Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
File: axoVfiCtyjtEBnuo2NyrrmmKi-w.mft (raw, json)
Hash identifier: YG/qmRu6gF+hJZXqMagdxqFFAmzOzBR6I1uERqCEkZc=
Subject key identifier: FD:16:85:10:CC:51:88:D1:A4:C5:69:BD:D4:E4:43:DA:07:40:6A:C3
Authority key identifier: 6B:1A:15:7E:20:AD:CA:3B:44:06:7B:A8:D8:DC:AB:AE:69:8A:8B:EC
Certificate issuer: /CN=6b1a157e20adca3b44067ba8d8dcabae698a8bec
Certificate serial: 019FAA87A68D704224CA0BF709A664B670E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
Manifest number: 12D4
Signing time: Tue 28 Jul 2026 21:00:44 +0000
Manifest this update: Tue 28 Jul 2026 21:00:44 +0000
Manifest next update: Wed 29 Jul 2026 21:00:44 +0000
Files and hashes: 1: axoVfiCtyjtEBnuo2NyrrmmKi-w.crl (hash: s8hSMRtekvv3YCEQ6qmCCrhr7fr6hgQhy/92XvifJeY=)
2: tp2VAgTi6H7UsWr3WWiFgob6-Yg.roa (hash: CPo8RNxtFyI7EIPAUaIjkVpI3fVg5oAaTxsNnGEN0eI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:a6:8d:70:42:24:ca:0b:f7:09:a6:64:b6:70:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b1a157e20adca3b44067ba8d8dcabae698a8bec
Validity
Not Before: Jul 28 21:00:44 2026 GMT
Not After : Jul 29 21:00:44 2026 GMT
Subject: CN=fd168510cc5188d1a4c569bdd4e443da07406ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:47:ea:bc:6f:cb:39:51:07:07:4a:a5:67:54:
ad:33:12:60:78:78:88:f5:fd:52:f8:5c:fb:50:de:
3e:43:ed:d9:8c:da:dd:66:79:29:f7:d7:d2:12:64:
36:59:f1:35:b7:71:cf:8e:bc:8e:21:ae:1e:70:a1:
77:2a:54:a8:ad:80:12:9a:4a:bf:f5:7e:bc:8c:4e:
28:f2:a0:96:e1:c4:60:a3:06:cc:67:99:39:44:42:
a4:bf:02:bd:c7:58:9b:36:e0:27:7a:b4:ed:49:22:
06:e7:b8:d5:00:ce:d8:d2:80:22:40:50:1b:85:69:
8a:7c:ea:3b:89:45:d2:71:0d:cc:4b:ea:1a:bc:18:
f9:c5:e6:d3:55:87:dc:ab:00:55:02:f6:8c:a9:aa:
df:fa:77:c3:e6:dc:46:65:e5:a8:cd:01:48:5f:d3:
f5:51:94:51:28:fd:e0:ee:4e:d1:a3:01:7a:a0:1b:
85:32:fa:89:e1:69:5f:9c:01:8a:17:eb:ae:5a:6c:
df:f5:8f:3e:d6:7f:29:3c:b6:16:10:91:c8:c6:4c:
44:c6:0e:a9:e8:3f:77:af:76:67:be:b8:6d:25:ea:
d5:80:f7:53:39:e4:a6:57:af:10:64:e3:39:25:70:
8c:46:e8:d7:4a:13:f9:0f:85:6d:69:e4:59:14:92:
b5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:16:85:10:CC:51:88:D1:A4:C5:69:BD:D4:E4:43:DA:07:40:6A:C3
X509v3 Authority Key Identifier:
keyid:6B:1A:15:7E:20:AD:CA:3B:44:06:7B:A8:D8:DC:AB:AE:69:8A:8B:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:23:4c:f3:42:ba:35:82:21:5d:b4:43:d3:62:dd:42:30:a7:
f2:75:83:27:b9:cd:47:f2:51:7b:5a:50:c8:27:36:8e:f6:9d:
39:e7:79:c6:30:61:ab:aa:8a:c8:9b:2f:a4:8f:b3:1b:b9:a8:
dd:32:70:73:13:a2:3b:8f:b6:7f:70:af:6d:d5:71:df:78:29:
16:0f:0c:c6:13:ce:3c:47:5c:fc:f5:e4:7d:07:8b:44:77:eb:
82:4a:7d:53:50:63:e6:f8:2a:b7:cc:ac:18:eb:3b:46:02:e5:
70:3e:0d:5a:0c:e4:72:9c:45:73:60:47:ae:85:06:b8:20:e6:
ab:04:52:d9:c4:59:64:f4:36:16:de:3c:51:85:a3:55:fc:36:
2d:85:73:2e:e3:fe:58:0f:df:e9:05:0b:5a:ac:14:7b:3c:46:
15:da:c4:7a:d5:c4:fa:5d:90:6d:a7:14:85:51:8c:d2:93:49:
b1:23:6b:c4:30:38:82:49:a3:ce:73:ac:be:5e:eb:be:94:d1:
2e:16:41:c9:eb:2d:76:f7:0e:97:a4:0d:b7:2f:0f:aa:84:00:
2d:30:8d:38:50:e3:f9:93:f5:6e:95:dd:54:15:b5:db:68:6d:
aa:17:13:9d:87:88:fa:48:16:58:61:85:f5:e4:9d:1e:1d:ae:
e8:08:15:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:49:42 2026 by rpki-client