Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
File: axoVfiCtyjtEBnuo2NyrrmmKi-w.mft (raw, json)
Hash identifier: ThGJV8eureesHvJSJd1vPZHZXN4fd5409lRTctO3C0s=
Subject key identifier: 93:1B:B8:7B:79:29:58:57:22:4C:65:E5:09:CC:42:27:73:F1:5B:82
Authority key identifier: 6B:1A:15:7E:20:AD:CA:3B:44:06:7B:A8:D8:DC:AB:AE:69:8A:8B:EC
Certificate issuer: /CN=6b1a157e20adca3b44067ba8d8dcabae698a8bec
Certificate serial: 01A1347E8F307C9C394085002BF2E3685556
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
Manifest number: 13A0
Signing time: Tue 13 Oct 2026 09:01:11 +0000
Manifest this update: Tue 13 Oct 2026 09:01:11 +0000
Manifest next update: Wed 14 Oct 2026 09:01:11 +0000
Files and hashes: 1: axoVfiCtyjtEBnuo2NyrrmmKi-w.crl (hash: K6ZKm/EQvd/tp1lCwqnT/U+rtLB3fkhJgsX8xwGiy9s=)
2: tp2VAgTi6H7UsWr3WWiFgob6-Yg.roa (hash: CPo8RNxtFyI7EIPAUaIjkVpI3fVg5oAaTxsNnGEN0eI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 09:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:7e:8f:30:7c:9c:39:40:85:00:2b:f2:e3:68:55:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b1a157e20adca3b44067ba8d8dcabae698a8bec
Validity
Not Before: Oct 13 09:01:11 2026 GMT
Not After : Oct 14 09:01:11 2026 GMT
Subject: CN=931bb87b79295857224c65e509cc422773f15b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:98:3b:9c:07:d8:02:ea:5d:ea:05:17:0b:99:
3b:f3:77:3f:d8:27:c6:23:19:fa:b6:bc:ce:78:cc:
f3:cd:7c:e6:5a:47:97:fe:bf:cc:2e:b2:15:97:9d:
f3:b2:28:b7:b9:52:53:b7:82:65:42:5b:a7:5a:7c:
60:c6:19:74:ad:6d:9c:8b:5c:3d:3c:d4:ac:4b:cb:
fd:f0:1b:4f:1d:ec:da:a8:9f:f1:52:d3:11:98:3d:
10:18:59:95:3f:96:b9:09:7d:75:8f:66:79:cc:49:
cd:0e:55:6d:74:d0:d1:95:36:67:51:e7:b2:a0:cd:
ea:09:56:c1:e7:61:28:d8:58:a2:40:e6:20:fe:03:
95:34:67:bc:5b:e3:07:46:95:21:96:b6:67:78:f7:
66:e9:3d:00:3c:96:06:c9:95:04:dc:c0:ba:b3:46:
52:69:96:70:17:8a:16:b4:cb:cb:94:fc:84:9d:30:
38:c4:81:a3:dd:00:67:2f:62:4a:30:9c:a8:91:5b:
3d:d0:ea:df:dd:5b:95:89:ed:31:d0:34:b7:b5:38:
d2:fc:b2:46:29:88:ea:96:35:95:cd:d6:cb:7c:c3:
39:34:2b:34:8b:a8:62:b4:08:9a:4e:5d:61:45:31:
1f:b6:18:d0:c3:c4:60:bf:c1:21:f7:17:11:e2:e6:
b5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:1B:B8:7B:79:29:58:57:22:4C:65:E5:09:CC:42:27:73:F1:5B:82
X509v3 Authority Key Identifier:
keyid:6B:1A:15:7E:20:AD:CA:3B:44:06:7B:A8:D8:DC:AB:AE:69:8A:8B:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:97:2a:96:03:e7:8b:3f:20:61:30:9d:5e:9d:bc:7f:85:a1:
e6:de:c9:c2:1a:03:c6:93:53:32:17:90:20:2e:0f:a4:0f:dd:
af:c4:06:33:33:b0:54:d9:08:1a:9f:27:1b:2c:8d:f4:22:ab:
b6:5e:88:70:6e:e7:5f:44:69:1c:36:4a:a6:22:04:0b:d3:ef:
ff:42:af:c6:e6:38:a2:32:8f:c3:91:32:d0:20:b4:8f:31:3e:
3f:2a:ff:72:1c:6c:51:04:2c:0f:7c:10:69:b1:6a:c6:4d:8b:
8b:c6:dc:a2:a0:39:42:91:6f:86:b0:49:51:0b:24:ed:8f:2b:
50:82:da:a1:d5:34:12:6a:2c:cd:0c:cd:37:7a:aa:f2:40:c6:
d9:0e:c8:2c:d7:b4:0b:b6:8c:97:c7:3c:f0:47:75:63:cc:5e:
fd:c5:31:84:c3:ad:5f:44:9a:5b:1c:3a:09:db:e5:3a:51:ec:
65:a0:cc:e9:7c:51:15:4f:07:b0:0c:ab:6f:51:8f:6b:a5:a6:
64:31:5e:cf:7a:38:e8:57:e6:50:59:99:b1:d8:82:4e:72:92:
9a:b7:41:09:c0:e8:54:7b:11:fa:bb:61:cd:0e:78:ed:4c:76:
54:4d:da:0a:ae:7e:83:ea:83:78:e8:b1:f7:2b:bd:cb:9f:f5:
84:0f:31:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 16:14:02 2026 by rpki-client