Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
File: AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft (raw, json)
Hash identifier: f6OcnL8alH7tO6CEAwfK+YtWdDlnWctr8jNmX1lErNQ=
Subject key identifier: A0:0D:5D:73:7C:C3:AE:4F:6C:07:89:CE:43:82:FC:EB:FA:74:D2:E6
Authority key identifier: 03:1C:8E:8C:C0:75:C2:D0:43:13:B9:11:D9:3D:61:FE:2A:9A:DE:A2
Certificate issuer: /CN=031c8e8cc075c2d04313b911d93d61fe2a9adea2
Certificate serial: 019E3184EE422D84DD76546EC9B100507A38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AxyOjMB1wtBDE7kR2T1h_iqa3qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
Manifest number: 088F
Signing time: Sat 16 May 2026 16:00:55 +0000
Manifest this update: Sat 16 May 2026 16:00:55 +0000
Manifest next update: Sun 17 May 2026 16:00:55 +0000
Files and hashes: 1: AxyOjMB1wtBDE7kR2T1h_iqa3qI.crl (hash: ttLDOt5Iyh2JxKqcNur5sLEKS/7RNLoorJada3D72Z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AxyOjMB1wtBDE7kR2T1h_iqa3qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:84:ee:42:2d:84:dd:76:54:6e:c9:b1:00:50:7a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=031c8e8cc075c2d04313b911d93d61fe2a9adea2
Validity
Not Before: May 16 16:00:55 2026 GMT
Not After : May 17 16:00:55 2026 GMT
Subject: CN=a00d5d737cc3ae4f6c0789ce4382fcebfa74d2e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5b:8b:94:00:38:af:33:64:70:24:6a:ca:5a:
e7:62:db:72:fa:b9:03:06:08:b4:52:e7:ce:ab:b5:
cf:7b:3f:fc:84:70:9a:87:a5:78:2b:e8:4f:7a:35:
31:dd:7e:ad:4d:80:85:ba:13:f9:a8:b0:bb:67:95:
f3:66:26:92:90:50:fa:a8:fc:70:4d:dc:79:28:54:
04:85:35:35:52:12:a0:3d:72:21:e1:dd:85:53:8d:
ea:e5:20:d0:24:5e:a5:02:60:5b:68:e3:6a:f4:7d:
98:e3:5f:8a:33:96:b3:29:1b:ab:0d:71:bd:48:25:
04:94:31:eb:50:72:bf:be:a5:54:02:73:f8:20:a0:
d4:62:4e:e3:d8:d2:5b:7e:e9:da:1b:80:06:41:34:
f6:c3:4a:6e:4d:7b:91:71:2d:d0:a8:b1:ee:84:53:
b2:bc:b1:6a:0a:db:fc:f7:26:45:09:3c:2e:8e:48:
4e:6d:0f:96:39:49:00:e4:fe:e8:6d:61:9b:b5:24:
22:32:17:7b:26:84:db:ae:07:e9:9c:f9:cc:d8:cd:
b2:1a:f9:da:b8:17:23:f5:6f:ea:0c:63:fa:0d:02:
61:b2:4c:74:4f:62:57:d7:5b:c0:28:1d:fc:7b:7c:
f6:95:84:c2:fd:84:8d:f8:41:dd:50:2a:1e:ab:5d:
e7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:0D:5D:73:7C:C3:AE:4F:6C:07:89:CE:43:82:FC:EB:FA:74:D2:E6
X509v3 Authority Key Identifier:
keyid:03:1C:8E:8C:C0:75:C2:D0:43:13:B9:11:D9:3D:61:FE:2A:9A:DE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxyOjMB1wtBDE7kR2T1h_iqa3qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:7b:c9:10:46:58:8d:34:79:ba:5f:db:cb:0f:4f:a2:e2:a4:
