Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
File: AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft (raw, json)
Hash identifier: ly9AF3UJ7Rz+h1+tgjJSuxN2btZcCiZXcl5kEeE1EbI=
Subject key identifier: 9C:87:D8:C9:76:40:F8:CF:E1:A2:7F:EB:FE:06:A6:2F:A1:CB:40:17
Authority key identifier: 01:72:35:06:71:8D:FC:F2:A8:BD:17:6D:4E:A2:4E:27:53:22:FC:FB
Certificate issuer: /CN=01723506718dfcf2a8bd176d4ea24e275322fcfb
Certificate serial: 01A12CC5B6FA1A3E789181257871A2906F32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
Manifest number: 1A9E
Signing time: Sun 11 Oct 2026 21:01:57 +0000
Manifest this update: Sun 11 Oct 2026 21:01:57 +0000
Manifest next update: Mon 12 Oct 2026 21:01:57 +0000
Files and hashes: 1: AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl (hash: GrSND5vqiqGUctgvyvGk7Zh2dLmNSCq8KpT+gmE7Qxo=)
2: EK4O0xHWKJmmPQygRY3dmzgeTsI.roa (hash: m1XR1i5Us8oblIUOIQzSE1h5zvdVSIn8gW8k8tGSpec=)
3: Ql95-IGW0X06XmkQjeBmRl8NR5M.roa (hash: U0YHtEFSJr7CqFsN6UUpHO3sj4tjBDK3Qns3+4dEtP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 21:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:c5:b6:fa:1a:3e:78:91:81:25:78:71:a2:90:6f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01723506718dfcf2a8bd176d4ea24e275322fcfb
Validity
Not Before: Oct 11 21:01:57 2026 GMT
Not After : Oct 12 21:01:57 2026 GMT
Subject: CN=9c87d8c97640f8cfe1a27febfe06a62fa1cb4017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e7:21:c4:e2:b6:08:c0:35:4a:a8:eb:82:4a:
23:88:b2:85:63:e5:69:af:92:e0:ed:2c:b2:37:b2:
b5:69:8f:da:98:ff:b8:3d:c9:fa:c4:c2:4c:a1:04:
4e:ec:e1:28:7f:86:1f:a1:6e:76:a9:82:a5:94:1c:
a0:91:fe:ca:cc:d3:65:64:cf:e9:b2:ea:b5:2a:1f:
94:e0:0c:bd:92:37:6b:a4:7d:0f:72:27:b8:ed:bc:
44:ff:22:5c:5a:cd:4d:60:7e:e8:5e:c4:a6:57:20:
f0:f0:45:12:5e:4a:6d:cf:97:24:c5:e6:cb:6a:ec:
e6:16:81:d0:5d:65:f7:2e:21:3c:a4:a4:fe:0d:c0:
7e:7c:8e:d7:44:29:44:ae:56:07:6c:15:de:9c:89:
9b:8b:92:3a:53:f4:f9:ef:5f:7d:c7:68:36:fc:d4:
98:c0:a3:ea:03:ab:e8:6c:5b:c0:0f:3e:bc:cb:1e:
04:78:bb:08:57:c2:a7:49:c0:a1:26:d8:a5:47:e7:
85:de:02:68:e0:89:5e:c9:e7:75:da:14:04:93:b7:
3e:03:2a:d5:88:e8:e3:1c:b0:e0:39:a9:3d:2b:f7:
f9:c2:22:44:a0:fc:49:20:c2:84:0f:29:24:dc:24:
7a:40:12:28:af:e6:18:7b:42:37:14:58:bd:24:fe:
3e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:87:D8:C9:76:40:F8:CF:E1:A2:7F:EB:FE:06:A6:2F:A1:CB:40:17
X509v3 Authority Key Identifier:
keyid:01:72:35:06:71:8D:FC:F2:A8:BD:17:6D:4E:A2:4E:27:53:22:FC:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:b1:4a:15:02:0b:09:3a:7c:42:4e:0d:22:22:bf:53:0d:43:
38:46:c9:ca:2d:10:81:8d:3f:2e:ec:32:52:3f:3b:82:63:c1:
2f:f2:11:3a:4c:9a:69:3a:69:ff:a3:1f:37:70:e5:a0:6f:9a:
52:3b:57:7d:cf:10:a4:6d:fb:41:b7:ac:0e:d0:96:fc:c4:61:
06:61:48:47:45:e4:a0:46:2e:cc:24:b1:73:9e:8e:d8:b9:c7:
90:f4:1f:c8:f6:18:ae:98:85:49:c6:0e:99:37:49:86:71:d8:
6b:97:11:fa:91:ed:af:b4:c6:9e:21:68:6b:8e:be:a6:fd:c1:
aa:4e:e7:a5:d4:f8:ab:33:50:d4:3b:67:46:4a:3f:84:09:f2:
77:45:d9:da:3d:e8:75:6e:47:5c:cd:d8:fb:f0:9c:73:2f:93:
9a:e4:19:48:39:1d:99:3b:f3:64:fc:17:1d:00:ef:69:68:a3:
f6:86:bf:1b:ec:36:c3:97:bc:ff:47:93:e8:ed:d8:87:a4:7e:
90:f5:6c:4e:93:c3:38:a3:1c:39:f0:c8:6b:47:0b:d0:26:6a:
c5:98:e5:52:7a:8f:92:ca:7c:c9:d4:0d:10:82:36:1a:d9:60:
e4:af:2f:5e:92:f8:ec:1b:ef:4b:28:c0:3a:5c:a5:3b:d3:12:
ca:06:56:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:57:45 2026 by rpki-client