Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
File: AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft (raw, json)
Hash identifier: rBRVptgFArVumo1A8tznss529sPcAttGiBaTo9HUY3E=
Subject key identifier: 65:D2:0E:25:57:CB:8D:65:C0:6B:12:79:9A:DE:06:29:66:E6:67:70
Authority key identifier: 03:1C:8E:8C:C0:75:C2:D0:43:13:B9:11:D9:3D:61:FE:2A:9A:DE:A2
Certificate issuer: /CN=031c8e8cc075c2d04313b911d93d61fe2a9adea2
Certificate serial: 01A00101BD35D142538C6A440F6EFEAFD390
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AxyOjMB1wtBDE7kR2T1h_iqa3qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
Manifest number: 097F
Signing time: Fri 14 Aug 2026 16:01:26 +0000
Manifest this update: Fri 14 Aug 2026 16:01:26 +0000
Manifest next update: Sat 15 Aug 2026 16:01:26 +0000
Files and hashes: 1: AxyOjMB1wtBDE7kR2T1h_iqa3qI.crl (hash: oEGRUcM3qK4zop9GqfnJ97Z55ynEEu92S2S1Mw+YO/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AxyOjMB1wtBDE7kR2T1h_iqa3qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:bd:35:d1:42:53:8c:6a:44:0f:6e:fe:af:d3:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=031c8e8cc075c2d04313b911d93d61fe2a9adea2
Validity
Not Before: Aug 14 16:01:26 2026 GMT
Not After : Aug 15 16:01:26 2026 GMT
Subject: CN=65d20e2557cb8d65c06b12799ade062966e66770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:03:ca:39:e0:50:9a:bf:2f:4d:74:10:3d:34:
72:95:df:10:56:d5:de:1d:ab:eb:a8:0e:e5:04:24:
f3:67:b2:63:cb:6f:fe:7e:36:8a:12:23:db:e4:3b:
60:4c:bf:d9:66:4c:d6:6f:78:93:a7:2d:0f:07:cd:
95:e9:f8:06:5a:ca:bf:5b:72:81:2b:02:1a:62:58:
ee:d1:8c:37:fa:48:b8:19:71:d5:5f:15:ff:e9:6e:
90:1f:d5:11:cc:31:fd:be:59:7e:46:99:80:51:36:
6e:75:b4:40:1f:66:a6:a4:44:67:0e:73:92:47:ef:
b7:5d:26:72:f3:28:b3:ad:f5:13:3e:9a:50:14:ff:
bc:eb:3b:73:08:fc:92:59:d6:d7:53:80:48:a3:99:
d0:64:4b:38:4f:77:9c:23:59:3b:d5:c5:87:26:02:
d2:2f:3a:c9:ec:75:69:04:7e:71:fc:2f:e2:26:9b:
59:7e:b5:58:52:9f:17:9a:b1:cc:ca:d0:07:57:f0:
a6:0f:7a:16:67:0e:76:50:51:41:e5:7d:84:2a:04:
8b:fe:a5:78:95:76:71:91:e0:72:19:f5:bd:b4:65:
08:19:5e:1c:07:3f:61:c5:a5:6f:dd:02:b6:e0:52:
9c:0c:86:63:bd:7f:df:67:08:bd:6c:77:36:90:31:
2d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D2:0E:25:57:CB:8D:65:C0:6B:12:79:9A:DE:06:29:66:E6:67:70
X509v3 Authority Key Identifier:
keyid:03:1C:8E:8C:C0:75:C2:D0:43:13:B9:11:D9:3D:61:FE:2A:9A:DE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxyOjMB1wtBDE7kR2T1h_iqa3qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:18:04:77:ed:f5:b2:6f:8c:ef:6b:1b:50:6d:7e:c6:7f:25:
b1:a9:1a:5d:36:1d:e6:10:6a:ff:7e:f1:49:30:01:d6:f1:c5:
ee:c1:97:74:f1:03:e5:ab:b8:c0:7e:fc:b9:bd:5f:2f:88:4e:
d3:e0:5e:89:2f:e3:db:a8:39:61:16:57:c5:80:48:14:f0:1f:
c3:73:c3:9c:5f:d3:eb:50:9a:a6:03:5a:69:c7:55:d8:54:f0:
ef:0c:22:0c:84:a1:38:e7:da:c4:3a:b4:cc:ea:53:ef:f0:6a:
64:cf:07:6a:78:78:87:c3:3c:3b:61:14:0b:cb:c8:5e:bb:50:
ce:6d:53:bc:ff:1d:b9:98:dd:e5:b8:12:23:37:43:31:14:d3:
0c:d8:bd:4e:f1:99:e8:f0:4e:53:2c:1e:f4:79:1c:4c:3b:3b:
21:d5:ee:24:12:d6:1d:51:db:e8:e8:03:75:ce:40:3e:96:e0:
cc:30:f2:e4:21:2f:92:77:4b:28:e8:21:5d:26:27:5c:e5:99:
1f:f6:3a:13:7f:a5:65:ec:0a:db:42:91:fa:80:50:d6:f0:49:
2d:02:46:bb:3c:92:f3:95:d8:23:49:64:7e:07:dc:17:e6:08:
20:08:11:0c:87:5a:d5:7c:e8:65:20:3b:58:32:18:f5:89:06:
49:75:88:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:31:18 2026 by rpki-client