Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.mft
File: AXCkm2bRQaGePv12siXcoGwTjus.mft (raw, json)
Hash identifier: MmqDbtDLL44xVndisjkWmnhXAR+xHnX5xLMX6Wfkpxo=
Subject key identifier: BB:D9:D7:F7:48:EE:06:81:FB:4A:42:18:E3:A3:1F:8B:55:A9:26:59
Authority key identifier: 01:70:A4:9B:66:D1:41:A1:9E:3E:FD:76:B2:25:DC:A0:6C:13:8E:EB
Certificate issuer: /CN=0170a49b66d141a19e3efd76b225dca06c138eeb
Certificate serial: 019EBEED39F6E2C35E9D65063226B3EECE58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXCkm2bRQaGePv12siXcoGwTjus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.mft
Manifest number: 0128
Signing time: Sat 13 Jun 2026 03:01:18 +0000
Manifest this update: Sat 13 Jun 2026 03:01:18 +0000
Manifest next update: Sun 14 Jun 2026 03:01:18 +0000
Files and hashes: 1: AXCkm2bRQaGePv12siXcoGwTjus.crl (hash: bPW77i+M5aq7d4y0Gh4JSMGg6YDsTNPXxkhs5IKgZa4=)
2: zlyCcC0Ul5zEfxfhjrFpAiSpAHQ.asa (hash: nGTbBj1nHurYFd5cQcZSNhQFoQXg2jJ4C1ZQY3Rxxv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXCkm2bRQaGePv12siXcoGwTjus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ed:39:f6:e2:c3:5e:9d:65:06:32:26:b3:ee:ce:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0170a49b66d141a19e3efd76b225dca06c138eeb
Validity
Not Before: Jun 13 03:01:18 2026 GMT
Not After : Jun 14 03:01:18 2026 GMT
Subject: CN=bbd9d7f748ee0681fb4a4218e3a31f8b55a92659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:59:48:dd:e3:bb:0a:60:86:c3:7a:d7:b2:17:
08:39:0e:27:e6:a5:05:e7:43:a8:e3:68:c8:1b:ae:
a5:d3:ea:3c:05:0f:57:8f:f6:b1:17:bf:2f:66:47:
7e:6e:46:5d:be:b8:a2:5b:63:29:94:5a:0a:ee:6c:
ea:7f:5d:06:60:27:41:c6:0d:09:9a:d6:97:c5:56:
c5:96:4e:f4:c5:7b:3d:69:3b:ff:e3:61:f0:64:b8:
1b:29:8f:2b:33:cb:f0:ab:8f:a9:95:0a:89:a1:a6:
d6:12:3a:4a:cf:e5:9a:69:89:0e:8c:bc:ff:66:db:
6b:04:a4:8f:06:48:b5:4a:fc:00:b5:cf:ea:56:dc:
98:2d:04:df:35:02:bc:df:4d:d2:9f:cb:ac:df:44:
96:a0:cf:5f:5e:73:b8:27:12:5c:d8:3c:49:94:10:
4c:24:a5:75:c0:d9:ba:af:2a:1c:bf:4c:ac:e8:ca:
68:15:b6:4b:68:7e:dc:dd:08:bc:88:be:78:4d:8e:
e0:04:05:08:9d:f7:a6:ea:be:4d:49:d3:b4:13:d4:
20:89:13:69:fd:90:c1:9a:72:af:29:64:65:e1:d4:
63:b4:31:d5:a5:2e:9f:13:7c:b0:60:2b:8f:32:9a:
cc:1a:a5:6f:b0:b2:92:4b:c7:e3:39:a1:80:b0:ec:
f7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D9:D7:F7:48:EE:06:81:FB:4A:42:18:E3:A3:1F:8B:55:A9:26:59
X509v3 Authority Key Identifier:
keyid:01:70:A4:9B:66:D1:41:A1:9E:3E:FD:76:B2:25:DC:A0:6C:13:8E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXCkm2bRQaGePv12siXcoGwTjus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:00:b2:c8:6d:8e:75:a5:4d:fb:c8:01:21:3f:e4:59:90:3d:
ce:4a:04:23:a8:76:ca:9c:30:16:03:b8:69:25:b8:53:93:81:
d6:76:16:f3:a9:b0:02:87:c0:19:0b:1e:43:4f:12:85:75:33:
73:6a:06:1b:af:5f:40:bb:a7:17:7d:48:14:aa:5b:ba:9b:a6:
40:87:ea:e6:2b:15:2a:4b:7e:e8:a6:07:8b:27:2b:d6:c7:75:
5b:04:da:4e:00:19:90:c5:99:3f:b9:8d:3e:e4:ba:c8:0a:e4:
b0:23:83:66:50:af:f3:95:65:83:c5:e1:ea:ed:12:1f:ef:16:
ef:86:25:9a:0d:aa:63:14:7e:bf:77:fe:df:4a:75:6b:9b:69:
32:a7:8d:9d:a1:af:66:90:29:a1:a0:82:c2:73:94:b2:ef:42:
70:6c:dd:4f:a2:52:e0:6c:7a:36:79:45:85:92:12:ef:91:c4:
4c:da:58:ab:f4:ce:71:79:fa:a4:36:be:92:df:1e:0a:6d:96:
e9:e5:29:82:39:e9:9d:f0:39:cd:4e:e0:71:ea:f6:41:2b:92:
8a:cc:83:de:4d:e8:b4:1b:0a:e8:8c:96:3e:22:f0:50:3b:13:
e3:39:e7:0f:0a:29:04:e9:df:84:db:7a:79:bf:16:5a:98:d3:
a4:3d:f0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:21:50 2026 by rpki-client