Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
File: axpX8G73IAfdYZP5YKYWNEtzMB8.mft (raw, json)
Hash identifier: dWkEMc9nsyoYk2waHzSYcNAe39l24X9UPo1/2i7XCXU=
Subject key identifier: 2C:B3:1A:7D:01:66:CA:B0:8F:B2:A4:B7:9D:21:8D:1A:65:16:9B:43
Authority key identifier: 6B:1A:57:F0:6E:F7:20:07:DD:61:93:F9:60:A6:16:34:4B:73:30:1F
Certificate issuer: /CN=6b1a57f06ef72007dd6193f960a616344b73301f
Certificate serial: 019D99625C03F90502A0FDB1787188084C85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
Manifest number: 15D9
Signing time: Fri 17 Apr 2026 03:00:53 +0000
Manifest this update: Fri 17 Apr 2026 03:00:53 +0000
Manifest next update: Sat 18 Apr 2026 03:00:53 +0000
Files and hashes: 1: axpX8G73IAfdYZP5YKYWNEtzMB8.crl (hash: uYTEbsP5axxbIoqy5SJA+96KjSnXq46fjEb0TccvJuA=)
2: yWDSl9yDDWwKXKm5areAK-BgE_4.roa (hash: 9t658G/RphCv/dZEb8OenZ41/3jlcAPrpuRTSbCffNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:5c:03:f9:05:02:a0:fd:b1:78:71:88:08:4c:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b1a57f06ef72007dd6193f960a616344b73301f
Validity
Not Before: Apr 17 03:00:53 2026 GMT
Not After : Apr 18 03:00:53 2026 GMT
Subject: CN=2cb31a7d0166cab08fb2a4b79d218d1a65169b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:34:7b:df:6d:b3:ea:04:c7:c4:a1:ce:ae:8c:
ef:07:75:8c:54:a8:0f:04:a6:d0:72:91:d0:a6:28:
aa:63:ba:53:1f:0e:6a:0f:1c:d9:06:c7:2c:92:1d:
8f:e7:bd:8e:e8:5d:e1:62:e6:1d:a7:f4:46:42:3e:
1d:dc:74:b1:72:4c:af:ef:8a:0e:5d:6c:e3:3c:38:
b0:76:99:e1:b9:5e:ac:e8:54:73:61:20:1a:d4:fe:
f3:ef:fc:d4:64:ea:03:77:8f:91:5d:4d:4b:3c:78:
e8:37:db:c6:23:71:84:0b:f4:dd:3e:90:77:72:33:
9d:91:96:4c:07:79:1f:80:e8:21:2d:9c:d0:46:7b:
f2:c1:c7:61:e5:dc:f4:3d:3e:e5:1e:fa:7e:52:51:
a3:eb:3f:aa:a8:93:8c:c5:56:f3:c8:3e:ac:97:06:
88:4f:a3:e4:f4:34:37:28:87:a4:6f:ed:33:c3:ee:
71:3b:72:10:18:c0:9e:c9:91:b5:4d:3b:88:f9:72:
e4:87:92:89:d5:b5:8d:b7:e0:7a:09:ef:d3:3b:52:
77:45:a8:25:be:2f:2a:b8:17:98:ef:f7:45:11:a1:
f7:34:a5:ee:f3:b8:bc:ff:b9:b7:2c:c1:ff:60:70:
d7:7a:e9:60:6e:3c:c1:ff:e3:06:7b:e6:77:56:d9:
d5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B3:1A:7D:01:66:CA:B0:8F:B2:A4:B7:9D:21:8D:1A:65:16:9B:43
X509v3 Authority Key Identifier:
keyid:6B:1A:57:F0:6E:F7:20:07:DD:61:93:F9:60:A6:16:34:4B:73:30:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:63:d3:7d:fa:ad:22:8b:9a:3a:db:78:51:d9:d0:f2:69:c8:
68:19:10:eb:b6:a8:79:93:bd:fb:1c:5d:3d:27:79:75:93:3d:
36:f2:8c:ba:9f:23:30:6e:ff:50:92:93:15:ff:76:c7:60:5f:
73:8f:50:00:5d:a4:9c:d6:c4:a0:57:c9:be:46:4e:36:8d:cd:
6f:2c:bf:e6:b1:8e:5d:ca:55:19:80:06:36:7f:17:e0:ab:d5:
ba:73:7c:2d:e9:79:54:6c:d0:7d:4b:d9:28:47:80:16:5d:c5:
41:de:55:f0:38:f5:84:e5:f5:98:7a:35:89:6f:35:28:ae:eb:
32:93:56:61:9f:f0:39:e5:08:ac:9e:1b:10:c8:6c:6b:ce:0f:
ce:01:df:80:c4:ec:be:2e:37:a6:95:bd:b9:fa:91:34:8d:e0:
3d:28:73:04:00:6a:9d:23:db:80:05:e0:5f:18:98:0b:81:d3:
09:13:44:76:db:25:f9:99:7a:71:2c:c4:de:57:81:aa:12:42:
d1:95:a3:16:ca:af:9a:c1:cf:d2:8d:9d:2d:ca:f6:79:5f:8a:
a5:63:b4:f0:26:90:9d:a1:e5:08:8c:b1:9b:4b:00:b3:41:11:
49:9a:97:03:ff:9a:b0:b7:5f:94:e1:b8:d6:f7:3a:a0:e2:e6:
25:4b:6e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:39:12 2026 by rpki-client