Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/5ce86e-27d2-48c2-88b5-f181b6e80a62/1/2axioKJWftFz3CqtN25FXIW8trs.mft
File: 2axioKJWftFz3CqtN25FXIW8trs.mft (raw, json)
Hash identifier: xuukFpZsetvPs13nmzi5FtC0OAwJNWHmzxI66RDgWPA=
Subject key identifier: 27:0C:F1:06:55:D8:3B:2B:8E:F7:E3:69:03:25:0F:8C:83:E8:B9:43
Authority key identifier: D9:AC:62:A0:A2:56:7E:D1:73:DC:2A:AD:37:6E:45:5C:85:BC:B6:BB
Certificate issuer: /CN=d9ac62a0a2567ed173dc2aad376e455c85bcb6bb
Certificate serial: 01A141953C55D584651EC42247A59CDFD822
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2axioKJWftFz3CqtN25FXIW8trs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/5ce86e-27d2-48c2-88b5-f181b6e80a62/1/2axioKJWftFz3CqtN25FXIW8trs.mft
Manifest number: 1AA2
Signing time: Thu 15 Oct 2026 22:01:01 +0000
Manifest this update: Thu 15 Oct 2026 22:01:01 +0000
Manifest next update: Fri 16 Oct 2026 22:01:01 +0000
Files and hashes: 1: 2axioKJWftFz3CqtN25FXIW8trs.crl (hash: Mq4j3US0+44eXa9iqbwTE4L2go87otwPNxacXshTqXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/5ce86e-27d2-48c2-88b5-f181b6e80a62/1/2axioKJWftFz3CqtN25FXIW8trs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/5ce86e-27d2-48c2-88b5-f181b6e80a62/1/2axioKJWftFz3CqtN25FXIW8trs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2axioKJWftFz3CqtN25FXIW8trs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:41:95:3c:55:d5:84:65:1e:c4:22:47:a5:9c:df:d8:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ac62a0a2567ed173dc2aad376e455c85bcb6bb
Validity
Not Before: Oct 15 22:01:01 2026 GMT
Not After : Oct 16 22:01:01 2026 GMT
Subject: CN=270cf10655d83b2b8ef7e36903250f8c83e8b943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9b:88:de:fd:af:7d:b7:55:5d:5f:d8:26:6b:
87:03:f1:8c:52:f5:a0:1f:85:3e:69:a1:c3:20:4f:
c0:8b:49:ba:4d:f5:51:b7:0b:b2:60:2b:9f:08:4c:
df:cc:bd:28:d7:37:ec:ac:24:cb:a9:95:ef:0f:f8:
d8:80:7e:28:47:7e:45:2a:79:7e:73:40:29:85:65:
fa:20:3c:5e:bd:5f:c0:9e:d7:a1:21:f7:1a:2f:88:
27:48:5c:67:ca:c4:89:79:94:15:96:b8:95:c9:92:
22:e4:5c:8b:4d:b1:8d:1f:6d:79:70:1f:73:df:fc:
8a:53:64:a6:b8:50:86:47:aa:4f:54:f0:9f:87:20:
f8:10:2f:b3:40:cd:c6:15:9c:b9:3c:d9:3e:86:93:
48:a4:4a:28:4a:87:2c:8b:2e:ee:43:3f:33:e7:e7:
7a:89:fd:8b:a5:3c:86:80:2d:8d:ac:6b:6a:41:f2:
86:bd:e6:7e:1a:ac:3f:9a:3d:7f:19:ae:4c:b8:9d:
92:3e:50:51:a8:de:9c:9d:29:cd:1c:a8:27:eb:a1:
9f:0c:94:eb:4e:43:0e:5c:4e:7f:6a:a7:f6:a5:16:
87:e0:77:49:e8:ad:df:95:bf:d3:09:67:c0:cd:e1:
3c:a7:9b:56:9e:0c:06:a1:d2:ba:38:84:5d:8d:17:
43:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:0C:F1:06:55:D8:3B:2B:8E:F7:E3:69:03:25:0F:8C:83:E8:B9:43
X509v3 Authority Key Identifier:
keyid:D9:AC:62:A0:A2:56:7E:D1:73:DC:2A:AD:37:6E:45:5C:85:BC:B6:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2axioKJWftFz3CqtN25FXIW8trs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5ce86e-27d2-48c2-88b5-f181b6e80a62/1/2axioKJWftFz3CqtN25FXIW8trs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5ce86e-27d2-48c2-88b5-f181b6e80a62/1/2axioKJWftFz3CqtN25FXIW8trs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:f3:0c:be:27:1e:59:ef:f1:16:5f:55:d0:6e:7c:61:6d:7f:
97:52:57:b3:e6:46:50:2f:1d:ce:5c:5d:c7:ab:1a:bf:ad:8d:
16:06:b3:24:5d:7d:a4:eb:34:63:bb:fd:cf:59:3a:44:03:ff:
08:21:6c:3b:3b:db:d5:e0:75:53:a4:22:9c:9b:04:20:b7:97:
92:87:d1:94:f9:bc:f6:38:6a:fc:50:67:37:b0:62:53:a5:18:
47:a2:d9:ce:d0:ba:f0:f7:2e:97:56:31:be:f4:0f:f8:50:b6:
f9:b9:1a:b9:36:77:a3:c8:d0:52:39:5e:95:18:35:85:70:a6:
a4:4b:a4:23:89:a5:6d:82:56:e9:a9:ce:ab:5d:ba:4a:89:b4:
0e:97:5a:5f:0e:07:48:6e:c3:b8:e7:e0:5d:14:80:2f:89:22:
ff:07:60:f6:63:76:91:05:25:2c:58:9c:74:9a:95:47:55:e7:
f1:83:83:97:d4:f3:70:0b:c4:06:e6:4a:c5:f1:7d:93:0c:83:
48:b6:9d:6e:dc:61:a8:de:f0:50:5a:a3:1f:51:37:fa:89:01:
c6:04:96:4d:c7:ce:a9:1c:93:30:1c:c6:7f:6b:84:d3:c3:2b:
5d:db:3f:52:1a:08:5c:11:aa:f5:44:6b:e9:0f:99:30:7d:69:
a3:d5:a7:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 04:02:18 2026 by rpki-client