Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
File: AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft (raw, json)
Hash identifier: +wbBQDFuxIqF0hTcKDgoifl22xNmBblDzf2mHlySK90=
Subject key identifier: F5:30:CC:65:03:BA:6F:2E:0D:94:95:77:23:C6:30:52:82:9B:54:FA
Authority key identifier: 01:7C:90:65:46:53:AC:15:00:28:56:2B:32:43:14:91:B5:21:47:D1
Certificate issuer: /CN=017c90654653ac150028562b32431491b52147d1
Certificate serial: 01A13C6E78F03E3341E712D8979B21D70731
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
Manifest number: 1283
Signing time: Wed 14 Oct 2026 22:00:35 +0000
Manifest this update: Wed 14 Oct 2026 22:00:35 +0000
Manifest next update: Thu 15 Oct 2026 22:00:35 +0000
Files and hashes: 1: AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl (hash: ylQk5iULktZ+XUP6ig+FtfWV8HaTIWkRIlN4h7QMSgg=)
2: Bi1XXzWo6lnTEVYADTXqjFg4Phs.roa (hash: CcN3AAar9jL+JjbAjisL+jzrcTOAzrlyvwRjw6mb2gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 22:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:6e:78:f0:3e:33:41:e7:12:d8:97:9b:21:d7:07:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=017c90654653ac150028562b32431491b52147d1
Validity
Not Before: Oct 14 22:00:35 2026 GMT
Not After : Oct 15 22:00:35 2026 GMT
Subject: CN=f530cc6503ba6f2e0d94957723c63052829b54fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4f:92:b6:7f:30:4e:87:5d:1c:8e:29:9e:ba:
32:77:fe:f1:38:e5:28:80:54:ad:7c:ac:68:e0:09:
8c:81:64:4b:b1:b8:22:29:2e:eb:9d:1f:c9:90:4f:
9d:f0:3c:4e:3d:6f:9d:83:94:55:6d:57:23:47:90:
60:79:15:34:ca:11:ff:cb:25:3d:4a:32:e6:40:11:
90:9f:ec:fb:8e:8a:a8:5b:10:18:e1:f3:ee:db:70:
e3:22:93:3e:3b:3e:41:5f:b5:6f:ad:cb:49:b5:3c:
72:64:55:1a:b7:67:65:7d:d3:e5:f9:00:44:a3:e7:
73:d7:30:b5:11:95:ba:ba:16:52:e6:ac:9b:d6:89:
65:ec:1f:5e:af:02:94:39:16:ef:88:2d:2e:ed:7d:
81:03:8d:1a:76:b3:f2:be:25:06:61:dc:d9:d0:76:
b6:6c:11:34:cb:cc:da:22:d4:4c:14:b5:78:a0:e1:
fa:85:9b:61:9d:87:77:15:22:14:2b:dc:df:52:bc:
79:e1:a9:0a:b9:4f:08:39:58:09:6e:21:5d:2f:05:
4d:78:34:dc:1a:0b:00:ba:ad:bf:39:e7:d6:f6:8d:
d7:c6:6b:b9:b1:ba:cb:12:aa:75:a3:df:5b:4c:75:
66:ff:75:2b:52:e2:8c:98:82:5b:b3:cd:40:77:0e:
8b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:30:CC:65:03:BA:6F:2E:0D:94:95:77:23:C6:30:52:82:9B:54:FA
X509v3 Authority Key Identifier:
keyid:01:7C:90:65:46:53:AC:15:00:28:56:2B:32:43:14:91:B5:21:47:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:43:5e:6b:03:a9:04:b5:12:00:25:9c:35:42:2d:c5:bc:32:
dd:35:62:0a:cc:ef:66:7f:bf:b4:db:24:bb:60:0e:be:53:19:
ef:a7:5f:60:d9:68:2a:97:ab:17:03:fd:ea:a1:2b:a4:ea:6b:
92:3a:0e:3f:01:cf:a4:e6:e2:f3:48:ea:1a:c9:69:eb:11:c1:
c3:a4:87:38:9c:29:c3:cb:77:c1:d4:e0:cb:af:a6:6e:35:cd:
c0:46:55:ee:0f:25:86:32:25:84:fd:df:73:f1:ab:0d:a5:de:
f3:66:9b:1c:e8:e4:75:5b:8c:05:31:52:f3:7f:f5:81:8c:46:
95:21:f0:c9:62:8c:f7:48:6a:f4:d0:db:c9:4e:f3:ee:e7:88:
2d:90:26:b6:c8:2d:dc:40:c8:26:a3:a7:27:99:04:cc:f9:58:
ac:a2:30:6b:c4:00:a5:7a:7f:b6:fd:3d:fd:57:98:fe:65:4b:
93:3e:5e:64:cf:dc:0b:d7:ed:0c:c0:27:78:4e:76:99:ca:6f:
54:fc:85:8a:c3:26:93:62:aa:a2:b7:69:45:fa:5e:16:c8:17:
9c:b4:05:42:a5:ce:c9:0b:41:73:3d:0a:08:8b:2e:de:05:c3:
6a:26:2a:94:df:72:25:c9:6b:ff:8f:28:d5:f5:b6:16:70:58:
94:54:38:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:33:47 2026 by rpki-client