Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/5ce86e-27d2-48c2-88b5-f181b6e80a62/1/2axioKJWftFz3CqtN25FXIW8trs.mft
File: 2axioKJWftFz3CqtN25FXIW8trs.mft (raw, json)
Hash identifier: 6KKMfFmRwmM6vxEknasp+fj5+ltbTo9/w2A6RS4984g=
Subject key identifier: 98:8B:3A:16:21:B8:31:08:14:53:B5:1B:F0:BB:1C:02:29:6C:E6:76
Authority key identifier: D9:AC:62:A0:A2:56:7E:D1:73:DC:2A:AD:37:6E:45:5C:85:BC:B6:BB
Certificate issuer: /CN=d9ac62a0a2567ed173dc2aad376e455c85bcb6bb
Certificate serial: 01A0C40D6C486470290C0FA4BAB4A551C02B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2axioKJWftFz3CqtN25FXIW8trs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/5ce86e-27d2-48c2-88b5-f181b6e80a62/1/2axioKJWftFz3CqtN25FXIW8trs.mft
Manifest number: 1A61
Signing time: Mon 21 Sep 2026 13:00:08 +0000
Manifest this update: Mon 21 Sep 2026 13:00:08 +0000
Manifest next update: Tue 22 Sep 2026 13:00:08 +0000
Files and hashes: 1: 2axioKJWftFz3CqtN25FXIW8trs.crl (hash: 6Yui+xDZAjX+khELojN78IUddozkQG4s8JOVglfKAgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/5ce86e-27d2-48c2-88b5-f181b6e80a62/1/2axioKJWftFz3CqtN25FXIW8trs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/5ce86e-27d2-48c2-88b5-f181b6e80a62/1/2axioKJWftFz3CqtN25FXIW8trs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2axioKJWftFz3CqtN25FXIW8trs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0d:6c:48:64:70:29:0c:0f:a4:ba:b4:a5:51:c0:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ac62a0a2567ed173dc2aad376e455c85bcb6bb
Validity
Not Before: Sep 21 13:00:08 2026 GMT
Not After : Sep 22 13:00:08 2026 GMT
Subject: CN=988b3a1621b831081453b51bf0bb1c02296ce676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:28:5e:5a:3f:9c:70:d9:83:89:dd:44:99:a0:
7b:cb:77:11:9a:40:ed:31:c7:8b:4a:a8:04:b2:ee:
3f:ee:b5:1a:47:0c:ff:ad:05:24:f0:17:0b:6a:cc:
93:23:5c:4f:e2:63:83:a1:d3:f0:0e:20:f6:77:a4:
a0:2c:a8:c4:e9:6b:f0:a7:87:2d:52:fe:01:17:f3:
80:b7:20:25:ab:b8:81:a4:75:b6:d5:27:2d:fd:3c:
be:4e:b0:d9:6a:04:81:53:90:52:8f:e0:6f:17:c4:
48:f8:27:69:8e:c0:b9:29:d5:d7:de:1e:71:51:39:
09:de:2d:db:bf:33:51:6b:1c:05:63:33:40:c2:9b:
23:ac:a8:18:3b:04:3d:7e:a0:ca:86:8d:8d:a8:87:
89:9f:bd:34:cd:6c:00:9f:41:16:77:96:9e:28:fb:
ea:82:32:73:09:6d:1a:f9:60:2d:6e:66:30:4b:8a:
9a:31:f6:23:6e:33:ef:9e:71:e2:6c:1c:2c:08:ed:
4f:08:c1:e7:4e:d1:be:9d:eb:c0:17:be:56:82:39:
fd:19:e3:cd:45:4b:31:88:d1:d7:61:8e:4c:2a:fe:
d8:05:d4:2d:c3:cc:80:85:18:8a:de:62:1d:c3:95:
6a:d5:56:0f:94:3f:53:85:4c:0e:d0:ef:d1:4b:b0:
f2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:8B:3A:16:21:B8:31:08:14:53:B5:1B:F0:BB:1C:02:29:6C:E6:76
X509v3 Authority Key Identifier:
keyid:D9:AC:62:A0:A2:56:7E:D1:73:DC:2A:AD:37:6E:45:5C:85:BC:B6:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2axioKJWftFz3CqtN25FXIW8trs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5ce86e-27d2-48c2-88b5-f181b6e80a62/1/2axioKJWftFz3CqtN25FXIW8trs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5ce86e-27d2-48c2-88b5-f181b6e80a62/1/2axioKJWftFz3CqtN25FXIW8trs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:27:c9:b4:9b:60:e1:9a:84:85:cb:50:70:56:e1:f8:79:fe:
be:7a:e3:c8:97:78:d6:c9:80:b8:96:f4:da:1a:49:ad:88:42:
c7:28:98:f2:67:e1:e7:2f:f3:d9:20:fd:8b:4a:54:52:8e:44:
a5:5b:e4:fe:12:b5:2f:5c:62:19:5e:9c:cd:cd:46:6f:84:47:
71:ec:89:6b:e7:8b:5f:d2:39:8e:9b:c5:6a:16:2c:a9:7c:9a:
74:47:7f:75:fe:14:94:70:56:33:28:ae:e8:ab:67:d4:16:74:
84:20:38:da:bb:15:3f:5d:ab:4e:7e:9b:ac:05:ef:66:e3:49:
c9:ad:46:b3:48:7e:94:30:00:f7:b6:38:75:f1:de:d7:4b:88:
f2:0f:00:5d:c0:54:e5:34:25:5c:ed:d6:85:0c:bb:9c:cc:5b:
65:5a:f5:2a:c2:10:06:79:06:a3:11:9b:d5:cb:4b:a5:22:dd:
d9:5d:28:be:d8:20:bb:66:6d:3e:ea:83:7a:5a:38:90:b6:77:
78:d1:c8:1b:27:f5:2c:3d:57:d2:56:00:31:cd:1f:82:3f:9d:
03:3f:65:df:d6:09:75:4b:8b:23:f7:a8:6c:03:35:b6:22:50:
3e:ac:77:e8:82:2b:51:f4:41:e1:69:e7:9b:ac:ee:ad:ab:c5:
65:2d:2c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:44:10 2026 by rpki-client