Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
File: axoVfiCtyjtEBnuo2NyrrmmKi-w.mft (raw, json)
Hash identifier: vC9rczvupSjioMyZuMCwstEsE3MD2b3Q0iJyvj2uOL0=
Subject key identifier: 2A:BF:57:D4:70:55:79:95:20:C0:4A:98:53:10:3E:28:A1:A0:ED:71
Authority key identifier: 6B:1A:15:7E:20:AD:CA:3B:44:06:7B:A8:D8:DC:AB:AE:69:8A:8B:EC
Certificate issuer: /CN=6b1a157e20adca3b44067ba8d8dcabae698a8bec
Certificate serial: 019EC2C92FE3FE1B02C1217007398DA9274B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
Manifest number: 125C
Signing time: Sat 13 Jun 2026 21:00:25 +0000
Manifest this update: Sat 13 Jun 2026 21:00:25 +0000
Manifest next update: Sun 14 Jun 2026 21:00:25 +0000
Files and hashes: 1: axoVfiCtyjtEBnuo2NyrrmmKi-w.crl (hash: ZFnvqLuOXjurW9/ygaNncLF8NAavB5DyyLbXS4ofakU=)
2: tp2VAgTi6H7UsWr3WWiFgob6-Yg.roa (hash: CPo8RNxtFyI7EIPAUaIjkVpI3fVg5oAaTxsNnGEN0eI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:c9:2f:e3:fe:1b:02:c1:21:70:07:39:8d:a9:27:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b1a157e20adca3b44067ba8d8dcabae698a8bec
Validity
Not Before: Jun 13 21:00:25 2026 GMT
Not After : Jun 14 21:00:25 2026 GMT
Subject: CN=2abf57d47055799520c04a9853103e28a1a0ed71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ed:85:3f:ce:fc:fd:59:07:2f:2d:b1:1f:ae:
dc:7d:de:cb:98:5b:da:26:c1:4f:b8:53:47:0b:2c:
2f:4d:02:b8:e1:c7:ff:1e:6c:38:51:bb:4d:72:c3:
e5:bd:be:ca:b4:bf:08:e5:df:fe:71:6d:13:e2:da:
56:94:b0:93:5e:e0:96:e6:ed:06:d6:ef:f1:9c:09:
b7:c4:e6:f8:69:2a:46:d7:ca:c3:0a:3d:c0:1c:da:
30:8b:c3:9b:e0:b9:2a:ea:b6:c7:55:f9:f5:65:ca:
9d:fd:1d:46:dd:ec:c5:29:89:78:f2:92:d8:41:87:
b8:19:2a:a2:6a:b8:46:d2:4a:ec:37:f0:e1:0c:16:
94:ae:3c:a5:cd:1e:ea:59:f5:60:4a:1e:8c:ea:0c:
85:90:6c:70:da:cc:88:dd:79:ca:89:2a:db:73:fc:
ca:cf:5f:57:43:be:1c:c4:02:bd:d9:cd:1a:35:38:
be:22:86:42:c8:46:ec:cd:18:16:5f:7a:63:80:68:
d5:24:82:7a:57:d4:0e:96:cf:7c:f0:b9:1d:0c:ec:
18:91:94:a1:67:f7:5f:5c:6f:8f:ac:7e:74:d3:54:
67:c1:8c:a2:a8:18:e9:90:9f:c1:91:7e:6d:75:e4:
72:39:87:fb:ae:aa:85:7c:3d:ab:60:3f:f5:ac:58:
ce:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:BF:57:D4:70:55:79:95:20:C0:4A:98:53:10:3E:28:A1:A0:ED:71
X509v3 Authority Key Identifier:
keyid:6B:1A:15:7E:20:AD:CA:3B:44:06:7B:A8:D8:DC:AB:AE:69:8A:8B:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:67:ce:57:59:ff:56:c7:49:82:28:18:dc:f5:a2:8f:f6:1b:
79:44:71:f3:9d:e7:b7:b4:ce:e8:db:90:0a:2b:8a:5f:97:e7:
27:1a:1a:dd:1e:3c:e6:20:1c:c8:ba:d0:a3:8b:db:b9:27:3b:
41:54:31:a2:da:07:74:2e:a9:1c:b1:16:6c:53:0f:43:0f:98:
57:ac:81:b6:89:a3:cd:9a:e8:2c:47:eb:4a:82:27:60:49:24:
6b:73:1b:5c:74:14:f4:ec:c2:64:39:22:7e:ac:fb:52:62:3d:
b0:6e:5a:8f:c5:70:34:35:19:92:aa:7d:17:f4:18:23:23:ae:
f9:6a:10:97:47:20:42:4b:08:a2:bb:69:2f:4d:fb:2e:d2:bb:
46:3a:48:4e:5a:c2:46:d5:2b:6c:a8:38:18:82:71:84:ec:69:
78:fc:3d:76:75:e8:17:75:72:d6:44:f2:90:b9:b6:9f:c8:f3:
30:d3:d6:3b:18:64:d0:43:ad:f6:8b:6f:6c:a7:bc:da:c0:06:
18:8d:06:8f:da:69:49:87:2b:7e:d1:42:4a:38:11:da:75:41:
f2:d8:18:9a:6a:f2:9d:30:07:4d:ce:49:e4:6b:a6:ab:c4:b6:
1e:8d:56:f0:b8:3f:38:0c:2e:94:5f:75:6a:cf:88:06:a3:78:
d2:14:c4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:35:21 2026 by rpki-client