Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft
File: axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft (raw, json)
Hash identifier: yG7lVQMrCCBdkoIkGFhhCoabtO74WaJ+8uudb2i+rTc=
Subject key identifier: C4:41:6C:09:CC:B7:E9:64:82:15:EB:A6:74:FE:30:B1:AB:99:4A:C3
Authority key identifier: 6B:1A:C6:91:4B:F8:47:3D:18:0B:60:38:7B:D0:98:F1:D3:7D:AC:80
Certificate issuer: /CN=6b1ac6914bf8473d180b60387bd098f1d37dac80
Certificate serial: 019CACB560C6CC7A9F5E730C4C4FF5B3572F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axrGkUv4Rz0YC2A4e9CY8dN9rIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft
Manifest number: 04A0
Signing time: Mon 02 Mar 2026 04:01:33 +0000
Manifest this update: Mon 02 Mar 2026 04:01:33 +0000
Manifest next update: Tue 03 Mar 2026 04:01:33 +0000
Files and hashes: 1: axrGkUv4Rz0YC2A4e9CY8dN9rIA.crl (hash: r1YrwgsJQ12SQgOnLcnUK0/TWAjzeQtA1Ni+PFwrDhM=)
2: nbQVjAOURx4Qwj5zIcKA26-Xktg.roa (hash: hXW2ndlgxtGzNC8sJFPsKR4NFW6NGQAmeQ9uAICL/bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/axrGkUv4Rz0YC2A4e9CY8dN9rIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:60:c6:cc:7a:9f:5e:73:0c:4c:4f:f5:b3:57:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b1ac6914bf8473d180b60387bd098f1d37dac80
Validity
Not Before: Mar 2 04:01:33 2026 GMT
Not After : Mar 3 04:01:33 2026 GMT
Subject: CN=c4416c09ccb7e9648215eba674fe30b1ab994ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:95:46:46:0b:35:6d:d6:15:1d:c9:79:51:dd:
ce:87:99:be:4b:7b:83:ec:24:8f:08:49:cc:14:50:
ba:90:87:0e:a4:79:39:d1:69:73:da:1d:51:89:51:
78:53:79:9b:d1:2f:48:81:ab:cf:8b:e9:13:6c:35:
b9:01:b0:ce:22:f1:23:c3:09:e2:2f:ca:0d:b8:5e:
77:58:04:97:dc:11:00:f4:4f:af:47:d7:8e:59:0c:
d3:a2:32:84:07:1f:d2:01:c8:25:7f:63:e9:13:e7:
54:38:1b:4a:eb:e0:81:da:9a:da:1e:39:6c:4d:3a:
80:2b:c1:1f:d4:16:8c:37:c5:9c:22:d7:fe:66:db:
b1:a7:5a:29:dd:06:28:9a:46:a3:aa:cb:57:08:e4:
0d:73:6d:66:8b:13:e4:a1:1e:12:2c:a4:f0:74:58:
78:53:bf:d8:8a:73:76:f4:73:9c:0b:aa:91:46:54:
9f:9e:46:09:69:f5:90:14:29:97:51:7d:75:5c:db:
70:b7:9e:54:a7:dc:2c:e7:04:e0:9a:33:01:16:a9:
92:5d:46:5e:46:e0:96:d0:fb:90:d6:a5:17:75:00:
92:98:f1:12:ea:bb:cb:33:90:5f:dc:9e:30:39:e1:
e9:92:22:fc:dd:46:cf:d3:8a:3c:db:8d:1a:72:50:
1b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:41:6C:09:CC:B7:E9:64:82:15:EB:A6:74:FE:30:B1:AB:99:4A:C3
X509v3 Authority Key Identifier:
keyid:6B:1A:C6:91:4B:F8:47:3D:18:0B:60:38:7B:D0:98:F1:D3:7D:AC:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axrGkUv4Rz0YC2A4e9CY8dN9rIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:69:4e:04:f0:2f:58:e0:bc:f9:e0:54:57:8c:7b:80:65:07:
49:49:4d:75:a7:f5:0d:44:c9:25:1c:4c:d9:01:c0:2f:9b:5b:
9f:4c:d3:a7:7f:d2:9f:06:9d:65:4a:af:50:56:9c:c5:3b:73:
25:ac:c1:36:fd:18:1d:9b:cb:55:9d:df:6e:71:61:29:51:b7:
2a:c2:35:83:da:37:e5:12:11:a9:5d:05:7a:53:3b:fa:1b:5c:
03:4d:a2:50:03:ee:ad:30:1b:29:b6:93:91:dc:c8:09:ed:f9:
83:92:fc:37:7d:23:3d:5d:19:e5:10:ca:67:fa:73:39:c8:13:
65:53:c7:b1:d6:59:ce:cc:d7:b8:71:a4:5e:d4:85:c3:a0:7b:
d1:c2:bf:d0:51:2c:aa:74:b4:2f:ed:5c:92:e9:e4:a6:ac:98:
ca:d7:2f:b6:2e:12:32:d5:15:ed:21:0a:ea:c2:b5:b6:2b:c7:
16:3d:7d:02:22:97:1b:c4:76:70:e9:0d:94:1c:d5:ca:15:bd:
8a:90:30:66:ec:c8:c5:0c:75:0c:a4:ac:db:13:ac:bf:1f:23:
f1:bd:8a:3c:fe:b1:f9:6b:ab:6b:dc:e7:64:b6:07:da:2a:23:
5e:c4:1c:bf:22:01:f8:b6:64:a2:60:ea:a6:6b:c6:2b:86:4c:
f6:15:f8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:54:25 2026 by rpki-client