
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft
File: axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft (raw, json)
Hash identifier: UhrOQYjKbaTCOp/yloNKPngbULjMAt0xaUS3Fns/OgU=
Subject key identifier: EB:BF:48:2E:4A:FC:50:8B:87:5C:DF:18:63:84:DF:35:C1:3B:DB:81
Authority key identifier: 6B:1A:C6:91:4B:F8:47:3D:18:0B:60:38:7B:D0:98:F1:D3:7D:AC:80
Certificate issuer: /CN=6b1ac6914bf8473d180b60387bd098f1d37dac80
Certificate serial: 019D9A3E88F92888827DBA2696AD69625CCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axrGkUv4Rz0YC2A4e9CY8dN9rIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft
Manifest number: 051B
Signing time: Fri 17 Apr 2026 07:01:22 +0000
Manifest this update: Fri 17 Apr 2026 07:01:22 +0000
Manifest next update: Sat 18 Apr 2026 07:01:22 +0000
Files and hashes: 1: axrGkUv4Rz0YC2A4e9CY8dN9rIA.crl (hash: mdbW9/FSFrvt1K6zbw7lz2fMF9GLWS62yxQylOhKgMM=)
2: nbQVjAOURx4Qwj5zIcKA26-Xktg.roa (hash: hXW2ndlgxtGzNC8sJFPsKR4NFW6NGQAmeQ9uAICL/bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/axrGkUv4Rz0YC2A4e9CY8dN9rIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:88:f9:28:88:82:7d:ba:26:96:ad:69:62:5c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b1ac6914bf8473d180b60387bd098f1d37dac80
Validity
Not Before: Apr 17 07:01:22 2026 GMT
Not After : Apr 18 07:01:22 2026 GMT
Subject: CN=ebbf482e4afc508b875cdf186384df35c13bdb81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:40:0c:28:d0:ca:f2:fd:68:e4:77:2e:de:f8:
ce:4c:33:da:31:62:97:c8:71:0a:2e:b3:cf:8f:27:
11:95:1a:41:9a:73:8f:c4:fc:7e:e6:30:a8:b3:64:
ea:c0:5d:7e:82:b4:56:d5:28:42:84:61:5c:b3:04:
84:27:b9:a2:af:16:1b:13:02:1d:7b:77:6c:1e:f5:
f8:96:ac:0a:42:b7:14:63:84:e9:df:bd:f7:0b:dd:
3a:1d:2f:1b:04:8c:94:d8:04:ba:ab:3a:c7:bf:09:
02:85:d1:21:e6:63:ad:ec:ab:70:38:3c:bd:2f:7d:
69:e1:3a:16:72:c9:14:70:00:c9:98:b5:28:4d:cc:
df:d5:dc:45:f6:ea:26:69:e1:8d:3e:00:0b:54:6e:
8f:fa:26:c8:5e:16:9b:eb:dd:07:54:ae:84:7e:c2:
3c:ad:c6:ee:27:66:04:6c:b6:fb:67:fc:d0:3a:76:
d1:72:51:1d:17:89:fa:bc:ca:e6:0e:8f:f4:e0:30:
3d:f4:a2:09:60:f2:9d:7b:79:71:3e:d0:98:4c:98:
d1:f4:28:c1:80:8a:09:51:eb:83:93:0e:9a:38:73:
71:95:04:fd:a2:f7:61:d9:51:56:4a:fe:51:e6:34:
ad:f2:c6:5d:d5:00:83:ee:da:0c:c5:9b:70:43:77:
cd:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BF:48:2E:4A:FC:50:8B:87:5C:DF:18:63:84:DF:35:C1:3B:DB:81
X509v3 Authority Key Identifier:
keyid:6B:1A:C6:91:4B:F8:47:3D:18:0B:60:38:7B:D0:98:F1:D3:7D:AC:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axrGkUv4Rz0YC2A4e9CY8dN9rIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:8e:0a:ae:7b:3a:ab:bf:9b:85:d5:c1:83:f0:91:bc:e5:f6:
