Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
File: AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft (raw, json)
Hash identifier: qosATrNIZCJq0FjoJTrloO5HzeIezK9Gu6HIumACaes=
Subject key identifier: 93:D5:59:96:DD:54:06:E8:EA:2A:84:A5:B5:6C:0E:14:EE:1B:62:D1
Authority key identifier: 01:72:35:06:71:8D:FC:F2:A8:BD:17:6D:4E:A2:4E:27:53:22:FC:FB
Certificate issuer: /CN=01723506718dfcf2a8bd176d4ea24e275322fcfb
Certificate serial: 01A08A8C89BF0ADC05D4EF166859BDD79AFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
Manifest number: 1A4A
Signing time: Thu 10 Sep 2026 09:01:01 +0000
Manifest this update: Thu 10 Sep 2026 09:01:01 +0000
Manifest next update: Fri 11 Sep 2026 09:01:01 +0000
Files and hashes: 1: AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl (hash: TlEVHOrkDuaNWI1ev2nq5Kg2Tc/WV1KkfeASvEACG6Y=)
2: EK4O0xHWKJmmPQygRY3dmzgeTsI.roa (hash: m1XR1i5Us8oblIUOIQzSE1h5zvdVSIn8gW8k8tGSpec=)
3: Ql95-IGW0X06XmkQjeBmRl8NR5M.roa (hash: U0YHtEFSJr7CqFsN6UUpHO3sj4tjBDK3Qns3+4dEtP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:89:bf:0a:dc:05:d4:ef:16:68:59:bd:d7:9a:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01723506718dfcf2a8bd176d4ea24e275322fcfb
Validity
Not Before: Sep 10 09:01:01 2026 GMT
Not After : Sep 11 09:01:01 2026 GMT
Subject: CN=93d55996dd5406e8ea2a84a5b56c0e14ee1b62d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a9:d4:2e:09:f5:71:42:69:a4:33:dd:96:53:
19:d2:7d:0e:d5:7d:14:77:08:01:fd:2f:89:ad:05:
2a:c5:90:c3:a2:34:40:4c:f6:36:10:b8:d4:a2:ea:
58:a5:d0:a5:52:09:43:5f:24:2e:ae:25:4c:89:40:
d2:aa:70:86:56:81:2f:e7:da:aa:29:f2:35:a4:04:
46:d2:17:06:3c:20:4e:2a:ed:37:e5:ca:1f:da:84:
20:84:30:1e:1d:ba:40:a7:ae:a2:41:fd:bd:b8:ad:
48:87:03:d2:b7:76:44:b8:44:bb:2e:0d:02:5c:09:
df:3f:5c:65:e8:56:e5:fa:be:91:c2:32:1a:79:81:
57:4a:93:0e:22:bf:d1:34:f3:55:fa:a0:7c:b9:5c:
dd:9d:17:c8:92:73:d1:fe:36:81:d4:0d:30:16:fb:
79:60:25:1f:2a:e2:69:c5:d6:9a:60:d3:66:ea:a3:
26:f6:4b:c6:cd:35:0c:d4:dd:30:65:af:7c:42:24:
af:da:dc:0d:f4:69:de:5b:ac:77:8d:c3:03:57:0d:
5f:f7:53:6a:d2:09:ae:01:f8:96:a3:be:d2:e7:df:
d0:df:f5:b6:32:e1:28:79:2f:da:9b:7f:c0:07:f4:
9d:1f:6e:71:54:07:e3:68:6c:60:3a:8c:db:04:75:
25:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D5:59:96:DD:54:06:E8:EA:2A:84:A5:B5:6C:0E:14:EE:1B:62:D1
X509v3 Authority Key Identifier:
keyid:01:72:35:06:71:8D:FC:F2:A8:BD:17:6D:4E:A2:4E:27:53:22:FC:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:95:45:2e:9b:30:96:36:b1:76:07:e3:84:d1:3d:e0:49:b6:
f6:ac:c9:a8:1f:30:ba:22:06:e4:14:02:ca:01:1f:82:de:a2:
c5:3f:9d:c2:79:81:ae:b3:52:9a:7c:40:00:82:55:83:d3:71:
cf:52:13:78:a1:d7:63:be:62:52:7b:89:fc:d7:50:d5:b1:1c:
cd:ce:6d:4d:9f:58:ad:84:74:70:58:b0:43:d8:aa:a8:ba:2b:
a3:c0:6f:9b:ab:8d:37:cf:91:e2:bb:0a:f7:97:5f:b2:68:15:
4e:bb:e4:f4:63:f3:d6:db:cd:f1:be:c9:30:56:c7:1a:3b:4f:
33:c8:0a:b0:75:ff:07:d1:3d:56:d2:3a:ca:86:2a:1d:11:23:
4c:fc:bf:0c:77:cb:e5:23:c9:b4:97:f7:5a:ce:e8:21:6a:64:
30:4c:6b:d9:17:0d:4f:4f:d3:3a:61:49:68:15:68:48:51:45:
da:dc:09:d3:3e:32:8a:83:49:56:2a:65:f7:d8:00:7d:c3:0d:
6e:a5:46:2e:1d:ef:c4:b3:0e:05:98:a7:68:40:e1:4f:01:ba:
45:c6:ec:4e:33:96:c4:3c:f2:07:2d:6a:89:c8:81:78:c2:6f:
ee:93:8a:08:31:dc:80:8f:ec:6e:fd:58:38:01:48:b8:96:a1:
2e:79:5e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:54:07 2026 by rpki-client