0d:79:7e:7b:84:7d:bb:71:d3:58:e8:f6:5c:a8:ef:8f:c5:b5:
87:51:60:9c:4f:0e:d1:b7:9e:77:da:aa:d5:65:ef:46:d4:96:
6a:25:77:b8:a8:b2:2b:c9:53:f0:01:13:d1:7c:3d:a7:56:82:
83:3d:d2:64:d3:9d:31:49:69:51:e6:3b:fa:ab:ad:0f:98:1d:
3e:a0:02:50:60:c6:0d:00:8e:70:4f:73:45:2c:1d:b6:c7:40:
bd:13:ac:bb:8d:bc:73:68:3e:2a:19:eb:52:0e:f9:15:da:69:
e6:74:3b:b8:67:96:f8:ec:7d:a9:26:16:e2:ed:33:dd:1e:ed:
d6:8a:71:24:a0:64:b7:51:f8:c3:75:d0:dd:be:ad:49:4c:ff:
01:2a:50:bc:d3:71:b0:4d:20:30:39:31:d1:75:6b:b2:02:2b:
2e:21:fb:45:6f:11:84:f2:57:16:9f:91:4a:b9:0c:e3:de:6f:
91:45:02:17:8e:9c:51:f2:76:3d:f5:14:7b:95:6d:d3:33:06:
44:1d:d7:b0:9e:cd:62:c3:da:e8:a6:70:cf:5e:17:e5:5d:3e:
bd:61:be:a3:1d:96:8f:53:44:97:be:c5:45:23:54:fd:44:6e:
01:45:9a:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xhO5CLYTddlRuybEAUHo4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMWM4ZThjYzA3NWMyZDA0MzEzYjkxMWQ5M2Q2MWZlMmE5
YWRlYTIwHhcNMjYwNTE2MTYwMDU1WhcNMjYwNTE3MTYwMDU1WjAzMTEwLwYDVQQD
EyhhMDBkNWQ3MzdjYzNhZTRmNmMwNzg5Y2U0MzgyZmNlYmZhNzRkMmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFuLlAA4rzNkcCRqylrnYtty+rkD
Bgi0UufOq7XPez/8hHCah6V4K+hPejUx3X6tTYCFuhP5qLC7Z5XzZiaSkFD6qPxw
Tdx5KFQEhTU1UhKgPXIh4d2FU43q5SDQJF6lAmBbaONq9H2Y41+KM5azKRurDXG9
SCUElDHrUHK/vqVUAnP4IKDUYk7j2NJbfunaG4AGQTT2w0puTXuRcS3QqLHuhFOy
vLFqCtv89yZFCTwujkhObQ+WOUkA5P7obWGbtSQiMhd7JoTbrgfpnPnM2M2yGvna
uBcj9W/qDGP6DQJhskx0T2JX11vAKB38e3z2lYTC/YSN+EHdUCoeq13nFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKANXXN8w65PbAeJzkOC/Ov6dNLmMB8GA1UdIwQY
MBaAFAMcjozAdcLQQxO5Edk9Yf4qmt6iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXh5T2pNQjF3dEJERTdrUjJUMWhfaXFhM3FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy83NTIxM2QtMDFhNC00YjYxLWI1OTQt
NjI2OGNlZGFiZDg0LzEvQXh5T2pNQjF3dEJERTdrUjJUMWhfaXFhM3FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy83NTIxM2QtMDFhNC00YjYxLWI1OTQtNjI2OGNlZGFiZDg0
LzEvQXh5T2pNQjF3dEJERTdrUjJUMWhfaXFhM3FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWXvJEEZY
jTR5ul/byw9PouKkDXl+e4R9u3HTWOj2XKjvj8W1h1FgnE8O0beed9qq1WXvRtSW
aiV3uKiyK8lT8AET0Xw9p1aCgz3SZNOdMUlpUeY7+qutD5gdPqACUGDGDQCOcE9z
RSwdtsdAvROsu428c2g+KhnrUg75Fdpp5nQ7uGeW+Ox9qSYW4u0z3R7t1opxJKBk
t1H4w3XQ3b6tSUz/ASpQvNNxsE0gMDkx0XVrsgIrLiH7RW8RhPJXFp+RSrkM495v
kUUCF46cUfJ2PfUUe5Vt0zMGRB3XsJ7NYsPa6KZwz14X5V0+vWG+ox2Wj1NEl77F
RSNU/URuAUWasg==
-----END CERTIFICATE-----
Generated at Sat May 16 18:41:43 2026 by rpki-client