Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.mft
File: axJMeKp4A8OiPc1y0Nwa6uXe18w.mft (raw, json)
Hash identifier: UHR7qgdaKAh1XGI7qKp+v7DBMYzqKrE0O5NjCJPHiD0=
Subject key identifier: C1:9A:AE:3B:50:C2:D1:DF:15:E3:59:5A:87:48:DC:D0:7E:D1:63:B2
Authority key identifier: 6B:12:4C:78:AA:78:03:C3:A2:3D:CD:72:D0:DC:1A:EA:E5:DE:D7:CC
Certificate issuer: /CN=6b124c78aa7803c3a23dcd72d0dc1aeae5ded7cc
Certificate serial: 019D9B19EAFBC3684BE334F2256AF524BAAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axJMeKp4A8OiPc1y0Nwa6uXe18w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 11:01:00 +0000
Manifest this update: Fri 17 Apr 2026 11:01:00 +0000
Manifest next update: Sat 18 Apr 2026 11:01:00 +0000
Files and hashes: 1: axJMeKp4A8OiPc1y0Nwa6uXe18w.crl (hash: mhrIkVTSB4BIYOb/tSYxGscBfWwWz0Bza3oeilW9JNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.mft
rsync://rpki.ripe.net/repository/DEFAULT/axJMeKp4A8OiPc1y0Nwa6uXe18w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:ea:fb:c3:68:4b:e3:34:f2:25:6a:f5:24:ba:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b124c78aa7803c3a23dcd72d0dc1aeae5ded7cc
Validity
Not Before: Apr 17 11:01:00 2026 GMT
Not After : Apr 18 11:01:00 2026 GMT
Subject: CN=c19aae3b50c2d1df15e3595a8748dcd07ed163b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ed:99:93:68:65:02:97:19:b3:a2:fe:87:64:
94:f4:5f:11:5a:2c:5d:28:42:5c:0f:68:13:a0:f3:
1d:fd:4f:83:eb:03:e2:7c:f5:b1:4f:12:33:06:71:
32:be:74:7b:79:cc:9d:fc:86:25:69:fd:3c:8f:57:
46:1c:66:4e:97:35:da:e8:2a:78:e5:94:54:ec:55:
c9:e0:b3:21:3e:f9:54:8b:51:f3:43:c7:47:07:83:
36:77:21:4b:bf:c2:de:d9:e9:d2:70:d9:08:d9:9f:
92:8e:7a:96:09:de:ff:d4:65:17:f9:8f:7d:53:cf:
ea:b0:d2:ea:db:c8:93:84:2e:ab:b2:c2:3a:3a:bd:
0c:75:e6:df:5c:d2:3b:bb:da:bf:a1:92:a1:c6:4c:
31:46:54:67:40:6d:d2:7d:3f:82:b7:a9:d5:8b:ba:
8e:87:b4:73:db:3e:71:57:9c:fa:9a:02:d3:66:42:
f8:2c:68:8f:4f:6e:a8:18:7d:af:fb:c0:fb:b9:5e:
a7:a2:af:17:fa:9e:43:52:fb:ab:17:94:6f:1e:32:
61:ac:5f:84:8e:a1:60:ea:5d:19:eb:6c:7b:fb:8c:
69:32:4e:9e:45:ed:8e:91:04:31:aa:e5:56:9b:a0:
a1:82:05:10:4c:c1:c0:bd:04:19:f6:f8:4d:2a:7d:
9d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9A:AE:3B:50:C2:D1:DF:15:E3:59:5A:87:48:DC:D0:7E:D1:63:B2
X509v3 Authority Key Identifier:
keyid:6B:12:4C:78:AA:78:03:C3:A2:3D:CD:72:D0:DC:1A:EA:E5:DE:D7:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axJMeKp4A8OiPc1y0Nwa6uXe18w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:4b:ff:0f:9c:82:ae:a0:a1:9f:72:8d:9e:fc:7a:f9:f3:29:
