Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
File: axpX8G73IAfdYZP5YKYWNEtzMB8.mft (raw, json)
Hash identifier: N2ovtzEdU1KNWVeLVp7U7uMKybfm6Vy68MpkdBbQB1s=
Subject key identifier: E9:E0:E6:FE:A3:56:3F:94:A6:4C:D4:66:9E:66:AC:FA:FE:5C:3D:FB
Authority key identifier: 6B:1A:57:F0:6E:F7:20:07:DD:61:93:F9:60:A6:16:34:4B:73:30:1F
Certificate issuer: /CN=6b1a57f06ef72007dd6193f960a616344b73301f
Certificate serial: 019D38D29D462E55224AF02C94C42B418F17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
Manifest number: 15A7
Signing time: Sun 29 Mar 2026 09:00:20 +0000
Manifest this update: Sun 29 Mar 2026 09:00:20 +0000
Manifest next update: Mon 30 Mar 2026 09:00:20 +0000
Files and hashes: 1: axpX8G73IAfdYZP5YKYWNEtzMB8.crl (hash: wD8h0JtqIBPWfXxxFs7fWZD1PN7IsUGrA85k7hjVDA4=)
2: yWDSl9yDDWwKXKm5areAK-BgE_4.roa (hash: 9t658G/RphCv/dZEb8OenZ41/3jlcAPrpuRTSbCffNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:9d:46:2e:55:22:4a:f0:2c:94:c4:2b:41:8f:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b1a57f06ef72007dd6193f960a616344b73301f
Validity
Not Before: Mar 29 09:00:20 2026 GMT
Not After : Mar 30 09:00:20 2026 GMT
Subject: CN=e9e0e6fea3563f94a64cd4669e66acfafe5c3dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:98:91:55:ab:93:e3:28:45:78:57:e3:5c:a2:
c5:c9:09:3d:ba:58:28:59:5d:55:b3:8d:3b:97:09:
cd:16:19:9e:5c:a8:7d:56:0b:78:7e:ee:99:92:60:
22:1a:3a:09:d1:5f:9c:3e:41:71:21:d0:fd:fc:ff:
31:a7:72:84:17:a1:17:15:04:e2:43:f4:ac:88:9c:
f6:9e:d8:2b:e4:1b:4c:a9:2f:56:2c:d0:5c:93:4f:
c9:43:65:a8:9a:01:86:9b:03:ce:97:a3:c0:c4:7f:
be:5e:38:34:35:b2:9c:5b:d5:73:78:53:41:2f:ab:
53:46:4c:31:42:79:98:fc:f3:a4:59:d8:6d:36:6d:
a2:97:8d:44:bd:31:9e:2e:4d:f8:f8:41:da:59:9d:
6b:e6:a9:84:b9:56:0d:02:c9:d3:e2:91:13:0d:c2:
76:6f:30:4c:df:1d:d9:56:c5:0e:c0:d5:b1:16:f6:
03:3e:76:aa:18:86:b3:3d:bf:8a:1d:b3:9b:c6:49:
63:1c:17:20:9e:6d:59:42:e7:2f:88:77:86:95:fc:
f4:65:11:97:f2:ca:4b:76:fb:47:f8:50:14:8c:01:
ba:13:98:4c:7a:b1:80:de:fc:3a:e8:e5:7c:46:56:
d9:43:a5:3b:11:c0:79:fd:f0:ad:3d:9f:2a:8a:47:
d8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E0:E6:FE:A3:56:3F:94:A6:4C:D4:66:9E:66:AC:FA:FE:5C:3D:FB
X509v3 Authority Key Identifier:
keyid:6B:1A:57:F0:6E:F7:20:07:DD:61:93:F9:60:A6:16:34:4B:73:30:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ec:36:7b:aa:cc:05:16:c1:df:ec:95:95:38:4b:c8:86:e3:
2c:dc:ec:b2:6f:f6:1f:bc:5f:21:09:dd:7a:30:4f:4a:41:d2:
28:58:93:3d:bc:71:4b:99:5a:4c:cc:46:f5:d6:1b:23:b2:ed:
3a:f4:3d:1d:58:62:0f:1f:6d:e6:01:65:6a:54:98:fa:d2:b7:
a5:7a:a0:cc:60:96:0e:2d:23:77:49:36:9a:92:ee:d9:cc:66:
3e:47:d6:f1:9e:87:1e:d8:83:29:e7:13:c1:fd:03:ca:c2:af:
86:77:d6:90:10:bd:31:ef:0c:84:4c:8a:14:ef:4d:68:d3:03:
88:c8:54:f8:c7:f1:47:16:e2:62:6a:96:6d:9e:46:9d:52:27:
ce:8f:6c:53:b9:ca:93:62:be:7a:8c:f3:28:f4:4d:5d:e5:fe:
8d:aa:1f:2f:9b:fd:ef:e0:75:51:3c:b1:c6:35:43:5c:2a:d5:
65:0e:fa:52:11:ef:20:b7:f5:62:a4:97:d0:c2:86:4e:8c:3c:
71:54:63:b8:6d:2a:44:f6:58:f8:a4:54:ec:4a:bf:db:2d:90:
07:e5:8f:c2:ee:49:f0:aa:4c:e6:92:84:aa:43:e5:28:9e:d7:
f5:79:59:ad:8c:a1:c5:ad:e1:3a:a7:15:59:99:90:5b:31:9a:
87:65:d5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:58:13 2026 by rpki-client