Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
File: axoVfiCtyjtEBnuo2NyrrmmKi-w.mft (raw, json)
Hash identifier: dzQe5n4VoJkq4cdJyCjOC1CjgkeZlkZw/63W77hRDZE=
Subject key identifier: AF:FB:A3:10:CA:BC:40:69:7B:1E:8F:64:93:15:23:00:C3:8E:7F:B8
Authority key identifier: 6B:1A:15:7E:20:AD:CA:3B:44:06:7B:A8:D8:DC:AB:AE:69:8A:8B:EC
Certificate issuer: /CN=6b1a157e20adca3b44067ba8d8dcabae698a8bec
Certificate serial: 019D9B5150D3B776336BAB655E9B1161D994
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
Manifest number: 11C3
Signing time: Fri 17 Apr 2026 12:01:30 +0000
Manifest this update: Fri 17 Apr 2026 12:01:30 +0000
Manifest next update: Sat 18 Apr 2026 12:01:30 +0000
Files and hashes: 1: axoVfiCtyjtEBnuo2NyrrmmKi-w.crl (hash: j+8rop0HQtpcovbWYwzRK5PFOVsL2WonKSRDoy44UVo=)
2: tp2VAgTi6H7UsWr3WWiFgob6-Yg.roa (hash: CPo8RNxtFyI7EIPAUaIjkVpI3fVg5oAaTxsNnGEN0eI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:50:d3:b7:76:33:6b:ab:65:5e:9b:11:61:d9:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b1a157e20adca3b44067ba8d8dcabae698a8bec
Validity
Not Before: Apr 17 12:01:30 2026 GMT
Not After : Apr 18 12:01:30 2026 GMT
Subject: CN=affba310cabc40697b1e8f6493152300c38e7fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:38:8f:a4:82:c8:ca:b4:d7:a4:d7:80:06:2a:
c1:9c:bc:fb:07:0f:d2:db:7b:35:fe:92:d4:15:51:
e9:5a:8e:07:62:54:45:56:9b:3b:e5:d2:42:2c:89:
4e:8d:21:9f:18:92:6a:74:38:4b:83:93:97:48:10:
e5:db:31:c4:f0:32:b4:7b:40:1c:d1:d9:0d:87:e2:
14:a3:c1:05:cb:05:1b:30:14:59:fc:f1:fa:4f:1d:
a4:a8:36:7c:9e:c4:64:b6:c5:6d:d6:d2:e9:72:ae:
06:fe:3d:fc:d1:02:17:7a:22:b8:45:d9:46:d8:00:
72:64:1f:36:05:a5:24:66:59:82:82:5e:17:98:41:
23:59:08:82:73:ba:2b:6e:b8:21:94:11:a9:d1:fb:
0a:5c:b2:96:a2:65:15:62:44:c0:e7:eb:b8:e4:5a:
07:12:1f:07:3f:90:6a:1d:46:09:a4:2b:2c:57:76:
5d:3e:fb:fc:70:b5:a8:e0:c7:3e:cc:bc:63:78:7a:
d0:d3:fc:60:34:a5:12:d7:56:8c:6b:0d:d1:d5:5b:
dc:66:aa:62:b4:09:f1:2a:d7:e0:c4:b4:b8:be:46:
1c:9b:df:28:5c:30:db:49:a9:c8:ff:d4:72:c9:9f:
82:17:33:73:f3:03:06:4d:e0:0c:21:cd:d8:79:19:
0e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:FB:A3:10:CA:BC:40:69:7B:1E:8F:64:93:15:23:00:C3:8E:7F:B8
X509v3 Authority Key Identifier:
keyid:6B:1A:15:7E:20:AD:CA:3B:44:06:7B:A8:D8:DC:AB:AE:69:8A:8B:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:ba:47:c5:a3:43:39:24:5f:58:d3:19:0d:d0:ca:55:f0:19:
b1:be:02:e5:e6:b1:7e:85:bf:56:da:1f:a4:9f:e3:b4:b9:38:
07:f1:cc:ca:54:e5:ee:ea:59:46:86:cd:df:64:41:71:a0:11:
09:e7:f9:d1:d1:2f:0d:8f:9d:c3:49:5c:3f:71:ea:b3:05:e4:
ef:a9:6d:73:15:2b:df:ab:b0:3a:4c:77:4d:d9:14:01:99:27:
18:ee:cc:1e:1c:64:64:79:d5:22:26:2f:4c:90:3f:aa:fe:6d:
39:52:98:d1:34:36:6b:94:c1:06:bb:72:ff:d4:62:0f:9a:6c:
db:86:fe:da:78:81:24:e3:80:64:00:40:43:5d:44:28:9e:60:
8a:91:2b:bd:b8:fb:ac:f0:bb:53:47:cf:4a:5d:c9:0d:2a:a0:
a7:41:c3:67:f2:1f:8f:0b:a5:8b:e7:45:bd:ed:b0:31:91:d2:
03:19:70:27:30:4e:b9:18:88:26:f3:bd:0c:cf:4b:0e:6b:c6:
63:ab:f0:e4:88:31:3b:d6:7f:e1:40:de:82:fc:de:9c:af:6a:
c3:d3:04:37:44:64:09:88:29:15:59:65:83:bf:7f:f3:95:57:
80:bb:58:58:d7:d4:01:eb:9f:b8:69:24:28:df:4b:cf:b2:cc:
ae:62:fc:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:44:36 2026 by rpki-client