Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/5ce86e-27d2-48c2-88b5-f181b6e80a62/1/2axioKJWftFz3CqtN25FXIW8trs.mft
File: 2axioKJWftFz3CqtN25FXIW8trs.mft (raw, json)
Hash identifier: sJ+5dPvP4uw4rzDDgTSU6QwT4bqJGMS/KjNss6X6v4E=
Subject key identifier: 95:1E:9B:22:C1:5E:19:76:EE:CA:88:75:A4:09:4B:58:A9:F4:EC:EB
Authority key identifier: D9:AC:62:A0:A2:56:7E:D1:73:DC:2A:AD:37:6E:45:5C:85:BC:B6:BB
Certificate issuer: /CN=d9ac62a0a2567ed173dc2aad376e455c85bcb6bb
Certificate serial: 01A0010146B3C572836F7D11205F0D4978B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2axioKJWftFz3CqtN25FXIW8trs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/5ce86e-27d2-48c2-88b5-f181b6e80a62/1/2axioKJWftFz3CqtN25FXIW8trs.mft
Manifest number: 19FC
Signing time: Fri 14 Aug 2026 16:00:55 +0000
Manifest this update: Fri 14 Aug 2026 16:00:55 +0000
Manifest next update: Sat 15 Aug 2026 16:00:55 +0000
Files and hashes: 1: 2axioKJWftFz3CqtN25FXIW8trs.crl (hash: G20TfznTlKygyRw/6i8YHPnHpiw6ZdKmIVgL6huWoOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/5ce86e-27d2-48c2-88b5-f181b6e80a62/1/2axioKJWftFz3CqtN25FXIW8trs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/5ce86e-27d2-48c2-88b5-f181b6e80a62/1/2axioKJWftFz3CqtN25FXIW8trs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2axioKJWftFz3CqtN25FXIW8trs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:46:b3:c5:72:83:6f:7d:11:20:5f:0d:49:78:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ac62a0a2567ed173dc2aad376e455c85bcb6bb
Validity
Not Before: Aug 14 16:00:55 2026 GMT
Not After : Aug 15 16:00:55 2026 GMT
Subject: CN=951e9b22c15e1976eeca8875a4094b58a9f4eceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ec:a8:48:f3:85:91:b9:ff:3e:dd:20:e5:14:
3e:33:09:c2:65:ef:4e:e2:20:62:b7:1c:30:db:31:
7d:cc:3d:83:72:ac:54:99:a4:ae:be:5e:97:56:fd:
c0:a6:da:b0:69:b4:d6:5b:38:ac:08:37:0e:7b:75:
8e:d7:e3:16:be:2d:28:d5:30:e8:bf:3e:50:1d:25:
0f:70:b9:9f:ae:d7:d6:dd:40:39:47:30:ba:87:8a:
0c:88:36:39:90:6b:02:ee:73:12:50:e9:50:7d:85:
e4:b1:95:2e:f6:63:3d:25:11:60:ec:c9:6f:9a:57:
42:89:8e:44:b2:94:e4:b6:1e:04:e5:60:6b:45:66:
02:da:94:f7:21:f3:14:19:40:8f:00:17:2e:a2:4c:
c0:3f:8d:a9:09:a0:50:6e:5e:19:87:1b:61:12:42:
f7:6a:cf:12:0b:c2:9e:c2:52:bc:d3:96:30:c5:3d:
f4:aa:95:71:75:7d:f0:86:98:78:12:4c:91:fb:14:
71:46:5d:34:27:c9:a9:0f:0f:d8:e2:9e:e6:29:12:
79:d7:e6:00:ae:9b:b3:f3:3b:7b:24:35:3c:de:31:
ae:0b:97:9a:b8:06:76:3e:7b:87:3c:d6:9c:75:c2:
a6:d7:c1:8d:e5:16:11:d2:92:46:81:02:e0:6c:ed:
6f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:1E:9B:22:C1:5E:19:76:EE:CA:88:75:A4:09:4B:58:A9:F4:EC:EB
X509v3 Authority Key Identifier:
