Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
File: AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft (raw, json)
Hash identifier: 44zNNehNj3TLZCLWOxqq5toNgC4xuoopQTBVJVSwMrE=
Subject key identifier: E8:FB:22:10:37:FF:C3:22:D0:0C:A5:3D:C3:3F:28:44:5A:FF:4F:38
Authority key identifier: 01:7C:90:65:46:53:AC:15:00:28:56:2B:32:43:14:91:B5:21:47:D1
Certificate issuer: /CN=017c90654653ac150028562b32431491b52147d1
Certificate serial: 01A0C2C4388DDF6CA7EE081B01170B8C41FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
Manifest number: 1244
Signing time: Mon 21 Sep 2026 07:00:34 +0000
Manifest this update: Mon 21 Sep 2026 07:00:34 +0000
Manifest next update: Tue 22 Sep 2026 07:00:34 +0000
Files and hashes: 1: AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl (hash: K2gmHFHUCNYQ3zvW7oDwYv7nDjaweJB+yKSPrYevd0M=)
2: Bi1XXzWo6lnTEVYADTXqjFg4Phs.roa (hash: CcN3AAar9jL+JjbAjisL+jzrcTOAzrlyvwRjw6mb2gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:c4:38:8d:df:6c:a7:ee:08:1b:01:17:0b:8c:41:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=017c90654653ac150028562b32431491b52147d1
Validity
Not Before: Sep 21 07:00:34 2026 GMT
Not After : Sep 22 07:00:34 2026 GMT
Subject: CN=e8fb221037ffc322d00ca53dc33f28445aff4f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cc:b9:88:45:dc:d5:05:62:eb:1e:f8:7e:bf:
bf:0e:ed:b1:b2:7a:9d:93:e4:2b:6a:34:7f:80:57:
85:10:15:fb:f6:b9:1c:3a:2a:cf:fc:a0:77:6c:47:
03:9b:0a:4f:e1:c0:95:7d:55:93:d1:86:d3:b6:34:
6d:3a:8d:28:6b:25:5e:fd:67:4e:37:14:a6:dc:57:
99:b1:e2:1d:8b:2b:d0:96:df:a4:35:95:fb:07:a3:
13:7e:35:ed:64:c1:72:cd:5a:65:5f:f5:4f:ec:ee:
fd:42:0b:0c:ed:35:3c:05:45:5c:53:2c:3c:3b:be:
67:a4:b7:75:3f:e9:80:69:f1:05:57:2c:ae:90:35:
c5:af:9a:84:f9:2a:00:d7:09:c7:3c:86:10:91:69:
7e:6d:09:91:a4:53:f9:4d:d1:af:ff:91:f4:3b:30:
89:4e:0a:b2:2f:d1:12:cc:4a:87:9a:42:8b:a1:3b:
03:3f:33:cb:7d:fa:53:c6:73:f1:7e:9d:b7:bf:41:
e1:9e:36:95:eb:98:29:30:b7:cd:4e:0b:f3:6c:74:
7e:64:b9:d7:54:5d:27:d9:5a:3a:4d:37:b8:fd:70:
31:ff:8e:98:ae:8c:2b:26:85:c5:a9:8a:82:da:91:
80:57:e0:ec:a2:b3:95:63:7f:bc:46:90:23:ce:3a:
ab:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:FB:22:10:37:FF:C3:22:D0:0C:A5:3D:C3:3F:28:44:5A:FF:4F:38
X509v3 Authority Key Identifier:
keyid:01:7C:90:65:46:53:AC:15:00:28:56:2B:32:43:14:91:B5:21:47:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:2f:d4:c5:ff:9a:44:57:0c:05:02:70:12:28:bf:d0:48:ef:
f3:32:e4:e4:2e:40:50:82:45:13:8a:59:05:5e:29:9d:8f:9f:
fe:f9:1b:41:ee:80:3e:98:f4:e3:dd:5a:aa:b5:b3:74:8b:2f:
5d:1f:18:a0:3a:56:18:25:b5:70:a3:aa:d7:3e:39:a3:1d:bb:
3f:3e:a7:b1:50:ef:c1:6f:1c:67:f2:b5:8b:71:26:1c:7c:e5:
72:d1:09:2e:27:be:04:2e:16:ce:92:5b:41:21:a8:d2:f4:7a:
61:5e:fb:f0:99:ee:ab:32:97:42:ee:9b:7c:26:2f:82:53:8b:
80:78:79:ee:25:df:eb:9d:18:35:82:75:8e:6b:c6:56:b8:79:
b7:83:62:bb:6d:25:81:78:4e:ef:78:1a:8a:f4:c3:f0:4a:4c:
c0:37:1c:51:58:5a:e9:82:35:05:86:22:54:ab:b0:f7:0d:f6:
fd:c6:14:29:61:41:4e:89:f2:87:8c:06:9a:1b:79:ae:54:a0:
05:81:ff:dd:00:7b:6b:f9:8c:18:05:42:1c:18:d1:65:1c:4c:
77:96:a6:b7:17:3d:39:7e:c9:22:ec:aa:b5:e3:33:9b:cc:d2:
1a:48:43:f1:7e:fb:f6:2a:09:b8:a9:b2:16:36:dd:b4:58:09:
58:91:c4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:17:25 2026 by rpki-client