a0:f5:0e:ea:2a:01:90:b3:08:02:4a:be:d7:67:c7:29:04:4c:
b5:33:a7:a6:53:39:ef:97:e9:65:29:87:62:41:13:03:17:06:
1e:06:95:52:19:07:14:1b:1a:3d:37:a7:48:2b:9d:3f:c3:a4:
57:2c:0c:8f:ad:e4:dc:19:c9:10:82:96:c7:2d:ac:b5:7b:2b:
9b:db:9b:fa:7b:18:7d:5c:84:02:68:d5:df:5d:95:bb:96:a3:
68:9f:9d:78:d6:19:56:6f:b8:57:ad:af:32:89:60:d3:4a:f5:
49:0f:58:43:8d:97:2c:8c:18:0d:f6:3d:89:c2:9b:c4:74:86:
e1:97:51:45:3e:e9:17:f3:4d:af:8d:8d:ba:8a:05:0a:14:d8:
e7:2c:f1:c8:36:34:1d:c9:d6:a6:62:aa:bf:5e:7c:61:44:61:
ae:68:07:83:fb:3b:c2:0e:52:d9:87:41:50:28:5c:10:fe:95:
3e:17:d8:11:9d:3c:8e:37:da:c3:03:c1:ce:43:5e:42:e2:b5:
96:88:3d:25:3e:40:95:22:58:df:51:f1:86:90:63:cb:6e:3b:
8e:53:6d:36:d1:0b:97:0f:d4:40:1f:d6:00:73:58:01:84:64:
bf:92:9a:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bGer7w2hL4zTyJWr1JLqtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMTI0Yzc4YWE3ODAzYzNhMjNkY2Q3MmQwZGMxYWVhZTVk
ZWQ3Y2MwHhcNMjYwNDE3MTEwMTAwWhcNMjYwNDE4MTEwMTAwWjAzMTEwLwYDVQQD
EyhjMTlhYWUzYjUwYzJkMWRmMTVlMzU5NWE4NzQ4ZGNkMDdlZDE2M2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAke2Zk2hlApcZs6L+h2SU9F8RWixd
KEJcD2gToPMd/U+D6wPifPWxTxIzBnEyvnR7ecyd/IYlaf08j1dGHGZOlzXa6Cp4
5ZRU7FXJ4LMhPvlUi1HzQ8dHB4M2dyFLv8Le2enScNkI2Z+SjnqWCd7/1GUX+Y99
U8/qsNLq28iThC6rssI6Or0MdebfXNI7u9q/oZKhxkwxRlRnQG3SfT+Ct6nVi7qO
h7Rz2z5xV5z6mgLTZkL4LGiPT26oGH2v+8D7uV6noq8X+p5DUvurF5RvHjJhrF+E
jqFg6l0Z62x7+4xpMk6eRe2OkQQxquVWm6ChggUQTMHAvQQZ9vhNKn2dNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMGarjtQwtHfFeNZWodI3NB+0WOyMB8GA1UdIwQY
MBaAFGsSTHiqeAPDoj3NctDcGurl3tfMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXhKTWVLcDRBOE9pUGMxeTBOd2E2dVhlMTh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9kMzFhOTAtZGQ4Yy00ODAwLWI5MmQt
OTQzNTNmYzliMmFmLzEvYXhKTWVLcDRBOE9pUGMxeTBOd2E2dVhlMTh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9kMzFhOTAtZGQ4Yy00ODAwLWI5MmQtOTQzNTNmYzliMmFm
LzEvYXhKTWVLcDRBOE9pUGMxeTBOd2E2dVhlMTh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG0v/D5yC
rqChn3KNnvx6+fMpoPUO6ioBkLMIAkq+12fHKQRMtTOnplM575fpZSmHYkETAxcG
HgaVUhkHFBsaPTenSCudP8OkVywMj63k3BnJEIKWxy2stXsrm9ub+nsYfVyEAmjV
312Vu5ajaJ+deNYZVm+4V62vMolg00r1SQ9YQ42XLIwYDfY9icKbxHSG4ZdRRT7p
F/NNr42NuooFChTY5yzxyDY0HcnWpmKqv158YURhrmgHg/s7wg5S2YdBUChcEP6V
PhfYEZ08jjfawwPBzkNeQuK1log9JT5AlSJY31HxhpBjy247jlNtNtELlw/UQB/W
AHNYAYRkv5Ka7A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:46:20 2026 by rpki-client