Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
File: AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft (raw, json)
Hash identifier: np/DXTQWnsaCtBRCRF8dbQHR58mmQfJ7AQWEciIug08=
Subject key identifier: 68:05:F7:5A:0A:06:AF:68:F0:A2:28:7C:10:C5:99:16:A8:67:36:93
Authority key identifier: 01:7C:90:65:46:53:AC:15:00:28:56:2B:32:43:14:91:B5:21:47:D1
Certificate issuer: /CN=017c90654653ac150028562b32431491b52147d1
Certificate serial: 019FA8D01D8A937FC0098A457670AA24109D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
Manifest number: 11B2
Signing time: Tue 28 Jul 2026 13:00:39 +0000
Manifest this update: Tue 28 Jul 2026 13:00:39 +0000
Manifest next update: Wed 29 Jul 2026 13:00:39 +0000
Files and hashes: 1: AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl (hash: JOxSt9x6QOZ6Nm4cjhk8bgu6sJH+hjjIDihska65TQs=)
2: Bi1XXzWo6lnTEVYADTXqjFg4Phs.roa (hash: CcN3AAar9jL+JjbAjisL+jzrcTOAzrlyvwRjw6mb2gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:1d:8a:93:7f:c0:09:8a:45:76:70:aa:24:10:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=017c90654653ac150028562b32431491b52147d1
Validity
Not Before: Jul 28 13:00:39 2026 GMT
Not After : Jul 29 13:00:39 2026 GMT
Subject: CN=6805f75a0a06af68f0a2287c10c59916a8673693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2a:be:4d:b5:70:68:d6:f5:75:89:33:00:6d:
6e:34:38:66:a3:7c:b8:23:49:31:b2:4f:a5:38:4b:
8c:c1:6d:4a:27:0e:b0:33:33:d3:f2:82:d0:76:a9:
90:ee:28:6d:9b:22:a8:8c:26:a2:f3:ae:75:e6:35:
18:b1:ba:00:94:b2:b3:ff:b4:2b:ff:28:66:0f:ee:
a7:59:8a:2b:ba:6d:aa:b2:67:59:6d:58:22:54:fc:
39:99:4e:12:4b:c7:63:b5:17:be:8d:2a:6c:f9:78:
22:33:5e:ad:a9:e0:7c:85:bc:eb:8f:c1:f7:7b:5b:
ac:d3:f7:22:91:3a:1c:07:31:51:7a:50:5a:00:8f:
73:3d:6e:8e:ab:a2:ea:80:c7:13:3e:e3:bb:c4:40:
34:b8:9f:c9:38:28:3e:fb:b0:9f:3b:af:37:f7:0a:
ee:61:d2:57:6d:18:fb:c6:22:cd:75:c5:cd:1d:36:
ac:a8:a0:65:a0:ce:16:a1:f5:c0:0d:92:33:53:56:
7e:da:4a:be:d7:35:1c:1f:f2:44:62:a7:32:3a:3f:
f0:e9:b9:0d:72:24:d8:2d:3c:b6:cb:10:56:6e:c7:
b4:81:eb:51:43:02:44:49:a4:5d:ea:f4:cb:a9:69:
84:9c:ae:d8:0f:da:a4:cf:93:19:a4:ca:b3:c2:1d:
ff:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:05:F7:5A:0A:06:AF:68:F0:A2:28:7C:10:C5:99:16:A8:67:36:93
X509v3 Authority Key Identifier:
keyid:01:7C:90:65:46:53:AC:15:00:28:56:2B:32:43:14:91:B5:21:47:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:1d:dc:08:28:60:69:52:7f:70:55:85:8f:be:57:39:94:dc:
e2:79:80:3c:62:58:85:95:d0:ac:e8:8d:15:e1:5c:5e:77:4f:
75:53:67:83:66:c1:83:fc:8d:12:aa:f6:96:95:a6:d6:89:54:
f0:0e:6e:55:bb:45:fe:79:2f:29:7f:e8:38:14:d8:9f:09:2f:
c2:23:d9:6a:c7:ec:98:71:3f:72:91:00:f8:d3:7b:a8:a6:85:
9f:96:af:94:29:67:43:8d:55:38:db:11:8d:ba:5e:0e:ab:e3:
41:8d:55:8d:a3:b0:a7:b2:2c:89:ba:86:49:e5:bf:64:ed:c3:
1a:ca:40:84:95:87:f6:f5:0d:df:91:40:52:7c:2e:19:df:f8:
a6:b8:6f:46:3c:b4:6d:4d:76:87:36:8b:41:db:53:15:df:04:
74:89:07:98:ac:fe:60:7c:e8:c6:7d:48:c3:9b:95:6f:0f:1b:
53:1f:25:78:c2:5c:d1:c9:5b:a8:64:2b:7e:72:6b:76:56:c1:
d0:5b:01:2b:16:a6:5e:67:72:7a:3b:d5:41:ef:25:dd:85:93:
d5:ff:78:1b:8a:09:90:76:61:86:94:b4:fa:0a:08:51:ec:25:
e5:ac:50:a9:6d:34:f4:e9:63:49:df:b1:ec:31:f8:62:a9:c1:
51:1a:ea:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:42:33 2026 by rpki-client