Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.mft
File: AXCkm2bRQaGePv12siXcoGwTjus.mft (raw, json)
Hash identifier: ittGSRFTJLhxDaKqkASkHv0eHtXk57nPwb2y9DNn0ro=
Subject key identifier: 02:B2:F0:EC:11:D7:51:DA:04:89:B4:93:88:0C:AD:86:56:C5:95:63
Authority key identifier: 01:70:A4:9B:66:D1:41:A1:9E:3E:FD:76:B2:25:DC:A0:6C:13:8E:EB
Certificate issuer: /CN=0170a49b66d141a19e3efd76b225dca06c138eeb
Certificate serial: 019CA9EB204C7A070194DE08DB07730A8915
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXCkm2bRQaGePv12siXcoGwTjus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.mft
Manifest number: 14
Signing time: Sun 01 Mar 2026 15:01:24 +0000
Manifest this update: Sun 01 Mar 2026 15:01:24 +0000
Manifest next update: Mon 02 Mar 2026 15:01:24 +0000
Files and hashes: 1: AXCkm2bRQaGePv12siXcoGwTjus.crl (hash: FRcynaoiGnPL7cYgM0+6FbX0YCAvcqPyFzQcQnYsfQ0=)
2: zlyCcC0Ul5zEfxfhjrFpAiSpAHQ.asa (hash: nGTbBj1nHurYFd5cQcZSNhQFoQXg2jJ4C1ZQY3Rxxv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXCkm2bRQaGePv12siXcoGwTjus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:20:4c:7a:07:01:94:de:08:db:07:73:0a:89:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0170a49b66d141a19e3efd76b225dca06c138eeb
Validity
Not Before: Mar 1 15:01:24 2026 GMT
Not After : Mar 2 15:01:24 2026 GMT
Subject: CN=02b2f0ec11d751da0489b493880cad8656c59563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c2:4a:23:dd:ca:98:da:11:da:3f:ed:40:2d:
ac:32:88:e1:70:58:60:05:22:3e:23:c2:1f:66:86:
4b:76:f6:40:1a:4a:e0:be:5c:b6:1a:1a:2a:ad:0a:
b8:99:aa:60:54:27:80:d1:41:a4:bd:52:81:83:52:
28:46:67:90:c2:0c:97:9f:e4:81:d4:1b:c6:4b:c9:
d5:ed:49:ba:b9:01:a4:88:e7:d7:d1:cb:55:71:e7:
cd:2b:b5:2d:71:f2:ac:ac:9b:df:4f:37:60:1b:f9:
a9:fa:66:8d:8d:b4:1d:6b:d7:12:b9:9d:12:d6:65:
3e:35:7e:2f:b2:e6:79:7d:32:e4:e1:d4:ae:48:dc:
c7:3f:4c:1a:28:ec:17:2c:e0:d6:4f:f2:a5:d1:84:
fa:0b:b6:fd:4a:8c:88:8e:16:2b:67:ee:9e:7d:40:
75:3e:38:1d:b4:d2:89:fd:12:97:fa:fd:32:a0:39:
76:f4:cb:5a:20:bc:31:98:af:45:91:61:9c:ab:f5:
2f:2e:c6:7f:e6:28:18:23:15:0b:66:f6:a2:a1:f8:
48:1a:3c:00:ce:f1:df:4d:c9:68:a6:05:58:e9:07:
11:3d:5e:8f:3c:5f:59:99:4d:71:dc:53:09:a1:43:
48:41:c9:c1:74:ed:ca:3e:a8:5b:b9:5f:1d:e2:59:
d6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B2:F0:EC:11:D7:51:DA:04:89:B4:93:88:0C:AD:86:56:C5:95:63
X509v3 Authority Key Identifier:
keyid:01:70:A4:9B:66:D1:41:A1:9E:3E:FD:76:B2:25:DC:A0:6C:13:8E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXCkm2bRQaGePv12siXcoGwTjus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:be:de:bb:17:dd:e8:89:90:16:80:f2:a4:9f:24:25:db:36:
fd:5d:87:c1:da:45:aa:f9:96:a1:ac:31:c2:57:1d:2e:3d:82:
80:90:59:6a:b1:2f:ab:45:a3:05:f9:7c:0c:74:b2:ff:57:b9:
c3:68:34:b0:47:bc:74:b4:90:f5:b8:17:e4:52:ce:76:a4:db:
76:83:03:47:a2:4e:64:7d:bd:67:d2:9e:02:eb:f4:d7:21:6c:
66:e6:2e:d9:d5:9d:ad:f2:b1:30:02:12:8e:91:25:bb:96:04:
61:ae:7a:a8:32:b0:ae:2b:6e:2c:05:ef:44:a0:b4:a5:54:2d:
d8:09:de:2a:90:90:ac:9e:25:f0:50:cf:b4:68:b2:e7:6d:e2:
e6:4f:41:b3:ed:2a:e7:d0:94:2c:ac:40:82:6a:f2:54:a2:97:
46:54:01:2c:61:89:4d:ed:d1:85:33:cd:f4:63:58:33:b5:6c:
41:b3:3d:1d:58:4a:a7:42:af:a4:b0:c8:3b:5f:02:f7:0c:62:
75:3b:20:ae:be:34:3a:45:46:b8:38:87:a7:58:7a:62:76:cd:
fb:65:b8:ae:ba:40:bc:e3:84:32:18:ae:07:15:01:42:fd:cc:
a0:94:74:ca:1e:7a:81:fa:05:88:c9:0e:51:99:37:fa:b4:96:
96:07:ff:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:03:19 2026 by rpki-client