d8:e9:4c:0d:41:88:83:
1e:b6:de:ac:80:3a:2f:44:fc:16:a8:51:7e:7c:dd:
ee:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:2D:EE:88:40:3B:C8:E3:AD:A1:F0:E8:97:DC:57:82:B3:6A:A9:9E
X509v3 Authority Key Identifier:
keyid:6B:1A:57:F0:6E:F7:20:07:DD:61:93:F9:60:A6:16:34:4B:73:30:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:c8:a3:e1:78:03:84:a3:bb:26:1c:14:ca:22:f6:5c:bb:17:
aa:bd:d8:b3:ed:bd:a8:8c:02:5c:7d:03:47:05:84:45:70:0f:
ef:e2:22:6b:49:46:07:69:f5:64:f3:57:7e:d6:7f:8c:93:96:
ae:90:7f:57:91:61:58:9a:ac:ce:80:92:a7:9a:ad:d0:2c:35:
47:8d:49:f0:e4:9c:99:33:6d:ae:88:84:6c:9c:fc:17:cc:48:
c8:3f:54:aa:45:a6:96:84:70:fa:6b:1d:98:52:cb:f5:e2:65:
42:93:c6:20:ca:49:43:7c:fc:fd:5d:24:06:de:59:46:f9:e6:
b8:46:1c:71:ff:c3:01:1d:27:39:05:9c:f8:da:9f:0a:b0:ce:
65:7b:be:d6:b6:6a:37:62:79:db:b8:11:cf:79:01:47:78:a9:
cf:ef:eb:3d:19:a9:29:7a:98:b1:a4:f8:c6:de:58:6b:a9:e2:
a4:65:b6:d5:dc:54:2a:32:c0:0f:5d:6a:7a:ea:3c:b8:48:9f:
ca:ba:43:d0:62:d7:1a:78:f8:82:63:4e:25:34:0f:09:97:8b:
30:f2:1a:c3:65:e6:52:dd:24:e8:a9:cb:67:08:de:e5:39:a1:
99:4c:cd:fb:90:19:73:ac:f8:ed:22:9d:2c:36:4b:80:b7:b1:
70:f5:7e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:33:44 2026 by rpki-client