Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
File: AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft (raw, json)
Hash identifier: hOCqukwjN653JyEoK3i8cKyVH7+W1EEm2MsouYoNB0Q=
Subject key identifier: F1:9C:BA:D3:C3:62:C5:AC:E9:3E:20:BE:A6:64:A1:2A:86:2C:D1:71
Authority key identifier: 01:7C:90:65:46:53:AC:15:00:28:56:2B:32:43:14:91:B5:21:47:D1
Certificate issuer: /CN=017c90654653ac150028562b32431491b52147d1
Certificate serial: 019D999913E8F6F8B408DE9DA7BB2EDA0CD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
Manifest number: 10A1
Signing time: Fri 17 Apr 2026 04:00:39 +0000
Manifest this update: Fri 17 Apr 2026 04:00:39 +0000
Manifest next update: Sat 18 Apr 2026 04:00:39 +0000
Files and hashes: 1: AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl (hash: 9ZjpAg/XPKuWzMyQ2LnmDScbw5IO3vHLo80oGjIDnx8=)
2: Bi1XXzWo6lnTEVYADTXqjFg4Phs.roa (hash: CcN3AAar9jL+JjbAjisL+jzrcTOAzrlyvwRjw6mb2gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:13:e8:f6:f8:b4:08:de:9d:a7:bb:2e:da:0c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=017c90654653ac150028562b32431491b52147d1
Validity
Not Before: Apr 17 04:00:39 2026 GMT
Not After : Apr 18 04:00:39 2026 GMT
Subject: CN=f19cbad3c362c5ace93e20bea664a12a862cd171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9f:f8:b0:45:18:d3:05:94:0c:e3:b7:95:95:
20:21:24:e5:30:bb:6e:45:b4:ac:28:cf:3e:c5:0c:
82:6e:44:6d:0f:cc:af:0e:0e:b7:96:e3:c9:02:e3:
37:d1:d7:2a:43:db:78:a1:7d:f2:14:c2:44:27:eb:
b5:3b:37:06:a7:ef:1b:a7:60:97:0e:19:d4:17:ff:
dc:71:aa:31:e8:01:54:ac:23:64:fd:3d:52:fa:d4:
81:dc:4f:aa:a7:ac:a9:fc:0a:94:67:c8:df:c7:5f:
26:1e:80:8e:ab:0c:88:b0:fc:01:39:25:a7:e3:80:
0f:29:db:5f:87:fa:a1:dd:b6:17:c6:16:cf:92:5a:
af:37:c5:da:2d:9c:93:ca:db:e0:ed:75:fa:e0:c7:
32:c7:5e:60:f9:da:f7:90:33:37:90:89:6e:00:52:
d4:46:2c:f9:a1:57:de:43:da:ba:26:ee:51:15:60:
1c:de:0c:3e:e7:20:b2:11:c0:73:c5:82:04:f9:77:
53:8d:df:2b:02:cb:11:1c:ca:79:ab:56:72:2c:27:
f2:1c:87:64:b8:1a:03:b7:72:0c:f3:2e:ee:10:1e:
ff:83:be:61:08:30:67:59:5b:f2:49:4b:7c:d8:17:
3d:ec:4f:9d:71:5b:c7:14:46:57:ff:cf:72:87:bc:
32:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:9C:BA:D3:C3:62:C5:AC:E9:3E:20:BE:A6:64:A1:2A:86:2C:D1:71
X509v3 Authority Key Identifier:
keyid:01:7C:90:65:46:53:AC:15:00:28:56:2B:32:43:14:91:B5:21:47:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:2b:87:ac:1e:76:1c:36:0f:c7:d2:03:87:71:87:29:31:16:
79:09:c7:be:4c:c9:5b:2c:c7:3a:d0:fa:33:5c:f5:76:75:e5:
49:d0:83:a7:8d:94:5d:d1:76:3f:95:63:d5:81:3f:6d:c2:db:
1a:c5:3c:1e:21:8b:a9:fb:30:a6:88:a3:9d:0d:70:85:a6:49:
69:8e:11:cd:68:ca:f9:b6:a7:55:35:56:6f:3d:34:97:32:86:
02:c6:8c:77:e1:ab:d9:da:ef:52:90:43:5c:8b:12:75:99:eb:
43:86:11:b3:f7:80:ac:66:59:36:17:a4:3c:0e:5d:a7:b7:bd:
ad:54:f1:6a:28:56:ee:93:7e:1a:ca:47:7e:a3:12:97:4b:14:
7f:0c:cb:14:f8:78:57:89:41:0e:5e:aa:3a:4b:c9:7e:a8:50:
a2:67:c5:81:6f:56:27:bc:41:c2:a1:19:a6:5b:67:be:b0:97:
cb:f0:65:ad:24:db:7b:c0:4d:e0:a8:b9:e8:62:30:94:2b:47:
5d:34:67:a9:98:3a:87:43:9a:2f:f6:08:f6:e2:9d:eb:ff:c6:
79:0e:ec:c1:a8:6c:51:ae:b0:6a:ec:ee:57:d5:09:a4:8f:4d:
17:f3:3c:22:4c:a2:0f:4f:fe:c8:4c:16:7b:b6:4f:bc:c0:c7:
75:d4:6b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:13:45 2026 by rpki-client