Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.mft
File: axa8EQuqKsnRYgwlBxdXfeZKkks.mft (raw, json)
Hash identifier: hSShkiEudfw89+g8Nv3k+0/WXzqhYoEqgW0uKHdajaE=
Subject key identifier: 42:2C:CA:8A:80:A0:3C:E8:C7:6A:A7:E3:C6:E3:9B:F2:7B:7C:DC:E7
Authority key identifier: 6B:16:BC:11:0B:AA:2A:C9:D1:62:0C:25:07:17:57:7D:E6:4A:92:4B
Certificate issuer: /CN=6b16bc110baa2ac9d1620c250717577de64a924b
Certificate serial: 019D3865F770F4568D92F50471B3CC9D91D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axa8EQuqKsnRYgwlBxdXfeZKkks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 07:01:39 +0000
Manifest this update: Sun 29 Mar 2026 07:01:39 +0000
Manifest next update: Mon 30 Mar 2026 07:01:39 +0000
Files and hashes: 1: axa8EQuqKsnRYgwlBxdXfeZKkks.crl (hash: ONyymWVYgnm1yCg7DxaGHif9Lr6YgneRSoweGOtzLCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.mft
rsync://rpki.ripe.net/repository/DEFAULT/axa8EQuqKsnRYgwlBxdXfeZKkks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:f7:70:f4:56:8d:92:f5:04:71:b3:cc:9d:91:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b16bc110baa2ac9d1620c250717577de64a924b
Validity
Not Before: Mar 29 07:01:39 2026 GMT
Not After : Mar 30 07:01:39 2026 GMT
Subject: CN=422cca8a80a03ce8c76aa7e3c6e39bf27b7cdce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2a:0b:a8:a8:18:0d:08:d8:f8:36:83:38:47:
3d:b3:06:ce:bf:20:61:0c:b8:4c:9d:22:4b:dc:cb:
9d:22:b4:66:14:5b:50:c7:a5:0e:a5:19:03:d1:89:
df:3a:e2:7c:90:65:da:f9:e7:0f:e1:44:9b:f2:3c:
6d:92:39:66:0b:c7:25:e9:65:50:8e:11:f2:69:83:
d0:c2:87:d9:52:e5:cf:3e:c8:00:23:9e:11:49:dd:
15:19:71:07:6e:10:3a:6b:04:dd:5c:da:77:3e:64:
5b:8d:ac:87:ee:c5:98:05:77:7b:bf:d1:f4:f6:e5:
1f:9d:4f:0f:e5:fa:f1:f4:47:8c:d1:66:8f:ca:bd:
1c:0f:e3:65:d8:db:5e:d1:74:75:5e:46:1b:bd:8d:
3e:06:57:a6:b0:a0:01:03:71:08:eb:00:92:0c:2b:
e4:2f:7d:59:6b:d4:85:df:e5:84:51:65:7d:e4:52:
87:51:4f:2c:48:87:22:a0:0d:33:f7:31:ca:e1:9e:
93:fa:9a:44:1d:5e:18:ab:37:5c:3a:73:09:6e:81:
c3:ea:1b:eb:59:6d:5d:b6:6e:8b:f4:5e:42:12:47:
32:a9:a4:30:ab:f3:c6:64:92:9a:57:11:75:7c:43:
5b:05:78:4e:1f:50:9f:5c:9e:a2:f9:f0:45:2c:f4:
d3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2C:CA:8A:80:A0:3C:E8:C7:6A:A7:E3:C6:E3:9B:F2:7B:7C:DC:E7
X509v3 Authority Key Identifier:
keyid:6B:16:BC:11:0B:AA:2A:C9:D1:62:0C:25:07:17:57:7D:E6:4A:92:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axa8EQuqKsnRYgwlBxdXfeZKkks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:a7:0d:90:b4:8f:d2:fc:49:af:cf:8e:b2:51:ea:29:ac:07:
