Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
File: AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft (raw, json)
Hash identifier: E+7FsaLJODaEeyzqYWPHRiOHridFLxhbZzdC4LEKjuM=
Subject key identifier: 3B:98:5F:D0:8F:A6:B1:7E:CF:7C:EA:D4:6E:8E:1C:58:BD:DD:2E:F0
Authority key identifier: 01:72:35:06:71:8D:FC:F2:A8:BD:17:6D:4E:A2:4E:27:53:22:FC:FB
Certificate issuer: /CN=01723506718dfcf2a8bd176d4ea24e275322fcfb
Certificate serial: 019D38D3A3566134FECA21A456D438022730
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 09:01:27 +0000
Manifest this update: Sun 29 Mar 2026 09:01:27 +0000
Manifest next update: Mon 30 Mar 2026 09:01:27 +0000
Files and hashes: 1: AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl (hash: +C6opZVC4x6ExvAyZYFhH51kbK3VJTdArKFcgMRp0fQ=)
2: EK4O0xHWKJmmPQygRY3dmzgeTsI.roa (hash: m1XR1i5Us8oblIUOIQzSE1h5zvdVSIn8gW8k8tGSpec=)
3: Ql95-IGW0X06XmkQjeBmRl8NR5M.roa (hash: U0YHtEFSJr7CqFsN6UUpHO3sj4tjBDK3Qns3+4dEtP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:a3:56:61:34:fe:ca:21:a4:56:d4:38:02:27:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01723506718dfcf2a8bd176d4ea24e275322fcfb
Validity
Not Before: Mar 29 09:01:27 2026 GMT
Not After : Mar 30 09:01:27 2026 GMT
Subject: CN=3b985fd08fa6b17ecf7cead46e8e1c58bddd2ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ce:a8:2d:22:dc:ad:49:da:80:4c:94:5f:57:
4c:0f:0a:56:d5:79:d0:29:8f:51:88:16:98:07:a2:
df:47:b4:b9:08:ab:00:05:b0:90:69:9d:fe:e8:fa:
f0:f2:97:98:fd:ae:76:c6:7b:ec:01:80:f8:59:e1:
73:97:f9:33:e7:d1:51:a1:5c:4a:b5:95:c0:11:28:
8f:ee:f2:bd:c7:26:2c:db:bb:67:33:cd:c2:e1:11:
c0:15:7b:41:ae:66:d9:d1:bd:28:8a:36:89:31:6a:
38:b3:c9:65:a6:a6:a3:28:54:89:3e:8a:02:f8:88:
d1:26:06:2e:92:e1:66:2f:f4:12:67:9f:86:08:4d:
74:05:39:ac:b2:87:4e:a5:cf:10:8e:20:30:58:15:
de:d8:e0:66:71:ff:3b:ff:81:61:c2:4e:fc:70:20:
64:48:80:4e:13:80:62:af:84:70:1e:37:d1:cf:d3:
8a:6d:cb:1b:71:3d:5c:99:e7:98:33:69:8f:6e:a3:
55:ed:5e:e3:19:51:32:cf:e3:ad:4b:d9:77:e9:5c:
f7:b3:ef:15:81:0c:86:4a:39:a7:e6:74:7f:28:46:
c6:04:e5:9e:90:f0:ba:fa:a9:81:b2:4e:79:fb:d4:
fb:75:5e:2f:6b:a5:39:c4:97:e5:08:06:e1:3a:22:
cd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:98:5F:D0:8F:A6:B1:7E:CF:7C:EA:D4:6E:8E:1C:58:BD:DD:2E:F0
X509v3 Authority Key Identifier:
keyid:01:72:35:06:71:8D:FC:F2:A8:BD:17:6D:4E:A2:4E:27:53:22:FC:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:b6:53:fd:88:b9:f4:29:09:66:05:f9:bc:b3:94:6b:65:f6:
99:13:ee:7f:1b:42:0d:b7:4f:3e:37:9a:23:4b:66:3c:71:23:
1e:d3:25:8a:f9:b4:dc:f8:7e:3f:09:b3:f2:6b:6d:ef:dc:50:
f8:67:55:78:96:87:47:b4:fd:43:5b:ad:23:6e:43:dd:73:73:
5a:d4:65:b6:d9:91:db:6c:81:a2:44:fd:3e:2a:9a:f5:79:f9:
7a:d2:b3:53:a4:d5:72:b3:bb:31:da:07:57:28:95:db:a4:0f:
fc:80:91:62:d9:0f:21:50:68:7d:45:f9:f3:da:1f:35:c0:89:
8c:67:08:0d:c4:86:eb:44:dd:fe:66:fa:f6:28:f0:b7:9c:33:
d6:5a:bc:22:4b:51:d7:91:ca:ca:08:28:a3:81:4f:a0:6a:37:
32:62:a6:f7:04:3a:3e:1e:31:09:94:86:e3:8c:4a:05:7f:15:
07:b8:6a:cc:8a:9b:cc:d7:2b:42:17:5d:28:c0:dd:6e:9a:ee:
25:4c:0c:9d:f4:73:0f:29:07:a9:74:b5:da:d2:e1:37:4a:09:
74:11:57:67:5a:60:bb:c3:2c:e9:95:12:9b:f1:ea:8e:ae:c8:
59:af:69:d6:ac:ba:f3:fa:d4:62:a6:98:6a:2f:c2:68:9a:a7:
ae:1b:5f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:53:14 2026 by rpki-client