Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
File: AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft (raw, json)
Hash identifier: QxAQ6qpn0klbk+pMHOqVp03wntanqL7KqrGsYWp6r9Y=
Subject key identifier: 27:BD:15:55:7D:02:16:84:2B:FC:08:72:69:E3:B1:AD:42:5E:19:C4
Authority key identifier: 01:7C:90:65:46:53:AC:15:00:28:56:2B:32:43:14:91:B5:21:47:D1
Certificate issuer: /CN=017c90654653ac150028562b32431491b52147d1
Certificate serial: 019EBF2388D3F9F37E83DB395D23B930A365
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
Manifest number: 1139
Signing time: Sat 13 Jun 2026 04:00:37 +0000
Manifest this update: Sat 13 Jun 2026 04:00:37 +0000
Manifest next update: Sun 14 Jun 2026 04:00:37 +0000
Files and hashes: 1: AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl (hash: rauvPf6Jh+2/7UlPwjVudn5nznpKhlpOkM5w5eNrEpU=)
2: Bi1XXzWo6lnTEVYADTXqjFg4Phs.roa (hash: CcN3AAar9jL+JjbAjisL+jzrcTOAzrlyvwRjw6mb2gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:88:d3:f9:f3:7e:83:db:39:5d:23:b9:30:a3:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=017c90654653ac150028562b32431491b52147d1
Validity
Not Before: Jun 13 04:00:37 2026 GMT
Not After : Jun 14 04:00:37 2026 GMT
Subject: CN=27bd15557d0216842bfc087269e3b1ad425e19c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:cf:ec:97:74:53:38:9d:99:97:c5:bf:72:6f:
0d:a8:61:5c:68:a0:60:ba:1f:ee:33:ae:63:1e:6f:
35:19:bf:a8:3a:2d:43:5b:7d:5b:a0:21:15:d9:aa:
5e:81:86:4b:12:20:4a:a4:cb:c6:a8:23:4a:f5:ae:
1c:2c:ec:33:81:4a:e0:93:92:1e:1f:63:1e:34:88:
99:df:60:8a:de:f8:3c:db:7c:ee:d6:22:a4:db:65:
79:20:27:1d:de:6e:8c:99:c8:58:7d:ac:1a:c3:22:
4a:3c:33:b8:51:3f:80:9e:9f:86:f5:a6:db:cc:6a:
06:77:76:45:81:7d:7d:01:fe:15:85:9e:42:64:eb:
dd:a9:c9:d6:3e:49:58:e7:ae:c6:4f:33:76:3f:89:
44:2d:b8:ea:35:7f:c1:7a:01:2a:ff:05:ee:e8:e2:
79:b7:33:ab:46:50:0a:7a:51:47:66:8e:c9:fc:d4:
d5:2f:76:01:04:05:4e:6e:61:87:93:86:82:2d:43:
40:a4:92:f4:6b:53:f2:ea:ef:4f:63:74:05:97:5d:
a5:6f:af:47:64:bf:d1:bd:20:11:51:b4:cb:8c:03:
9d:d3:c3:3a:75:13:48:67:cf:58:9c:1c:24:d9:b8:
0a:19:b4:09:ce:41:34:2d:6d:04:d0:e8:53:e6:8a:
8c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:BD:15:55:7D:02:16:84:2B:FC:08:72:69:E3:B1:AD:42:5E:19:C4
X509v3 Authority Key Identifier:
keyid:01:7C:90:65:46:53:AC:15:00:28:56:2B:32:43:14:91:B5:21:47:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:57:36:d7:43:c1:e4:8f:80:5a:2d:02:67:66:54:2e:f0:cd:
ce:6d:90:72:0b:7b:77:7d:f2:9b:bb:ea:2e:f4:8e:77:37:3c:
49:81:b1:3d:75:88:3f:11:16:ec:50:98:6c:44:10:d6:71:83:
8a:87:21:07:01:39:32:e8:32:f6:70:8e:ea:62:1b:40:59:09:
de:17:c7:49:f2:c4:bd:b5:bb:ba:07:14:a8:e6:54:fe:e2:b6:
6c:70:af:5e:3a:b9:c1:ab:6e:87:c8:ea:f9:f1:9a:96:65:5c:
fd:10:f0:bd:3b:4a:e8:fc:22:9f:7e:30:44:63:19:07:c4:fc:
f5:46:8f:cb:ae:42:92:4b:0f:10:15:58:c3:75:f1:4b:41:53:
41:c9:34:60:d0:e0:02:d3:19:10:5a:68:2c:99:0c:bf:71:01:
04:ab:94:43:3c:09:63:17:5c:a8:ca:b7:1d:25:2d:ee:94:a3:
9f:61:36:ce:a5:df:1e:2d:1d:f7:ac:36:4f:f0:c6:db:04:3c:
2e:61:f0:27:fd:6d:8e:9d:28:c3:7a:87:6f:d3:3a:61:6f:c3:
96:51:0b:ad:92:50:99:e0:6c:b5:9c:0a:73:f0:96:ab:be:13:
75:8c:91:c3:4d:72:6a:70:13:4f:17:9a:e9:06:21:d1:d1:c3:
12:f8:b8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:55:37 2026 by rpki-client