Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.mft
File: axJMeKp4A8OiPc1y0Nwa6uXe18w.mft (raw, json)
Hash identifier: ZfwRMDTlR93ypwiaRe3doxWjX6GnTmpO/AP1X7IGjh0=
Subject key identifier: 64:D3:11:C0:62:70:D5:52:03:C8:B4:B8:01:5E:A4:17:BE:A5:5D:59
Authority key identifier: 6B:12:4C:78:AA:78:03:C3:A2:3D:CD:72:D0:DC:1A:EA:E5:DE:D7:CC
Certificate issuer: /CN=6b124c78aa7803c3a23dcd72d0dc1aeae5ded7cc
Certificate serial: 019CABA23A54CE994974DA984731B999A5E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axJMeKp4A8OiPc1y0Nwa6uXe18w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 23:01:01 +0000
Manifest this update: Sun 01 Mar 2026 23:01:01 +0000
Manifest next update: Mon 02 Mar 2026 23:01:01 +0000
Files and hashes: 1: axJMeKp4A8OiPc1y0Nwa6uXe18w.crl (hash: tKb/yleADe4VDBrRsap4n5Tpc+rKHNt/dQH7LrPgdrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.mft
rsync://rpki.ripe.net/repository/DEFAULT/axJMeKp4A8OiPc1y0Nwa6uXe18w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:3a:54:ce:99:49:74:da:98:47:31:b9:99:a5:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b124c78aa7803c3a23dcd72d0dc1aeae5ded7cc
Validity
Not Before: Mar 1 23:01:01 2026 GMT
Not After : Mar 2 23:01:01 2026 GMT
Subject: CN=64d311c06270d55203c8b4b8015ea417bea55d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a1:1b:04:94:80:7f:f7:fb:c4:82:66:c6:00:
94:61:ee:da:bf:11:c0:e8:df:47:6a:34:a5:e9:fc:
0e:2c:93:b0:70:cf:9b:97:b9:c7:43:2a:cd:29:8d:
5d:8c:98:8d:30:68:d0:a5:75:05:ce:da:00:7e:db:
1a:62:62:2e:ce:bb:fa:64:28:05:fa:01:24:1b:54:
37:49:28:b9:82:3a:2c:4f:e4:8c:0d:8f:8d:f3:2d:
39:a1:d4:4e:50:7f:89:1e:3f:ec:2f:5d:16:f1:c4:
01:28:13:8a:7e:ea:af:c2:e7:2a:c0:2d:cd:1b:99:
09:0c:eb:29:47:d9:39:8a:e7:f8:64:b1:dd:5a:df:
04:eb:6e:70:28:b1:9e:d2:62:e1:e4:78:68:80:58:
89:a7:08:51:63:73:d2:8c:5c:dd:e0:d5:23:e2:fb:
0d:c9:a8:97:6f:9d:1a:fc:9f:8e:83:e5:81:8f:53:
d7:f7:ec:a4:46:e7:94:36:09:dc:f4:3d:f0:00:6d:
c9:9c:00:99:bf:6b:b7:b3:33:52:fa:09:83:92:11:
c0:73:c1:1c:49:7c:34:f0:bd:aa:32:d6:e7:a9:ec:
74:c5:8f:63:5e:94:10:26:b1:57:37:42:4f:bc:af:
20:85:93:d7:09:04:75:af:72:73:14:85:f6:eb:1b:
9d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D3:11:C0:62:70:D5:52:03:C8:B4:B8:01:5E:A4:17:BE:A5:5D:59
X509v3 Authority Key Identifier:
keyid:6B:12:4C:78:AA:78:03:C3:A2:3D:CD:72:D0:DC:1A:EA:E5:DE:D7:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axJMeKp4A8OiPc1y0Nwa6uXe18w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:fa:8d:01:62:20:b1:7d:9a:da:f3:20:b8:7f:13:af:1c:66:
b4:e0:40:96:f4:22:7f:45:3f:c5:54:c8:20:b5:a4:fb:c5:3f:
ba:55:88:8c:83:be:1c:ff:b5:4e:88:2e:2e:54:fc:96:19:ef:
2f:01:76:da:50:63:9b:60:5f:67:d1:dc:ad:29:74:2f:9b:5c:
a7:5c:13:18:83:f4:ac:be:4e:7e:5e:b9:fa:c2:8c:36:34:7b:
c0:52:e4:30:66:d3:35:a8:89:d8:d3:ad:7e:36:e0:86:9e:5b:
8d:83:b6:f8:84:1c:ae:ff:61:1f:b4:2d:3b:a9:50:67:a1:9d:
cd:90:ad:33:80:3d:4e:96:a9:9f:3a:d9:12:89:14:1b:0b:da:
35:f9:2a:b2:9d:b4:e5:a1:1f:d7:c3:57:9d:f9:c9:0a:6a:0f:
ef:aa:9e:28:b9:ca:b6:01:bd:ff:7b:98:b8:73:01:5b:55:51:
a8:25:a0:2b:06:e1:13:d3:8f:f6:4d:1a:c5:14:88:21:19:87:
ab:78:62:59:75:f7:02:8d:9c:03:20:7f:a7:e0:67:27:77:55:
94:0c:b2:8a:c6:fa:86:de:8b:67:e2:7f:92:a8:16:83:57:27:
5a:02:92:07:14:f2:4b:df:9d:a4:4e:45:89:ad:ba:44:63:e1:
6d:1b:a3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:51:51 2026 by rpki-client