Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
File: AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft (raw, json)
Hash identifier: LRUPcePSv5RIiJSsLiZ03BpWjzIxv5RfI9AueMz75w0=
Subject key identifier: 54:A1:9C:B0:F9:C6:28:70:A6:D5:06:AB:F7:A9:1E:17:7D:D2:3B:17
Authority key identifier: 01:7C:90:65:46:53:AC:15:00:28:56:2B:32:43:14:91:B5:21:47:D1
Certificate issuer: /CN=017c90654653ac150028562b32431491b52147d1
Certificate serial: 019CADFE6C556440A0A71DF0D3CF655E4046
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
Manifest number: 1027
Signing time: Mon 02 Mar 2026 10:00:58 +0000
Manifest this update: Mon 02 Mar 2026 10:00:58 +0000
Manifest next update: Tue 03 Mar 2026 10:00:58 +0000
Files and hashes: 1: AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl (hash: OcRkLu4gbrnerXnNjhgv/Tly6hkCLi6tVMmDL1p9NMM=)
2: Bi1XXzWo6lnTEVYADTXqjFg4Phs.roa (hash: CcN3AAar9jL+JjbAjisL+jzrcTOAzrlyvwRjw6mb2gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:6c:55:64:40:a0:a7:1d:f0:d3:cf:65:5e:40:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=017c90654653ac150028562b32431491b52147d1
Validity
Not Before: Mar 2 10:00:58 2026 GMT
Not After : Mar 3 10:00:58 2026 GMT
Subject: CN=54a19cb0f9c62870a6d506abf7a91e177dd23b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:d0:2c:ee:4c:6c:74:be:a1:f0:ff:8c:1e:1f:
53:14:19:18:b9:a5:69:51:21:0b:47:80:5b:04:0b:
4e:cf:e9:c5:c9:e9:f8:b9:db:dd:c6:3d:64:40:54:
5f:d6:bd:74:be:f5:89:f1:2c:00:c8:98:34:40:38:
32:b2:23:4f:94:47:73:63:ec:ec:51:80:49:ae:72:
eb:43:fe:e2:96:9c:58:2d:3b:63:0f:38:a4:73:94:
20:24:ea:ea:6d:88:ac:c6:94:4a:93:63:aa:cf:2b:
f4:a0:48:5f:8a:c4:ed:c1:91:d9:32:a2:0f:c6:b5:
19:1b:e9:1e:ac:95:40:d6:49:27:21:b6:a8:e4:58:
c8:8f:50:6b:6f:2f:10:66:75:89:6a:c3:75:3c:44:
cd:23:8b:4d:a6:e2:86:f3:3e:16:f6:0a:2c:5b:10:
36:dc:e0:62:5b:c5:74:bf:07:46:73:e7:05:b8:70:
b3:88:26:f4:27:d0:2c:09:2b:1e:7e:c3:f4:57:9d:
bf:b9:3a:7e:cf:91:0d:13:af:d5:a8:60:56:84:14:
59:0d:3f:32:40:a6:ad:64:26:d9:a9:e4:c0:a3:22:
88:c1:cd:75:87:b0:38:74:59:12:81:78:3a:f0:6d:
7a:19:5d:33:65:8a:3f:b3:da:ed:98:b6:3d:66:db:
b7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A1:9C:B0:F9:C6:28:70:A6:D5:06:AB:F7:A9:1E:17:7D:D2:3B:17
X509v3 Authority Key Identifier:
keyid:01:7C:90:65:46:53:AC:15:00:28:56:2B:32:43:14:91:B5:21:47:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:67:85:56:55:ac:69:c3:d3:d4:a6:aa:e0:d2:79:cf:a9:96:
51:b4:74:e3:c0:b5:01:6b:81:3e:e2:bc:86:3c:f1:ee:2f:70:
3e:90:5c:e9:6b:04:ee:06:6b:3a:fe:9d:d2:c6:a1:0b:4a:fc:
2f:5f:4d:64:d7:c1:69:db:a4:7a:1a:50:55:65:95:01:c0:de:
8e:50:b4:62:46:28:c9:a1:a4:f2:95:39:78:fd:fd:5b:0f:50:
3d:eb:b1:bc:23:78:a6:a4:96:8c:42:03:f2:8d:1f:29:75:77:
da:b8:26:aa:20:4a:b1:32:89:e6:7b:1f:67:df:5d:c6:eb:bb:
59:0d:b5:92:ec:20:28:c6:34:22:e2:6d:1b:05:c3:dc:62:a3:
e7:37:cf:ba:b7:61:6b:fe:3b:5a:84:ea:5d:5e:8d:7e:24:a5:
7a:4c:b5:ea:b3:0d:fa:d4:17:51:6b:2d:0f:93:22:26:f0:61:
d7:89:e0:92:2a:4e:aa:ca:04:8f:23:e2:78:e5:28:9e:1b:67:
37:3a:32:77:22:db:9d:56:9b:ea:24:32:13:53:c5:ad:68:ec:
57:a8:c1:21:20:a5:b7:bb:64:e9:99:9c:2d:15:cf:7b:b6:8f:
d8:54:5a:cb:f6:96:79:27:d3:08:2d:bd:fa:0e:d9:77:f0:61:
45:1a:7c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:28:15 2026 by rpki-client