Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.mft
File: AXCkm2bRQaGePv12siXcoGwTjus.mft (raw, json)
Hash identifier: 1Hts9tWUP09p0t2G0OfWN7+KZpbUOj9/fejLrTMbOmk=
Subject key identifier: 39:26:6C:0A:46:7F:95:76:7A:0A:DE:D2:47:AA:9D:49:52:CD:B8:9E
Authority key identifier: 01:70:A4:9B:66:D1:41:A1:9E:3E:FD:76:B2:25:DC:A0:6C:13:8E:EB
Certificate issuer: /CN=0170a49b66d141a19e3efd76b225dca06c138eeb
Certificate serial: 01A0BCC1C9B9A91DAFC83CB697AA34BCACA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXCkm2bRQaGePv12siXcoGwTjus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.mft
Manifest number: 0230
Signing time: Sun 20 Sep 2026 03:00:11 +0000
Manifest this update: Sun 20 Sep 2026 03:00:11 +0000
Manifest next update: Mon 21 Sep 2026 03:00:11 +0000
Files and hashes: 1: AXCkm2bRQaGePv12siXcoGwTjus.crl (hash: Ve101yKQn/mT9EA4JzAxTMfQZpjny3CZnVjUTk4qOKA=)
2: zlyCcC0Ul5zEfxfhjrFpAiSpAHQ.asa (hash: nGTbBj1nHurYFd5cQcZSNhQFoQXg2jJ4C1ZQY3Rxxv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXCkm2bRQaGePv12siXcoGwTjus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 03:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bc:c1:c9:b9:a9:1d:af:c8:3c:b6:97:aa:34:bc:ac:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0170a49b66d141a19e3efd76b225dca06c138eeb
Validity
Not Before: Sep 20 03:00:11 2026 GMT
Not After : Sep 21 03:00:11 2026 GMT
Subject: CN=39266c0a467f95767a0aded247aa9d4952cdb89e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7c:53:5e:64:69:8d:2f:2a:f6:53:98:b2:55:
65:d6:02:0c:45:7b:69:7b:5a:3e:dc:95:16:01:2a:
d5:4e:95:53:da:98:d6:4c:42:e9:84:25:65:fa:b0:
4a:08:6d:cc:ac:d5:34:7f:e1:43:e1:0c:48:5a:c6:
6f:f4:50:77:ac:3c:c3:ab:74:5b:76:e8:3d:0f:7e:
7f:a4:b4:08:94:04:b6:8f:72:43:f5:5a:78:94:17:
6c:7a:38:3e:b5:c7:59:75:d5:99:d2:ab:8c:24:63:
7c:10:b3:fa:f9:64:e3:46:93:e8:12:2a:bd:8d:09:
db:e0:dd:c4:09:84:ff:f2:2a:44:c5:9a:86:6d:3d:
7e:d7:01:eb:e8:4c:ce:78:c1:5f:4f:52:74:55:7a:
46:23:cd:4b:04:b8:9d:3d:51:8d:4d:38:fc:0e:36:
28:0f:50:c4:2d:e7:f5:59:13:d8:23:29:4b:cb:f7:
b3:ea:d3:b2:34:fc:fd:c3:e3:bd:75:63:8c:20:30:
ae:f5:88:90:90:9d:95:04:2e:91:9c:30:06:70:1f:
02:3e:3c:24:d5:27:c0:6e:ed:9c:ae:f0:9e:a5:63:
0d:0c:2b:37:ac:b3:49:4f:fd:7d:28:02:70:2f:9d:
b2:b2:5a:33:65:bb:53:39:71:1c:61:21:6c:ec:b1:
34:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:26:6C:0A:46:7F:95:76:7A:0A:DE:D2:47:AA:9D:49:52:CD:B8:9E
X509v3 Authority Key Identifier:
keyid:01:70:A4:9B:66:D1:41:A1:9E:3E:FD:76:B2:25:DC:A0:6C:13:8E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXCkm2bRQaGePv12siXcoGwTjus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:c0:4c:e6:75:db:82:ab:06:1e:e2:ce:4f:00:2f:4a:19:06:
38:c2:d3:8b:90:fa:d2:41:05:99:84:c4:8c:c0:b7:9e:e7:d5:
4f:36:98:fe:a2:dc:65:2d:ed:71:9f:95:96:ad:22:08:38:45:
8b:2f:4c:dd:21:ab:c8:4b:df:97:bb:9f:e2:3c:0a:6a:02:c8:
7d:e6:e5:4c:a5:05:62:b2:98:e3:7b:51:5f:8c:81:09:3b:0e:
02:3a:3c:21:fe:9b:1c:1f:52:38:6c:af:af:59:e3:50:d5:c5:
37:b3:8a:43:ef:63:14:b3:16:72:19:e0:ef:77:5d:e2:92:76:
f5:da:4d:31:e8:66:47:e5:17:e4:65:6e:dc:29:aa:ed:b5:e0:
a5:a2:30:05:50:bd:db:35:9d:8c:b6:3c:d1:20:50:bd:72:8d:
7b:59:0a:7c:f7:eb:a7:38:d1:01:88:a3:86:c9:a9:da:0f:ac:
30:1d:c9:f7:f4:07:45:cd:60:ba:51:93:0e:99:e2:05:19:7c:
79:d2:31:43:cd:c3:ed:d1:80:68:27:d8:8b:b7:10:2b:3a:54:
34:9e:f9:89:6a:89:da:b2:62:cf:9a:d8:d8:59:4e:c2:f9:19:
53:5d:45:f1:b6:08:10:b1:5b:3e:33:88:88:11:72:23:b8:25:
4a:d4:aa:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:18:46 2026 by rpki-client