8c:5c:22:87:29:6e:f1:f1:7e:21:51:5e:9c:9e:3b:a4:0d:49:
be:9a:3e:5d:99:76:f6:1f:de:f1:e3:56:23:cf:07:65:30:cb:
a6:19:60:c4:5e:96:46:47:c8:8b:b2:1e:bb:9c:b1:f1:fb:2c:
61:32:f7:8c:37:1f:9c:1b:15:09:41:ad:00:43:53:ba:d5:f4:
68:c3:ce:90:bd:0b:44:23:b2:fe:30:b3:f3:b5:e4:43:ec:d7:
35:83:b5:0d:d3:ad:f5:fa:a7:8b:6f:44:aa:a8:c9:16:70:7e:
91:40:5f:f8:a2:72:09:2c:85:21:33:63:d9:ec:4a:88:f8:34:
77:dc:a4:8d:53:04:a1:9e:d1:5f:f8:db:49:f0:c0:a1:fd:f4:
53:15:9e:f6:cc:39:1b:e2:a7:29:76:15:54:83:31:93:c6:67:
d8:ae:0e:43:e8:d2:0c:79:cb:c4:d9:79:25:60:7e:ed:61:f1:
28:88:a5:74:2f:a5:80:be:77:8f:86:0c:77:fd:16:cf:c3:c0:
8c:da:68:d7:12:08:d2:94:95:bf:21:90:f5:ac:5d:1d:e9:be:
e7:8c:c7:83:9f:ea:92:7c:76:65:26:bd:a3:e8:36:91:2d:4e:
59:07:0a:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPoj5KIiCfbomlq1pYlzLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMWFjNjkxNGJmODQ3M2QxODBiNjAzODdiZDA5OGYxZDM3
ZGFjODAwHhcNMjYwNDE3MDcwMTIyWhcNMjYwNDE4MDcwMTIyWjAzMTEwLwYDVQQD
EyhlYmJmNDgyZTRhZmM1MDhiODc1Y2RmMTg2Mzg0ZGYzNWMxM2JkYjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0AMKNDK8v1o5Hcu3vjOTDPaMWKX
yHEKLrPPjycRlRpBmnOPxPx+5jCos2TqwF1+grRW1ShChGFcswSEJ7mirxYbEwId
e3dsHvX4lqwKQrcUY4Tp3733C906HS8bBIyU2AS6qzrHvwkChdEh5mOt7KtwODy9
L31p4ToWcskUcADJmLUoTczf1dxF9uomaeGNPgALVG6P+ibIXhab690HVK6EfsI8
rcbuJ2YEbLb7Z/zQOnbRclEdF4n6vMrmDo/04DA99KIJYPKde3lxPtCYTJjR9CjB
gIoJUeuDkw6aOHNxlQT9ovdh2VFWSv5R5jSt8sZd1QCD7toMxZtwQ3fNwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOu/SC5K/FCLh1zfGGOE3zXBO9uBMB8GA1UdIwQY
MBaAFGsaxpFL+Ec9GAtgOHvQmPHTfayAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXhyR2tVdjRSejBZQzJBNGU5Q1k4ZE45cklBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8xZmZlYmQtYmQzNy00MzkzLWEzM2Qt
NDhjMDM1MjBmYWY3LzEvYXhyR2tVdjRSejBZQzJBNGU5Q1k4ZE45cklBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8xZmZlYmQtYmQzNy00MzkzLWEzM2QtNDhjMDM1MjBmYWY3
LzEvYXhyR2tVdjRSejBZQzJBNGU5Q1k4ZE45cklBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVo4Krns6
q7+bhdXBg/CRvOX2jFwihylu8fF+IVFenJ47pA1Jvpo+XZl29h/e8eNWI88HZTDL
phlgxF6WRkfIi7Ieu5yx8fssYTL3jDcfnBsVCUGtAENTutX0aMPOkL0LRCOy/jCz
87XkQ+zXNYO1DdOt9fqni29EqqjJFnB+kUBf+KJyCSyFITNj2exKiPg0d9ykjVME
oZ7RX/jbSfDAof30UxWe9sw5G+KnKXYVVIMxk8Zn2K4OQ+jSDHnLxNl5JWB+7WHx
KIildC+lgL53j4YMd/0Wz8PAjNpo1xII0pSVvyGQ9axdHem+54zHg5/qknx2ZSa9
o+g2kS1OWQcKMA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:42:20 2026 by rpki-client