cb:85:47:bc:26:fc:3c:83:45:94:88:bb:24:b6:a7:ee:24:6f:
4b:ae:c4:b1:27:38:94:9b:ff:4b:58:92:53:b3:df:65:29:b4:
15:e9:b8:50:c8:a1:3b:b6:20:ce:b0:ca:e9:66:53:44:5a:3d:
8d:7a:35:f2:f9:ed:9b:14:b7:e4:51:6e:86:89:aa:e8:b0:ca:
5e:88:0b:68:91:6d:38:a0:ad:d2:a8:98:26:87:29:8a:24:ac:
8b:24:d7:6a:24:69:43:09:7c:e7:3d:5d:7d:fb:26:86:90:e1:
65:ac:a2:99:3e:50:8a:5f:b7:ef:eb:4b:69:40:16:f2:3a:65:
22:99:78:64:17:32:25:63:fc:38:c5:0e:86:ef:52:86:fa:99:
fd:0a:ef:04:a4:3a:36:d9:2c:c8:de:21:97:61:08:46:84:9a:
d6:26:08:fd:c9:75:f5:f3:aa:06:87:6b:65:b9:13:5a:93:ef:
ea:11:86:23:e7:e4:30:7d:3f:a5:69:26:b4:a1:d1:bb:9e:ca:
36:02:7a:11:bb:7b:75:7b:67:27:31:3f:49:62:78:95:7a:39:
8e:3d:5b:07:71:aa:e2:4f:65:b4:d5:e1:f6:49:a6:de:01:d5:
20:48:11:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Zfdw9FaNkvUEcbPMnZHVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMTZiYzExMGJhYTJhYzlkMTYyMGMyNTA3MTc1NzdkZTY0
YTkyNGIwHhcNMjYwMzI5MDcwMTM5WhcNMjYwMzMwMDcwMTM5WjAzMTEwLwYDVQQD
Eyg0MjJjY2E4YTgwYTAzY2U4Yzc2YWE3ZTNjNmUzOWJmMjdiN2NkY2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SoLqKgYDQjY+DaDOEc9swbOvyBh
DLhMnSJL3MudIrRmFFtQx6UOpRkD0YnfOuJ8kGXa+ecP4USb8jxtkjlmC8cl6WVQ
jhHyaYPQwofZUuXPPsgAI54RSd0VGXEHbhA6awTdXNp3PmRbjayH7sWYBXd7v9H0
9uUfnU8P5frx9EeM0WaPyr0cD+Nl2Nte0XR1XkYbvY0+BlemsKABA3EI6wCSDCvk
L31Za9SF3+WEUWV95FKHUU8sSIcioA0z9zHK4Z6T+ppEHV4YqzdcOnMJboHD6hvr
WW1dtm6L9F5CEkcyqaQwq/PGZJKaVxF1fENbBXhOH1CfXJ6i+fBFLPTT/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEIsyoqAoDzox2qn48bjm/J7fNznMB8GA1UdIwQY
MBaAFGsWvBELqirJ0WIMJQcXV33mSpJLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXhhOEVRdXFLc25SWWd3bEJ4ZFhmZVpLa2tzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8wMzIyOGMtOGM5OC00NTk3LWEzN2Yt
NTgzYzk4YTA2MzAxLzEvYXhhOEVRdXFLc25SWWd3bEJ4ZFhmZVpLa2tzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8wMzIyOGMtOGM5OC00NTk3LWEzN2YtNTgzYzk4YTA2MzAx
LzEvYXhhOEVRdXFLc25SWWd3bEJ4ZFhmZVpLa2tzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlacNkLSP
0vxJr8+OslHqKawHy4VHvCb8PINFlIi7JLan7iRvS67EsSc4lJv/S1iSU7PfZSm0
Fem4UMihO7YgzrDK6WZTRFo9jXo18vntmxS35FFuhomq6LDKXogLaJFtOKCt0qiY
JocpiiSsiyTXaiRpQwl85z1dffsmhpDhZayimT5Qil+37+tLaUAW8jplIpl4ZBcy
JWP8OMUOhu9ShvqZ/QrvBKQ6NtksyN4hl2EIRoSa1iYI/cl19fOqBodrZbkTWpPv
6hGGI+fkMH0/pWkmtKHRu57KNgJ6Ebt7dXtnJzE/SWJ4lXo5jj1bB3Gq4k9ltNXh
9kmm3gHVIEgRUw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:18 2026 by rpki-client