Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/63c55f-41be-44b6-84cf-3e1086e73ade/1/Axrg595e2RBFnl_GJAgVFTwuZ44.mft
File: Axrg595e2RBFnl_GJAgVFTwuZ44.mft (raw, json)
Hash identifier: paHGg+mImLu/IPhEZNK3AWFNaoATvlWzFAKmjr3ErY0=
Subject key identifier: 4A:C4:16:68:F4:DA:48:1A:70:1C:B8:37:78:1D:37:8D:D1:D7:5D:55
Authority key identifier: 03:1A:E0:E7:DE:5E:D9:10:45:9E:5F:C6:24:08:15:15:3C:2E:67:8E
Certificate issuer: /CN=031ae0e7de5ed910459e5fc6240815153c2e678e
Certificate serial: 01A040F2F1E8A7538F48713C14FDF62A74A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Axrg595e2RBFnl_GJAgVFTwuZ44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/63c55f-41be-44b6-84cf-3e1086e73ade/1/Axrg595e2RBFnl_GJAgVFTwuZ44.mft
Manifest number: 96
Signing time: Thu 27 Aug 2026 02:00:58 +0000
Manifest this update: Thu 27 Aug 2026 02:00:58 +0000
Manifest next update: Fri 28 Aug 2026 02:00:58 +0000
Files and hashes: 1: Axrg595e2RBFnl_GJAgVFTwuZ44.crl (hash: KLWby7MOFOvbUfhB/cdgsktJgG7NuRf9vGzLPs7UqW4=)
2: ucADD6Yh4BlCI1nzbXrE79pdugQ.roa (hash: lIeb2K1Ku3XdMNralNbKNkojTmlUe23ubgq7NoIci/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/63c55f-41be-44b6-84cf-3e1086e73ade/1/Axrg595e2RBFnl_GJAgVFTwuZ44.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/63c55f-41be-44b6-84cf-3e1086e73ade/1/Axrg595e2RBFnl_GJAgVFTwuZ44.mft
rsync://rpki.ripe.net/repository/DEFAULT/Axrg595e2RBFnl_GJAgVFTwuZ44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:f2:f1:e8:a7:53:8f:48:71:3c:14:fd:f6:2a:74:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=031ae0e7de5ed910459e5fc6240815153c2e678e
Validity
Not Before: Aug 27 02:00:58 2026 GMT
Not After : Aug 28 02:00:58 2026 GMT
Subject: CN=4ac41668f4da481a701cb837781d378dd1d75d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9b:5a:5c:ba:dd:a4:06:41:be:76:02:f3:61:
d4:45:0b:a6:dd:39:f4:cf:31:f6:a4:6a:63:52:dc:
49:5c:ec:c6:fa:2e:dc:94:b8:83:e2:77:c3:a7:91:
c2:58:0b:36:74:15:e1:94:6f:38:f2:77:e0:58:93:
47:6e:1e:51:39:2c:85:2a:aa:f7:ac:8e:5a:a7:70:
6f:47:86:e1:7e:ee:af:b7:64:2d:55:a2:f2:62:01:
61:22:6b:6f:1a:45:6a:86:73:15:84:5d:27:bc:03:
59:24:f2:a2:fb:ee:2a:46:53:8a:82:51:05:ca:a2:
55:92:f8:b3:95:94:19:a1:e9:17:01:dd:f3:cd:2e:
d5:88:f5:0d:5a:e1:0a:fe:76:a9:8a:4b:99:45:b7:
42:e6:bd:f3:19:a0:8e:b5:b6:75:d5:29:6b:53:f5:
87:9a:54:c4:00:5d:8c:ff:55:f8:96:05:33:15:41:
db:42:c6:4b:68:96:c5:42:5a:45:0e:65:96:48:0e:
65:2d:3f:f5:07:b0:94:7e:d8:1b:fc:af:b3:9c:7e:
2d:c0:df:c6:5b:77:77:d2:df:3b:37:51:53:9f:80:
12:9c:83:1e:3e:39:0e:f4:54:3b:7b:90:08:36:66:
1d:4e:dc:fe:8c:83:9a:ad:0c:65:71:c3:1f:9b:63:
12:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C4:16:68:F4:DA:48:1A:70:1C:B8:37:78:1D:37:8D:D1:D7:5D:55
X509v3 Authority Key Identifier:
keyid:03:1A:E0:E7:DE:5E:D9:10:45:9E:5F:C6:24:08:15:15:3C:2E:67:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Axrg595e2RBFnl_GJAgVFTwuZ44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/63c55f-41be-44b6-84cf-3e1086e73ade/1/Axrg595e2RBFnl_GJAgVFTwuZ44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/63c55f-41be-44b6-84cf-3e1086e73ade/1/Axrg595e2RBFnl_GJAgVFTwuZ44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:40:4f:84:bb:41:e7:6e:b8:fd:a0:20:03:35:68:1c:24:a2:
b1:84:72:d7:e8:49:8c:ed:50:de:83:62:66:93:0d:c5:3f:a4:
c6:71:ab:09:fa:ec:48:af:5f:84:fe:77:06:8d:41:13:43:f0:
63:fb:4a:f2:5e:19:fb:f7:40:66:98:ab:72:5c:d3:f8:2d:e8:
31:71:bb:de:0b:64:e0:71:b0:bb:54:e9:11:ee:ec:16:21:80:
80:e4:e2:94:d9:24:99:2c:c5:66:14:1a:8c:fb:3c:7e:4c:7c:
49:3d:ed:c9:6c:23:2b:4a:8a:dd:b8:28:01:52:2d:5b:f5:db:
96:3d:73:b9:fe:fb:92:10:24:ba:9c:63:f0:e6:8e:15:33:3f:
82:7e:7c:cc:91:be:a7:5b:ee:5a:3b:b7:94:f3:1a:6e:ba:fa:
be:4c:1c:70:4f:de:55:c1:bb:aa:bd:a3:57:89:87:5b:da:ce:
cc:c4:d7:fa:c9:9d:09:70:f4:71:fd:94:a1:e6:6f:6d:c7:e3:
a3:35:1f:92:5a:83:76:72:b5:81:71:07:ec:ca:2c:f2:03:18:
2d:8b:a2:34:9f:94:a6:4f:e6:ca:38:0d:55:13:6d:cf:63:b8:
40:e9:3b:59:64:70:59:48:61:56:38:bb:aa:e7:79:79:2c:ba:
63:0d:9b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:20:36 2026 by rpki-client