Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.mft
File: AXCkm2bRQaGePv12siXcoGwTjus.mft (raw, json)
Hash identifier: LFCSLmH0r3rLaPWKa9U27peyRP+kbYTzywxkj0pYp1Y=
Subject key identifier: 28:97:45:C7:4B:87:0B:BD:F2:A9:C9:39:8F:49:BF:C7:CD:4B:16:07
Authority key identifier: 01:70:A4:9B:66:D1:41:A1:9E:3E:FD:76:B2:25:DC:A0:6C:13:8E:EB
Certificate issuer: /CN=0170a49b66d141a19e3efd76b225dca06c138eeb
Certificate serial: 019FA898F74D767F839B2F7897DB2E06C356
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXCkm2bRQaGePv12siXcoGwTjus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.mft
Manifest number: 01A1
Signing time: Tue 28 Jul 2026 12:00:24 +0000
Manifest this update: Tue 28 Jul 2026 12:00:24 +0000
Manifest next update: Wed 29 Jul 2026 12:00:24 +0000
Files and hashes: 1: AXCkm2bRQaGePv12siXcoGwTjus.crl (hash: I9NX248E7cKGt/DGqTD7Xnb0LbqOYYzR5M01bKiv2x8=)
2: zlyCcC0Ul5zEfxfhjrFpAiSpAHQ.asa (hash: nGTbBj1nHurYFd5cQcZSNhQFoQXg2jJ4C1ZQY3Rxxv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXCkm2bRQaGePv12siXcoGwTjus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:98:f7:4d:76:7f:83:9b:2f:78:97:db:2e:06:c3:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0170a49b66d141a19e3efd76b225dca06c138eeb
Validity
Not Before: Jul 28 12:00:24 2026 GMT
Not After : Jul 29 12:00:24 2026 GMT
Subject: CN=289745c74b870bbdf2a9c9398f49bfc7cd4b1607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:12:1b:8d:56:bd:2b:f5:b4:52:f8:c0:94:c6:
df:1a:5d:d3:8b:a7:ce:35:8f:77:89:2b:96:b2:99:
11:e1:49:e2:27:77:1d:54:e9:1f:4b:07:10:10:f3:
10:8b:e3:20:69:e5:7f:a7:a8:f9:9d:41:d5:52:3b:
9e:b6:25:54:58:4f:4a:8f:70:95:42:91:57:f2:c5:
28:6a:ec:69:12:71:f5:e9:2a:1a:a7:9a:d9:61:62:
e7:57:fd:04:ef:91:b3:a2:a9:4d:df:68:53:9b:fd:
56:d6:a9:d6:f2:53:19:8a:52:ca:d2:8f:7f:e8:92:
3e:9e:84:90:12:6c:23:76:00:58:42:de:65:74:1c:
20:43:36:1a:3a:f8:06:ba:ec:83:32:b3:eb:3d:91:
79:9a:f7:a5:33:f0:c9:61:16:93:c5:51:c1:93:d5:
a9:6d:d0:13:16:2d:c2:8b:66:ea:78:df:ab:64:f5:
e1:64:3d:7c:49:18:4d:a6:0c:41:f5:57:5d:6e:8a:
e2:db:a4:ba:78:9a:7b:1c:52:de:c8:98:8a:57:46:
a1:06:cc:66:14:fe:9a:3e:80:42:d9:a7:1f:7f:50:
92:6f:45:b3:b7:29:5d:e1:54:e4:5d:bb:c7:df:18:
a4:81:65:8a:83:87:79:46:e0:9a:0b:b7:32:3b:dd:
ff:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:97:45:C7:4B:87:0B:BD:F2:A9:C9:39:8F:49:BF:C7:CD:4B:16:07
X509v3 Authority Key Identifier:
keyid:01:70:A4:9B:66:D1:41:A1:9E:3E:FD:76:B2:25:DC:A0:6C:13:8E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXCkm2bRQaGePv12siXcoGwTjus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:43:74:0a:8f:5f:0f:ca:1f:4a:23:35:6b:69:bf:b3:d5:1d:
31:5d:dd:12:43:14:39:d7:32:b9:ba:a5:89:fe:43:4c:33:16:
98:6d:4b:90:3c:26:0e:39:39:72:82:97:7c:34:48:93:64:58:
ba:e5:1f:f5:e5:d4:47:16:03:87:d8:55:a5:fa:a4:36:dd:7a:
b1:87:d7:f6:24:d6:16:54:e8:80:e7:20:29:db:f8:4b:b8:a2:
c8:bf:8f:50:e6:f9:12:e9:63:01:c2:dc:0e:c4:b5:51:dc:8a:
a1:f8:56:ff:ac:79:a8:26:8a:d9:3c:62:aa:54:ac:60:cb:eb:
31:d3:85:88:a2:ca:ac:54:3f:5c:8c:ea:b5:16:a6:ce:c9:61:
3b:9e:87:f6:54:9a:87:16:08:7a:b0:d3:85:95:b8:63:e8:20:
f6:f4:eb:9f:72:a4:3f:49:b1:cb:df:e4:8b:11:49:3c:79:ff:
b4:47:84:87:88:7e:7f:53:05:74:66:84:cc:46:b0:6e:e4:52:
ba:f9:a6:72:a4:fe:18:65:80:7a:7c:28:a8:d0:66:92:75:1f:
00:63:a2:13:f5:41:69:18:07:5a:0c:f9:2b:55:56:b9:24:9a:
04:cd:29:f3:c1:ea:16:34:a6:28:21:1d:26:74:65:a7:ae:0e:
f2:a9:2b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:38:43 2026 by rpki-client