keyid:D9:AC:62:A0:A2:56:7E:D1:73:DC:2A:AD:37:6E:45:5C:85:BC:B6:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2axioKJWftFz3CqtN25FXIW8trs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5ce86e-27d2-48c2-88b5-f181b6e80a62/1/2axioKJWftFz3CqtN25FXIW8trs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5ce86e-27d2-48c2-88b5-f181b6e80a62/1/2axioKJWftFz3CqtN25FXIW8trs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:04:d6:9c:ab:a5:24:64:3f:3c:b1:69:c7:c9:af:2b:e6:f9:
d6:90:72:02:3b:54:d4:ae:9b:89:85:6e:7b:99:6f:2b:2a:7f:
70:f3:ba:55:89:29:f1:01:84:47:64:28:dd:72:02:55:b4:cc:
17:0d:cc:76:0e:2d:18:a8:5b:fd:af:b0:82:3e:62:be:1a:0a:
07:5e:e7:0e:7e:b5:4f:98:fb:f2:18:9c:a3:d6:30:47:29:5b:
16:a2:08:30:1f:7e:13:29:cd:64:fc:be:fa:f6:45:57:87:63:
b7:03:58:55:56:18:c4:37:15:27:79:e9:ca:0c:9c:da:72:2b:
97:e3:79:0a:30:af:bd:fa:de:62:d7:ca:c7:7d:7c:7b:5e:9c:
d5:77:8b:29:a4:c8:f0:a8:a6:94:2d:08:b4:64:b1:7f:1a:6f:
bb:c9:1f:e5:75:6f:28:f9:17:b8:a0:1a:7f:76:99:71:84:79:
81:a1:a7:e4:35:85:c4:4a:ac:60:7e:37:12:28:af:43:71:ed:
3f:70:16:fe:47:e5:12:d8:90:a0:15:a9:ec:92:76:4f:5d:03:
58:c4:50:f4:f0:47:95:32:8f:21:ee:16:fd:43:9b:d4:f9:73:
ec:bd:a0:3d:8f:2c:62:e5:a8:a0:4d:36:a8:ce:bc:2e:e7:6c:
9c:f1:6b:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABAUazxXKDb30RIF8NSXiyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5YWM2MmEwYTI1NjdlZDE3M2RjMmFhZDM3NmU0NTVjODVi
Y2I2YmIwHhcNMjYwODE0MTYwMDU1WhcNMjYwODE1MTYwMDU1WjAzMTEwLwYDVQQD
Eyg5NTFlOWIyMmMxNWUxOTc2ZWVjYTg4NzVhNDA5NGI1OGE5ZjRlY2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuyoSPOFkbn/Pt0g5RQ+MwnCZe9O
4iBitxww2zF9zD2DcqxUmaSuvl6XVv3AptqwabTWWzisCDcOe3WO1+MWvi0o1TDo
vz5QHSUPcLmfrtfW3UA5RzC6h4oMiDY5kGsC7nMSUOlQfYXksZUu9mM9JRFg7Mlv
mldCiY5EspTkth4E5WBrRWYC2pT3IfMUGUCPABcuokzAP42pCaBQbl4ZhxthEkL3
as8SC8KewlK805YwxT30qpVxdX3whph4EkyR+xRxRl00J8mpDw/Y4p7mKRJ51+YA
rpuz8zt7JDU83jGuC5eauAZ2PnuHPNacdcKm18GN5RYR0pJGgQLgbO1vrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJUemyLBXhl27sqIdaQJS1ip9OzrMB8GA1UdIwQY
MBaAFNmsYqCiVn7Rc9wqrTduRVyFvLa7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmF4aW9LSldmdEZ6M0NxdE4yNUZYSVc4dHJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81Y2U4NmUtMjdkMi00OGMyLTg4YjUt
ZjE4MWI2ZTgwYTYyLzEvMmF4aW9LSldmdEZ6M0NxdE4yNUZYSVc4dHJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi81Y2U4NmUtMjdkMi00OGMyLTg4YjUtZjE4MWI2ZTgwYTYy
LzEvMmF4aW9LSldmdEZ6M0NxdE4yNUZYSVc4dHJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABwTWnKul
JGQ/PLFpx8mvK+b51pByAjtU1K6biYVue5lvKyp/cPO6VYkp8QGER2Qo3XICVbTM
Fw3Mdg4tGKhb/a+wgj5ivhoKB17nDn61T5j78hico9YwRylbFqIIMB9+EynNZPy+
+vZFV4djtwNYVVYYxDcVJ3npygyc2nIrl+N5CjCvvfreYtfKx318e16c1XeLKaTI
8KimlC0ItGSxfxpvu8kf5XVvKPkXuKAaf3aZcYR5gaGn5DWFxEqsYH43EiivQ3Ht
P3AW/kflEtiQoBWp7JJ2T10DWMRQ9PBHlTKPIe4W/UOb1Plz7L2gPY8sYuWooE02
qM68LudsnPFr8Q==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:22:31 2026 by rpki-client