Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
File: AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft (raw, json)
Hash identifier: R9MP9rMA2sIuMwr6BVl/ftQAW/VckTozfK2lO4Ckszo=
Subject key identifier: D1:E1:FF:AC:94:C5:84:7A:19:2F:B9:B4:3E:FB:6F:E3:25:E4:4A:45
Authority key identifier: 03:1C:8E:8C:C0:75:C2:D0:43:13:B9:11:D9:3D:61:FE:2A:9A:DE:A2
Certificate issuer: /CN=031c8e8cc075c2d04313b911d93d61fe2a9adea2
Certificate serial: 019D38656CE5C51605D1F5139DE0AE87CFA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AxyOjMB1wtBDE7kR2T1h_iqa3qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
Manifest number: 080E
Signing time: Sun 29 Mar 2026 07:01:04 +0000
Manifest this update: Sun 29 Mar 2026 07:01:04 +0000
Manifest next update: Mon 30 Mar 2026 07:01:04 +0000
Files and hashes: 1: AxyOjMB1wtBDE7kR2T1h_iqa3qI.crl (hash: FXq130rGI/4i4y+lvN30dGgfMDFl8v8ZlBUIWtYWvgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AxyOjMB1wtBDE7kR2T1h_iqa3qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:6c:e5:c5:16:05:d1:f5:13:9d:e0:ae:87:cf:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=031c8e8cc075c2d04313b911d93d61fe2a9adea2
Validity
Not Before: Mar 29 07:01:04 2026 GMT
Not After : Mar 30 07:01:04 2026 GMT
Subject: CN=d1e1ffac94c5847a192fb9b43efb6fe325e44a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:81:95:d2:69:4c:38:89:06:c2:2f:63:04:e5:
de:78:01:f9:84:a0:7e:77:cc:6d:ec:f5:19:1a:5a:
a0:c5:f0:f5:b7:bf:81:31:39:91:73:d3:15:ad:f8:
a4:bd:2f:d4:e6:25:4d:d4:bf:f4:76:94:3e:0a:cc:
02:a4:21:93:5a:6a:61:0f:f8:00:f4:10:6e:f7:1c:
de:29:89:7a:e3:0b:b8:fc:fc:64:b3:3e:b5:f3:57:
99:06:82:b7:06:3d:69:02:9c:5c:03:c4:3b:39:09:
0c:53:61:a7:32:55:83:11:1c:2f:b8:ff:ab:1e:e5:
70:95:e8:00:a7:c7:2d:0d:3c:83:33:2c:e6:6e:9b:
3c:41:44:00:78:5a:0f:c4:c3:66:1c:68:a0:81:7f:
e2:13:2b:8b:21:10:1f:11:c3:28:0e:0e:fa:de:c1:
e7:c7:66:97:97:58:be:a4:6d:49:d4:8d:e0:47:d1:
39:57:79:33:e7:bc:ec:14:9f:74:96:1b:95:d1:8e:
0c:6f:32:7d:16:20:67:3b:b3:ea:c7:a9:2f:48:e1:
44:c5:27:22:d4:63:09:0e:c6:c0:5f:6a:f4:27:85:
35:d4:ca:7e:76:96:6e:9b:54:89:af:8c:b9:e6:d5:
0e:2a:64:25:cf:1c:18:18:a9:51:e1:ad:3c:3b:3c:
2e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E1:FF:AC:94:C5:84:7A:19:2F:B9:B4:3E:FB:6F:E3:25:E4:4A:45
X509v3 Authority Key Identifier:
keyid:03:1C:8E:8C:C0:75:C2:D0:43:13:B9:11:D9:3D:61:FE:2A:9A:DE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxyOjMB1wtBDE7kR2T1h_iqa3qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:03:b8:8b:61:5d:66:d5:2a:54:ba:af:76:86:dc:ad:d6:4a:
89:db:f0:6d:2e:59:61:98:fd:a6:8b:38:97:f4:cb:77:58:b8:
3e:ff:58:8a:e6:b5:0b:af:08:2f:ca:c4:04:48:b0:c3:54:bd:
42:37:6f:9e:d6:b8:19:11:e9:ec:1f:23:2e:d7:63:3e:9d:58:
63:3e:40:4a:ce:76:f0:86:7b:11:af:f6:cd:c6:fb:f1:9e:f2:
83:64:d8:24:ae:e2:fe:d0:c7:7f:c4:93:2b:9a:94:5a:b9:18:
9b:5e:b5:db:eb:5e:8f:47:a1:77:6a:22:05:71:a0:66:7e:b4:
4e:81:49:78:08:b2:4f:53:5d:79:7c:26:60:7c:4a:85:b0:84:
12:17:5c:7d:68:2c:5d:ac:54:41:89:e5:dc:18:6c:54:2b:8f:
ff:99:21:54:88:7d:0d:79:59:51:1e:28:ac:9b:92:a8:92:07:
a0:29:f1:98:52:b5:59:27:20:87:3d:d1:94:4b:98:25:be:93:
7f:7e:85:b4:11:af:ed:7c:9c:12:e4:6d:c3:6d:bd:3c:e2:47:
43:75:7d:a1:06:45:e0:0d:25:23:4f:cf:d4:aa:ce:23:2f:92:
cc:92:c3:52:01:54:8f:e4:f4:61:a5:e7:1c:77:01:3d:6d:da:
76:c9:1b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:12 2026 by rpki-client