Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
File: AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft (raw, json)
Hash identifier: VJZNzil1iYJblOIQrfyDpDQ1+Hhgn3pXtXNVdie/sUE=
Subject key identifier: 24:B2:2C:8E:EF:24:2E:E8:32:B5:52:30:06:F7:50:9F:00:3B:7C:24
Authority key identifier: 03:1C:8E:8C:C0:75:C2:D0:43:13:B9:11:D9:3D:61:FE:2A:9A:DE:A2
Certificate issuer: /CN=031c8e8cc075c2d04313b911d93d61fe2a9adea2
Certificate serial: 01A13FA796763B95298B26D02C8A8C8B7C8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AxyOjMB1wtBDE7kR2T1h_iqa3qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
Manifest number: 0A24
Signing time: Thu 15 Oct 2026 13:01:49 +0000
Manifest this update: Thu 15 Oct 2026 13:01:49 +0000
Manifest next update: Fri 16 Oct 2026 13:01:49 +0000
Files and hashes: 1: AxyOjMB1wtBDE7kR2T1h_iqa3qI.crl (hash: sNvNFbGyX/sughBgHITTfvLafwL0MhEMVYqMqBYrt0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AxyOjMB1wtBDE7kR2T1h_iqa3qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:a7:96:76:3b:95:29:8b:26:d0:2c:8a:8c:8b:7c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=031c8e8cc075c2d04313b911d93d61fe2a9adea2
Validity
Not Before: Oct 15 13:01:49 2026 GMT
Not After : Oct 16 13:01:49 2026 GMT
Subject: CN=24b22c8eef242ee832b5523006f7509f003b7c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:10:49:1d:86:0b:95:7d:69:a5:59:17:a2:8a:
3d:7f:24:5a:f9:c9:e4:96:db:72:a3:62:92:e5:f7:
fc:d0:9c:2e:10:8e:0c:68:d9:4d:c0:04:60:b1:1b:
e2:73:d4:cb:d2:5d:0a:58:36:e9:b9:e2:16:6a:4a:
f2:8f:8f:fe:ca:da:5f:8e:34:61:12:36:b5:7c:cd:
c7:35:9d:e9:1c:80:b2:58:e6:5f:84:34:97:c3:c1:
c9:86:01:c5:98:fb:f3:6a:2f:2a:ff:6b:67:f2:53:
e7:35:d0:4a:bb:bd:7a:0a:59:d5:38:16:22:f2:10:
d1:a1:c3:ad:0b:39:29:ea:34:6d:df:b6:ee:70:83:
69:71:e6:0e:67:7c:a8:42:8f:a9:fa:3b:57:a2:4a:
3b:70:4d:17:1f:23:79:53:bb:53:8a:64:bd:86:a7:
12:ba:31:05:a8:99:05:c7:68:91:fa:e3:ff:8b:ce:
bd:16:ed:14:42:54:53:a4:44:a5:9c:26:e6:4a:4c:
44:81:dd:72:18:2f:12:9f:9e:35:0a:4f:c0:ec:97:
3c:e3:fe:78:55:c9:94:b4:d8:ad:14:11:9a:a6:03:
59:49:63:b8:2c:0a:cc:48:aa:33:ae:90:2f:c6:ca:
8d:39:8c:26:fe:2c:8e:5a:28:e3:ad:c1:3b:e2:98:
8f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B2:2C:8E:EF:24:2E:E8:32:B5:52:30:06:F7:50:9F:00:3B:7C:24
X509v3 Authority Key Identifier:
keyid:03:1C:8E:8C:C0:75:C2:D0:43:13:B9:11:D9:3D:61:FE:2A:9A:DE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxyOjMB1wtBDE7kR2T1h_iqa3qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:36:4a:95:28:f6:83:31:f7:ad:29:f8:16:90:50:8e:08:a4:
bd:55:72:c1:e3:7f:b3:e2:03:36:6c:8b:ac:92:57:13:cc:2a:
4a:a1:6f:94:50:e0:b8:53:0f:7e:0d:d1:96:bd:ba:6d:b0:5b:
b2:6a:ec:05:70:6c:4b:ad:70:61:56:ba:d7:bf:9d:21:71:53:
db:77:5e:59:13:65:43:70:07:dd:da:2a:17:c2:90:c0:ce:aa:
6a:3a:2f:cb:2e:ed:3b:50:24:eb:e0:44:ab:42:c0:9a:e1:92:
0f:51:c3:d2:e9:c9:da:e0:cb:96:68:64:51:84:0a:36:7d:30:
46:60:c7:6c:82:7d:53:a0:f3:60:e5:2d:02:7c:f5:ed:f5:db:
6e:ff:70:21:a2:49:cc:4f:8a:3c:d7:27:56:85:30:1e:dd:02:
f8:f6:c3:1b:59:7e:2a:68:48:fd:3b:11:a7:05:87:a4:45:0c:
67:da:32:e9:f9:d8:70:fe:2e:ee:90:25:78:bc:16:c4:4f:be:
bb:e6:c1:d9:26:5e:94:06:15:f4:0d:14:f1:ad:0b:79:fd:0c:
93:22:ea:bb:86:f0:06:2d:3f:aa:b4:95:07:4b:6c:6e:09:5d:
eb:d6:88:4a:ed:d9:47:ff:a4:a5:75:10:d4:31:ae:51:1b:3c:
b3:4d:94:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:14:48 2026 by rpki-client