Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
File: AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft (raw, json)
Hash identifier: aMwU4CurhpEuwRu+uACIGHro1B9146lg5sJwBqByc+M=
Subject key identifier: B1:13:3C:3D:5F:18:1E:C4:F3:30:C9:D0:5A:4A:0A:77:EE:AB:C8:9B
Authority key identifier: 01:7C:90:65:46:53:AC:15:00:28:56:2B:32:43:14:91:B5:21:47:D1
Certificate issuer: /CN=017c90654653ac150028562b32431491b52147d1
Certificate serial: 01A001A5C128CA56D85DB555949DBABF1807
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
Manifest number: 11E0
Signing time: Fri 14 Aug 2026 19:00:35 +0000
Manifest this update: Fri 14 Aug 2026 19:00:35 +0000
Manifest next update: Sat 15 Aug 2026 19:00:35 +0000
Files and hashes: 1: AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl (hash: oHAI78Y7yxbKuiUtLOZFTXx5eHr9lEZ4wISja7b5j4E=)
2: Bi1XXzWo6lnTEVYADTXqjFg4Phs.roa (hash: CcN3AAar9jL+JjbAjisL+jzrcTOAzrlyvwRjw6mb2gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a5:c1:28:ca:56:d8:5d:b5:55:94:9d:ba:bf:18:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=017c90654653ac150028562b32431491b52147d1
Validity
Not Before: Aug 14 19:00:35 2026 GMT
Not After : Aug 15 19:00:35 2026 GMT
Subject: CN=b1133c3d5f181ec4f330c9d05a4a0a77eeabc89b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:18:85:d2:71:43:55:00:45:43:6c:34:f3:85:
ea:ec:b7:f8:b8:2e:bc:bd:55:5f:bd:7b:f2:55:a1:
45:51:71:2d:85:a3:8f:df:a7:9f:fd:af:44:86:fa:
36:da:85:86:ee:b8:49:ea:af:c4:6b:cb:20:cc:6f:
e4:7c:d2:55:12:06:b9:ef:da:59:29:9c:c2:c5:a7:
23:09:36:6c:d3:ad:c5:1b:68:55:01:1d:a0:3c:16:
46:89:ee:1c:6a:81:db:83:85:cc:6c:ee:36:61:29:
e6:8d:e6:a8:61:79:10:26:cb:45:51:e4:9d:e3:45:
5f:b6:39:19:ef:50:88:59:27:8e:20:92:14:fd:dc:
6b:38:b2:0d:69:eb:7c:7e:ac:f9:7d:e3:79:a8:fd:
fc:05:f4:36:31:4c:05:62:c1:5c:a1:5f:89:67:ed:
2e:76:11:06:be:1d:a1:b4:e1:55:67:9e:cc:58:6a:
27:c3:87:3e:00:8c:d9:66:80:67:ab:85:71:ed:4d:
f6:fe:f6:b7:af:a1:45:f7:db:89:e1:75:d9:fa:8b:
4d:86:0b:eb:f2:d9:28:f3:28:d0:3f:f7:71:c2:7f:
56:c5:cf:9d:72:df:94:af:7a:87:0d:f8:7b:98:f9:
4b:8d:e1:41:77:bf:e5:5b:f0:2c:88:a2:e4:94:ce:
cc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:13:3C:3D:5F:18:1E:C4:F3:30:C9:D0:5A:4A:0A:77:EE:AB:C8:9B
X509v3 Authority Key Identifier:
keyid:01:7C:90:65:46:53:AC:15:00:28:56:2B:32:43:14:91:B5:21:47:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:1d:89:59:d4:9e:47:99:50:5d:19:3e:09:09:63:5a:c1:8b:
f0:16:f5:86:c2:04:8f:64:ba:e1:a6:24:ee:89:10:a1:4c:15:
0d:9b:fc:4a:c2:9e:47:2f:90:2d:a1:ce:88:c4:d5:9c:81:cd:
aa:6d:60:fa:82:e3:a1:43:33:51:e6:85:82:9e:34:3a:02:c5:
00:9b:1a:6c:c3:85:c1:46:47:51:23:a2:e5:57:15:51:f6:bd:
86:ec:2f:54:23:a2:b4:ae:33:17:ea:86:f1:4f:c2:fb:e7:e1:
34:26:6b:3e:d7:4e:60:92:bb:f5:3e:ec:a3:06:e0:7b:ff:97:
53:e8:e8:2c:52:a7:bf:20:f1:69:4f:48:18:c2:e6:90:10:06:
64:e6:c7:6f:65:d2:b2:a8:8a:41:e7:0d:ac:f5:c1:21:fc:9a:
b9:35:74:c0:70:44:63:4b:c1:25:00:af:5e:3a:42:cf:7e:c2:
1d:cf:30:b9:73:bd:97:51:a8:5c:a9:47:43:c1:f8:bc:61:9a:
30:97:d1:12:c2:8a:c3:b4:2d:e3:b8:5a:9e:a0:f5:20:3f:58:
c5:2a:4f:17:90:af:b1:2a:85:c3:60:01:1d:8f:1d:c4:e7:1b:
25:86:ef:a1:ff:21:d8:7c:7c:91:a4:c4:43:f4:ef:e7:72:18:
66:53:8c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:15 2026 by rpki-client