Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.mft
File: AXCkm2bRQaGePv12siXcoGwTjus.mft (raw, json)
Hash identifier: w7VpyQSfeO3rVx/Vv9WgjMtpBRUrYdo23tYGMxCtN00=
Subject key identifier: 47:E1:EA:47:63:78:02:5B:43:68:27:09:3D:E8:99:5F:EA:40:1A:92
Authority key identifier: 01:70:A4:9B:66:D1:41:A1:9E:3E:FD:76:B2:25:DC:A0:6C:13:8E:EB
Certificate issuer: /CN=0170a49b66d141a19e3efd76b225dca06c138eeb
Certificate serial: 019DA4F94170C9E7457F69B987F880CEA3AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXCkm2bRQaGePv12siXcoGwTjus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.mft
Manifest number: 96
Signing time: Sun 19 Apr 2026 09:01:31 +0000
Manifest this update: Sun 19 Apr 2026 09:01:31 +0000
Manifest next update: Mon 20 Apr 2026 09:01:31 +0000
Files and hashes: 1: AXCkm2bRQaGePv12siXcoGwTjus.crl (hash: 8XulB7fXU08/FakPOMcb2324R8/abTfogZHTPI6uJWM=)
2: zlyCcC0Ul5zEfxfhjrFpAiSpAHQ.asa (hash: nGTbBj1nHurYFd5cQcZSNhQFoQXg2jJ4C1ZQY3Rxxv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXCkm2bRQaGePv12siXcoGwTjus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 09:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f9:41:70:c9:e7:45:7f:69:b9:87:f8:80:ce:a3:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0170a49b66d141a19e3efd76b225dca06c138eeb
Validity
Not Before: Apr 19 09:01:31 2026 GMT
Not After : Apr 20 09:01:31 2026 GMT
Subject: CN=47e1ea476378025b436827093de8995fea401a92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:41:0f:4d:86:be:86:a2:46:a9:29:66:97:1b:
5a:46:1b:d8:92:32:f9:ac:4b:bf:1e:50:75:d0:85:
9a:ba:c4:b1:8d:df:cd:3d:40:9f:0d:c1:cd:10:1e:
ad:63:5a:27:94:0d:5a:02:f3:3b:5d:dc:ea:f0:4c:
cc:61:bd:1b:5b:ad:7f:23:9a:e8:93:9b:86:97:1f:
98:3b:7d:7b:9f:65:8a:78:bb:28:f0:29:75:8e:ef:
8c:fa:26:72:5d:2a:55:48:3b:a4:64:e8:4e:6b:34:
21:37:76:d6:5f:df:c0:de:e8:38:3a:a7:20:cd:0d:
bf:30:2b:5d:ff:ef:7a:73:11:76:d9:5b:5f:4f:82:
18:de:52:f9:67:d9:b9:44:90:ec:65:27:06:21:da:
18:45:c5:f5:a3:b7:d6:d6:76:34:75:52:15:03:cb:
dc:00:3e:53:b0:41:52:da:14:a2:08:36:00:b2:50:
95:2a:a2:99:4a:31:23:bb:6e:75:8b:8c:e8:89:8a:
f4:0b:64:39:88:ee:22:32:0f:30:00:b3:a4:3f:6b:
df:c2:01:01:f8:fe:a6:d7:4b:f2:85:44:3a:52:5f:
81:d8:a4:9c:41:af:29:ae:96:c2:e0:72:58:c3:44:
69:b1:1f:33:9a:ce:fe:af:a3:a1:62:32:87:d6:82:
49:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E1:EA:47:63:78:02:5B:43:68:27:09:3D:E8:99:5F:EA:40:1A:92
X509v3 Authority Key Identifier:
