Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
File: AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft (raw, json)
Hash identifier: cWIuPxq54hQj+chmHz46Dx0WFaWGDuKN/FNz5HkSPig=
Subject key identifier: B9:1A:63:7E:8C:8E:23:B4:88:E0:D9:C6:F7:25:C2:CF:34:F8:77:EB
Authority key identifier: 01:72:35:06:71:8D:FC:F2:A8:BD:17:6D:4E:A2:4E:27:53:22:FC:FB
Certificate issuer: /CN=01723506718dfcf2a8bd176d4ea24e275322fcfb
Certificate serial: 019D9B504126DFD0D7A9DCDB268E4E836FBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 12:00:21 +0000
Manifest this update: Fri 17 Apr 2026 12:00:21 +0000
Manifest next update: Sat 18 Apr 2026 12:00:21 +0000
Files and hashes: 1: AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl (hash: +yS5NhhghX/cD1wg/R/KNVNc53ZV3k5J7QVgm4GOMnE=)
2: EK4O0xHWKJmmPQygRY3dmzgeTsI.roa (hash: m1XR1i5Us8oblIUOIQzSE1h5zvdVSIn8gW8k8tGSpec=)
3: Ql95-IGW0X06XmkQjeBmRl8NR5M.roa (hash: U0YHtEFSJr7CqFsN6UUpHO3sj4tjBDK3Qns3+4dEtP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:41:26:df:d0:d7:a9:dc:db:26:8e:4e:83:6f:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01723506718dfcf2a8bd176d4ea24e275322fcfb
Validity
Not Before: Apr 17 12:00:21 2026 GMT
Not After : Apr 18 12:00:21 2026 GMT
Subject: CN=b91a637e8c8e23b488e0d9c6f725c2cf34f877eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:37:a5:61:72:05:7c:6f:fa:d9:1d:f7:87:51:
be:bf:1c:d5:d1:76:2f:bd:92:11:a8:9b:19:21:3a:
b0:d3:67:40:6c:a4:8a:cb:d7:12:83:42:ac:fd:3f:
92:4f:39:8d:cf:0c:55:b3:77:31:6b:2b:75:a4:12:
96:a6:6f:73:78:21:63:f7:5a:51:8d:b3:10:bf:a4:
7f:78:68:8c:a2:06:18:fe:8a:a9:65:66:d3:f1:6a:
f6:1a:e4:53:fd:e3:97:bb:de:b8:ca:60:2c:b3:b6:
0f:4c:0c:53:22:87:92:7e:ed:79:0e:db:d7:ab:3c:
1e:09:f9:0d:30:ec:24:3d:c8:c7:4b:9e:20:5b:89:
aa:7e:35:ca:4f:f2:eb:c6:fd:a0:38:6c:02:12:0c:
a4:0f:54:b3:2b:9d:4f:bf:5e:1a:2e:1b:5c:c5:f1:
89:69:15:e9:39:59:57:76:68:c3:8e:b3:fe:68:f3:
68:d1:ed:b0:2d:2f:b2:80:f9:f3:57:e8:5f:6b:a2:
24:fa:66:e7:c4:b5:f0:fc:0b:85:1c:a8:a0:ce:7b:
7e:f4:a6:07:bb:95:cc:db:a1:17:59:62:b8:da:d0:
34:2c:45:5d:e7:ec:02:36:40:74:e5:df:3e:18:94:
75:ab:bd:b6:9c:a6:a0:4f:cb:58:a4:27:60:c4:26:
72:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1A:63:7E:8C:8E:23:B4:88:E0:D9:C6:F7:25:C2:CF:34:F8:77:EB
X509v3 Authority Key Identifier:
keyid:01:72:35:06:71:8D:FC:F2:A8:BD:17:6D:4E:A2:4E:27:53:22:FC:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:84:4a:ab:34:ba:4b:5c:b5:29:e9:51:08:df:02:c3:ed:41:
0e:a7:76:b3:3b:ad:98:02:f9:2c:d1:08:7d:cf:8a:70:5f:0e:
e6:85:4e:5d:51:af:83:55:1e:ac:56:9c:66:19:8a:3e:ca:97:
e4:da:8b:d4:dc:93:e1:d8:62:d0:0f:c3:3d:2c:6e:77:cf:11:
c7:64:57:aa:98:dd:65:ca:5b:f1:cf:2a:4b:77:2a:ae:ba:8b:
2b:a8:e9:7c:28:ef:65:9f:65:c6:15:3e:05:a9:ca:02:a7:2e:
7b:1e:b4:47:9d:bc:3b:f8:af:e9:42:f7:ed:42:a2:51:7f:ee:
61:72:de:26:e6:ba:72:43:30:3f:12:6e:2e:69:85:de:c5:d9:
86:d0:2a:79:9a:e8:ae:73:42:f1:ca:ba:99:89:d6:e1:99:50:
b0:7d:0c:b7:e8:4e:a2:e4:05:37:18:0e:70:6a:a5:fd:15:03:
54:13:3e:80:9c:fc:9a:59:5f:fd:3f:cc:1f:a3:3f:f5:84:51:
cc:9b:95:4d:71:bc:81:d8:99:d3:e9:b7:33:5d:11:a4:23:f8:
2d:78:22:36:1a:8b:3e:c3:f7:6e:b9:eb:4e:03:e1:b6:74:6f:
e2:41:ec:c7:06:dd:79:d5:8a:54:32:70:33:8e:c0:20:27:ea:
50:ec:bc:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:02:41 2026 by rpki-client