Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
File: AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft (raw, json)
Hash identifier: VgqA6gr2qiUr+v7j/6U8NpN4PQb4qJ3k5SsIdgXWrbY=
Subject key identifier: A7:76:EA:E2:2E:05:28:85:A2:6A:57:5E:AF:53:2A:C9:DA:F9:FF:4B
Authority key identifier: 03:1C:8E:8C:C0:75:C2:D0:43:13:B9:11:D9:3D:61:FE:2A:9A:DE:A2
Certificate issuer: /CN=031c8e8cc075c2d04313b911d93d61fe2a9adea2
Certificate serial: 01A0DD2A0BD724EA43DE68534462724E7F49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AxyOjMB1wtBDE7kR2T1h_iqa3qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
Manifest number: 09F1
Signing time: Sat 26 Sep 2026 10:01:55 +0000
Manifest this update: Sat 26 Sep 2026 10:01:55 +0000
Manifest next update: Sun 27 Sep 2026 10:01:55 +0000
Files and hashes: 1: AxyOjMB1wtBDE7kR2T1h_iqa3qI.crl (hash: B1K7wQbT0j1DqOXxYrqBTs0uvnQP7ov78AN+hB9b/g4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AxyOjMB1wtBDE7kR2T1h_iqa3qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 10:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:2a:0b:d7:24:ea:43:de:68:53:44:62:72:4e:7f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=031c8e8cc075c2d04313b911d93d61fe2a9adea2
Validity
Not Before: Sep 26 10:01:55 2026 GMT
Not After : Sep 27 10:01:55 2026 GMT
Subject: CN=a776eae22e052885a26a575eaf532ac9daf9ff4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:92:83:20:0b:f5:d7:df:ea:ec:bd:d1:54:b7:
cd:84:11:fb:e9:5d:47:c8:ce:78:f6:5f:1e:ef:ee:
ff:8d:ee:de:56:15:a6:e3:c4:07:8d:24:b7:ca:eb:
8f:16:2e:39:30:17:24:13:6a:b8:b9:c9:92:d9:37:
e2:e4:7f:6f:a9:12:ad:3c:d4:0a:54:a7:8b:73:3f:
cf:b6:8b:a4:ba:e0:86:88:dc:d2:98:60:ad:ca:70:
84:61:be:7e:b2:b8:01:39:2b:29:bb:6e:77:38:36:
63:fc:62:bc:b3:f3:d5:cc:d5:57:03:22:60:8b:49:
eb:cd:74:55:8a:a1:4b:d6:aa:a4:d2:01:df:e4:b9:
56:6c:02:77:ed:47:86:78:d1:15:56:43:fc:ae:60:
08:40:37:bf:b7:6b:ef:fb:2c:95:16:78:94:c9:b4:
5a:11:cd:14:53:77:51:2d:1c:e7:08:3c:2a:52:c5:
9f:05:6d:7d:32:c2:3b:54:73:74:cd:49:6a:94:97:
41:2c:94:0e:0b:e9:15:09:e3:d3:1b:55:98:1c:75:
8a:4a:56:2e:96:b2:02:2c:bd:06:c2:45:2a:20:4f:
af:c1:f8:8c:80:b5:a0:0c:df:41:bf:8c:95:1b:53:
be:4a:cf:41:ab:ef:eb:02:de:b3:8d:ae:0e:9e:3f:
03:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:76:EA:E2:2E:05:28:85:A2:6A:57:5E:AF:53:2A:C9:DA:F9:FF:4B
X509v3 Authority Key Identifier:
keyid:03:1C:8E:8C:C0:75:C2:D0:43:13:B9:11:D9:3D:61:FE:2A:9A:DE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxyOjMB1wtBDE7kR2T1h_iqa3qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:48:77:e1:22:1d:5c:d4:14:86:95:da:7e:5a:60:b5:ac:83:
4a:b4:a7:51:02:fc:0d:5b:e6:fb:5e:3a:1f:d7:c2:db:3a:67:
02:de:3c:78:9b:5e:12:db:94:e7:20:63:a7:e8:22:b8:8c:e4:
99:dc:ec:ce:9a:3c:a4:85:52:5c:9d:7c:2c:c5:bf:51:b6:15:
01:cd:99:29:b5:72:cd:e8:49:45:4a:71:17:ed:aa:fc:36:92:
60:2c:04:5b:af:c4:10:74:f1:60:4d:e9:d0:2a:50:de:89:f0:
9a:b3:9e:74:b0:3f:9c:9f:38:07:8b:cd:0f:1c:bc:39:ce:a9:
aa:4e:83:ec:5a:2b:b6:37:d7:d2:cc:4c:ee:4c:bf:e7:0b:85:
34:dd:03:c2:1e:bb:68:05:05:0b:5a:73:a7:74:ec:38:e7:2c:
0d:3f:57:ea:65:c2:53:9f:db:2f:de:be:9d:d6:c8:d2:1a:d9:
6a:a4:86:83:ff:d0:33:ca:c7:0f:85:f5:78:89:fb:fc:e0:a5:
d3:dc:2c:ed:d4:b9:3c:95:91:86:e6:58:20:86:0c:48:c3:a1:
b8:71:c6:9a:da:5d:a5:02:5f:2f:c1:4e:45:83:fa:b6:ee:ed:
04:28:82:08:92:83:3a:5d:b4:1d:d3:e2:4b:70:31:44:74:9e:
2f:66:77:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:19:26 2026 by rpki-client