keyid:01:70:A4:9B:66:D1:41:A1:9E:3E:FD:76:B2:25:DC:A0:6C:13:8E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXCkm2bRQaGePv12siXcoGwTjus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:b1:3c:26:f8:9f:07:f1:66:4a:fa:76:91:ff:a3:82:e3:57:
d5:17:ad:53:bb:a4:b4:a7:3b:83:e2:4a:e3:a1:40:ea:9a:4e:
d8:cf:d5:c0:2e:82:e2:a6:37:93:33:f7:47:1c:80:78:11:8c:
90:82:fa:4c:6b:13:ec:3c:4d:82:38:72:ef:54:9c:e5:49:b5:
52:da:16:ca:de:f5:fd:d1:8b:c8:98:6e:c2:11:7d:7b:64:9d:
a7:5c:b5:9a:26:5d:3e:fb:20:8a:04:ba:86:85:b5:84:8a:75:
91:21:44:64:75:c6:74:ce:c8:1b:29:f8:cd:a4:c3:a1:30:ff:
bd:ad:d6:32:45:70:b6:b3:db:b6:cd:6a:38:1f:5d:3d:38:d2:
3e:98:e5:f4:e5:4e:41:98:f8:2f:07:9c:78:34:2e:ba:2f:66:
f5:65:5e:73:84:ba:3e:c8:d0:bf:21:17:84:ab:f6:4a:63:d1:
43:74:2f:7a:3b:1c:d9:5a:34:02:c1:88:68:0f:22:dc:4c:6e:
5e:3e:69:39:5b:b8:27:a0:7d:72:77:4e:af:82:29:d8:32:e9:
fe:4c:ce:e1:6d:80:19:e6:5c:5c:62:6e:9f:51:95:91:2f:9b:
71:2b:b0:fa:b5:31:92:f9:dd:f6:b8:03:7a:6a:36:4e:97:0f:
22:d5:94:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2k+UFwyedFf2m5h/iAzqOqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNzBhNDliNjZkMTQxYTE5ZTNlZmQ3NmIyMjVkY2EwNmMx
MzhlZWIwHhcNMjYwNDE5MDkwMTMxWhcNMjYwNDIwMDkwMTMxWjAzMTEwLwYDVQQD
Eyg0N2UxZWE0NzYzNzgwMjViNDM2ODI3MDkzZGU4OTk1ZmVhNDAxYTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUEPTYa+hqJGqSlmlxtaRhvYkjL5
rEu/HlB10IWausSxjd/NPUCfDcHNEB6tY1onlA1aAvM7Xdzq8EzMYb0bW61/I5ro
k5uGlx+YO317n2WKeLso8Cl1ju+M+iZyXSpVSDukZOhOazQhN3bWX9/A3ug4Oqcg
zQ2/MCtd/+96cxF22VtfT4IY3lL5Z9m5RJDsZScGIdoYRcX1o7fW1nY0dVIVA8vc
AD5TsEFS2hSiCDYAslCVKqKZSjEju251i4zoiYr0C2Q5iO4iMg8wALOkP2vfwgEB
+P6m10vyhUQ6Ul+B2KScQa8prpbC4HJYw0RpsR8zms7+r6OhYjKH1oJJGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEfh6kdjeAJbQ2gnCT3omV/qQBqSMB8GA1UdIwQY
MBaAFAFwpJtm0UGhnj79drIl3KBsE47rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVhDa20yYlJRYUdlUHYxMnNpWGNvR3dUanVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8wMGUxMWYtOTIwOS00MzcwLWE5Yzgt
NzQ4ODZlMTE4MTBlLzEvQVhDa20yYlJRYUdlUHYxMnNpWGNvR3dUanVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC8wMGUxMWYtOTIwOS00MzcwLWE5YzgtNzQ4ODZlMTE4MTBl
LzEvQVhDa20yYlJRYUdlUHYxMnNpWGNvR3dUanVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAibE8Jvif
B/FmSvp2kf+jguNX1RetU7uktKc7g+JK46FA6ppO2M/VwC6C4qY3kzP3RxyAeBGM
kIL6TGsT7DxNgjhy71Sc5Um1UtoWyt71/dGLyJhuwhF9e2Sdp1y1miZdPvsgigS6
hoW1hIp1kSFEZHXGdM7IGyn4zaTDoTD/va3WMkVwtrPbts1qOB9dPTjSPpjl9OVO
QZj4LweceDQuui9m9WVec4S6PsjQvyEXhKv2SmPRQ3Qvejsc2Vo0AsGIaA8i3Exu
Xj5pOVu4J6B9cndOr4Ip2DLp/kzO4W2AGeZcXGJun1GVkS+bcSuw+rUxkvnd9rgD
emo2TpcPItWUWQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 15:31:01 2026 by rpki-client