Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
File: AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft (raw, json)
Hash identifier: 5iRwrpiblXmVHTEKOmoBpPrPP5Ki47z34bhRPeX3V9A=
Subject key identifier: 1F:41:2E:B8:F6:E8:4D:9F:C1:BC:DE:55:E6:9A:EC:72:D4:90:33:B6
Authority key identifier: 01:72:35:06:71:8D:FC:F2:A8:BD:17:6D:4E:A2:4E:27:53:22:FC:FB
Certificate issuer: /CN=01723506718dfcf2a8bd176d4ea24e275322fcfb
Certificate serial: 019FA0DFA5542FEB4500E38F946638C86D2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
Manifest number: 19D1
Signing time: Mon 27 Jul 2026 00:00:39 +0000
Manifest this update: Mon 27 Jul 2026 00:00:39 +0000
Manifest next update: Tue 28 Jul 2026 00:00:39 +0000
Files and hashes: 1: AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl (hash: J23uWDo4MHITeulROdcYwdk0QfLH+S6j06VxZA9VAyA=)
2: EK4O0xHWKJmmPQygRY3dmzgeTsI.roa (hash: m1XR1i5Us8oblIUOIQzSE1h5zvdVSIn8gW8k8tGSpec=)
3: Ql95-IGW0X06XmkQjeBmRl8NR5M.roa (hash: U0YHtEFSJr7CqFsN6UUpHO3sj4tjBDK3Qns3+4dEtP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:df:a5:54:2f:eb:45:00:e3:8f:94:66:38:c8:6d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01723506718dfcf2a8bd176d4ea24e275322fcfb
Validity
Not Before: Jul 27 00:00:39 2026 GMT
Not After : Jul 28 00:00:39 2026 GMT
Subject: CN=1f412eb8f6e84d9fc1bcde55e69aec72d49033b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ed:27:5d:1d:22:f5:ba:3d:a7:97:4a:16:ff:
c9:37:44:be:ca:4d:6c:3d:91:97:a7:d2:90:1d:d9:
90:6f:f9:18:d5:1a:f8:cc:18:11:26:0c:2b:67:9a:
85:46:e4:d5:e2:b0:5f:5a:0f:0b:68:20:6d:52:5b:
3f:40:ad:ba:d8:d9:63:03:e6:8a:89:93:f3:62:f1:
8e:bd:09:64:ec:f0:19:04:e5:e1:d5:85:d0:60:0b:
19:1b:c8:e7:9f:f5:a3:cc:3e:cc:50:90:75:cc:d4:
a8:43:6a:b4:39:4d:7e:d1:97:b4:a0:44:40:ca:ed:
08:81:1c:74:57:3a:d7:ea:47:13:2c:3f:de:7c:50:
e9:6a:fd:df:71:f3:9c:e8:40:82:aa:d3:dd:fd:da:
a0:ad:45:a8:28:b4:36:55:8d:a0:75:d0:96:8e:bb:
ff:8f:70:a3:de:8e:89:13:be:50:1f:14:75:a2:35:
f9:6a:ec:fb:7f:4b:d8:30:b5:4f:ab:e8:78:d1:19:
57:a6:3f:64:0f:2c:f0:b5:42:c1:93:b8:06:a6:ea:
46:c0:5c:8a:44:b1:92:fb:fc:f0:78:6b:78:1a:67:
85:10:91:e5:d6:f5:db:53:58:b1:da:db:27:90:f8:
0c:0a:b5:32:38:00:ee:32:e2:cb:6e:ff:13:5d:be:
35:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:41:2E:B8:F6:E8:4D:9F:C1:BC:DE:55:E6:9A:EC:72:D4:90:33:B6
X509v3 Authority Key Identifier:
keyid:01:72:35:06:71:8D:FC:F2:A8:BD:17:6D:4E:A2:4E:27:53:22:FC:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:35:d4:91:68:2f:af:b9:f0:50:bb:e4:bb:8c:3f:98:94:9f:
43:ef:55:20:a4:8e:32:00:9a:b3:3e:41:00:d8:de:ec:a0:28:
7d:b1:7c:d1:b8:d7:c3:45:cc:ea:39:a9:9b:30:aa:75:35:97:
d3:92:e2:a7:ca:10:d0:2a:b1:44:e2:8b:f7:b4:0b:94:cf:84:
d6:7a:ed:ea:ef:cd:1e:26:e7:99:b4:fb:be:12:f4:d5:36:b9:
a2:0e:94:37:83:e5:96:4b:fc:1a:04:19:ed:4b:f5:fb:e8:de:
6a:2a:4a:6c:8a:ea:1a:9c:74:fe:73:73:64:34:8c:d7:5b:69:
32:49:8a:1a:ea:8c:de:21:b3:94:59:67:6b:3a:ab:0f:86:65:
39:0a:87:01:1e:35:e2:b3:ec:46:15:63:4b:a3:bc:fb:15:f2:
f3:00:65:16:11:d8:3d:f0:dc:c0:63:3b:d6:2e:b7:6d:e9:14:
77:75:c3:be:fe:94:43:70:17:79:f9:fa:5f:24:87:20:0f:35:
d8:12:4e:3f:11:38:bb:c7:54:85:5d:31:ef:dc:e8:21:2a:0a:
49:64:a7:1e:94:2f:9d:64:43:3e:ca:9c:fe:88:77:73:d7:5f:
6c:e5:c7:d4:4d:19:14:38:b0:41:05:e2:d1:29:03:ed:6d:b2:
86:57:13:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:30:14 2026 by rpki-client