Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
File: AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft (raw, json)
Hash identifier: EyTigTy2tLtEjO5AQQIET4GM9D1qGIiGjDBm04RolmY=
Subject key identifier: DA:61:2C:D3:63:72:AD:8A:A5:7B:A8:E3:4E:4E:B5:AF:A4:DC:3B:1B
Authority key identifier: 01:72:35:06:71:8D:FC:F2:A8:BD:17:6D:4E:A2:4E:27:53:22:FC:FB
Certificate issuer: /CN=01723506718dfcf2a8bd176d4ea24e275322fcfb
Certificate serial: 01A17A03FF7282DDC9F446BB679CFD28CE47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
Manifest number: 1AC6
Signing time: Mon 26 Oct 2026 21:00:44 +0000
Manifest this update: Mon 26 Oct 2026 21:00:44 +0000
Manifest next update: Tue 27 Oct 2026 21:00:44 +0000
Files and hashes: 1: AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl (hash: YMmY1IV8Rp+GuZkWZ+XuDgYRpeldjTIhUBQFwgzNO4k=)
2: EK4O0xHWKJmmPQygRY3dmzgeTsI.roa (hash: m1XR1i5Us8oblIUOIQzSE1h5zvdVSIn8gW8k8tGSpec=)
3: Ql95-IGW0X06XmkQjeBmRl8NR5M.roa (hash: U0YHtEFSJr7CqFsN6UUpHO3sj4tjBDK3Qns3+4dEtP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:03:ff:72:82:dd:c9:f4:46:bb:67:9c:fd:28:ce:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01723506718dfcf2a8bd176d4ea24e275322fcfb
Validity
Not Before: Oct 26 21:00:44 2026 GMT
Not After : Oct 27 21:00:44 2026 GMT
Subject: CN=da612cd36372ad8aa57ba8e34e4eb5afa4dc3b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:73:bb:40:03:e3:dc:cf:1d:10:7a:5b:dd:0b:
18:4a:17:bf:36:cb:5b:ae:4b:72:be:0b:0b:c3:46:
04:8e:a5:54:46:bd:6a:49:7e:a8:92:d7:fe:16:00:
45:10:e1:6f:af:98:79:ff:11:1d:a3:bd:ac:03:61:
fd:1c:c5:3c:31:0c:86:9d:c7:25:50:59:80:45:95:
28:36:eb:2f:ea:ab:23:12:d6:55:be:30:44:5b:66:
09:76:d7:2c:5d:11:4d:91:4a:57:9d:d6:ea:0c:07:
c7:a5:6d:8d:bf:b1:eb:de:8c:51:cf:ce:e1:fe:c6:
fb:eb:8c:5c:54:25:5c:3d:95:fe:b4:e3:46:88:c6:
44:1c:ba:2d:17:5d:fe:3d:88:67:d3:35:6d:21:3b:
da:52:b9:2f:e4:fb:29:93:29:3f:e8:1b:c2:76:99:
42:7e:59:0c:ba:5a:24:46:19:e6:2d:c3:46:bf:01:
88:20:5d:7e:32:b2:7f:95:23:5b:7a:4f:57:70:44:
db:07:d3:be:2c:ed:0c:6f:fe:f9:df:55:45:a3:a1:
67:a6:84:10:ac:4b:90:0c:15:17:fa:82:27:d1:91:
09:30:8d:8c:90:d3:81:57:12:9f:cf:de:4c:bf:c3:
b8:d3:b9:b3:72:ca:28:c3:e7:df:38:cf:2e:4c:f6:
01:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:61:2C:D3:63:72:AD:8A:A5:7B:A8:E3:4E:4E:B5:AF:A4:DC:3B:1B
X509v3 Authority Key Identifier:
keyid:01:72:35:06:71:8D:FC:F2:A8:BD:17:6D:4E:A2:4E:27:53:22:FC:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:70:b6:60:d1:ab:aa:a4:38:3d:a9:15:d5:11:cb:9d:de:09:
93:bd:61:2c:f9:64:10:c7:ab:d0:ca:85:b2:d1:27:d3:9f:0b:
0e:25:61:a4:ae:4d:bd:ee:bc:a9:ed:e0:52:41:34:3e:dc:5d:
30:c6:d3:de:b3:0e:65:84:88:8c:41:ed:be:dc:c1:b3:05:5a:
b5:48:d1:30:a9:27:57:2e:5d:17:cd:26:50:cd:b0:8d:52:94:
e7:14:fb:a6:e0:83:e2:af:ca:47:94:b7:50:d9:9f:41:ec:76:
1b:f2:d4:c0:86:ae:73:bf:b1:9c:68:2c:b9:7c:0c:e0:bf:42:
e8:2e:ce:51:49:8c:6c:cf:82:e2:37:d7:1a:c5:18:3a:2f:a5:
3e:05:ce:8c:ab:6a:93:f6:aa:2f:0f:78:4c:72:91:43:85:31:
10:06:fd:83:da:ce:2c:2e:d3:d6:62:68:3a:da:d3:53:55:e1:
2f:2e:55:60:34:65:d3:bd:1a:a4:f7:95:fd:72:c7:aa:34:e1:
f7:5a:cd:da:1a:b1:d9:a6:4b:c3:73:45:98:51:96:aa:5b:6d:
3f:99:c4:ad:01:60:8a:60:18:09:09:5d:84:67:85:e7:ff:a8:
cf:be:57:40:49:e5:6d:ab:8d:74:03:74:5b:22:ea:d3:ec:cf:
0b:a8:3e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 07:13:01 2026 by rpki-client