Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.mft
File: AXCkm2bRQaGePv12siXcoGwTjus.mft (raw, json)
Hash identifier: yaFZShodbXsnVjcczTUOdJEQwWgWKiS+GcLEKZbbFyY=
Subject key identifier: 3C:50:5A:FB:E9:0C:22:B7:BC:33:CB:0D:9E:E7:86:59:15:9B:64:D8
Authority key identifier: 01:70:A4:9B:66:D1:41:A1:9E:3E:FD:76:B2:25:DC:A0:6C:13:8E:EB
Certificate issuer: /CN=0170a49b66d141a19e3efd76b225dca06c138eeb
Certificate serial: 019EFCB9BF2481C78C6C21FA65B5FFB639E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXCkm2bRQaGePv12siXcoGwTjus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.mft
Manifest number: 0148
Signing time: Thu 25 Jun 2026 03:01:31 +0000
Manifest this update: Thu 25 Jun 2026 03:01:31 +0000
Manifest next update: Fri 26 Jun 2026 03:01:31 +0000
Files and hashes: 1: AXCkm2bRQaGePv12siXcoGwTjus.crl (hash: 7PnFyZmIvClis6OBbfKIs2aS8hUZtGf4PcYoSghWzfY=)
2: zlyCcC0Ul5zEfxfhjrFpAiSpAHQ.asa (hash: nGTbBj1nHurYFd5cQcZSNhQFoQXg2jJ4C1ZQY3Rxxv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXCkm2bRQaGePv12siXcoGwTjus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fc:b9:bf:24:81:c7:8c:6c:21:fa:65:b5:ff:b6:39:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0170a49b66d141a19e3efd76b225dca06c138eeb
Validity
Not Before: Jun 25 03:01:31 2026 GMT
Not After : Jun 26 03:01:31 2026 GMT
Subject: CN=3c505afbe90c22b7bc33cb0d9ee78659159b64d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ed:cf:19:04:03:8d:82:ba:08:e2:2f:80:22:
91:b7:4c:e2:f1:c2:8a:59:d5:cd:3a:aa:ab:55:b1:
58:b1:ab:cf:fd:3d:78:b6:9a:a5:02:a9:af:01:2f:
e2:9d:97:c6:54:ba:5a:06:10:e6:5a:3d:1f:e6:22:
01:2d:71:b4:25:a6:13:f0:95:9b:7a:29:8f:c6:d5:
22:08:ab:a5:25:38:a1:e5:f3:ef:ad:d9:c4:7b:a1:
b2:57:5d:3f:4e:16:40:9f:6a:98:a5:ca:a9:e5:c9:
ac:47:50:7c:0f:c4:3a:39:32:28:6c:3a:d3:dc:4a:
e4:12:50:fc:40:9c:fd:a6:a3:63:8c:f4:d3:1c:cb:
b9:62:c3:c2:57:8a:91:74:a7:d5:ea:d3:2f:b7:8a:
ae:82:58:e5:38:75:7c:52:51:e2:d0:87:e2:cf:7c:
35:5f:5e:fc:aa:6e:a9:8d:91:70:fb:d6:08:48:06:
00:40:1e:43:f0:e8:de:9f:c1:13:5e:8d:7f:e7:8c:
a3:f0:60:b5:90:5f:12:ff:65:05:76:b0:3c:9b:7b:
6d:65:b4:4b:f7:6e:06:9b:b5:e6:b5:be:b6:d4:80:
b1:29:df:46:5f:7d:21:34:7d:30:65:36:59:1b:ef:
13:6a:fa:cd:b6:11:d4:ad:f9:4f:53:61:6b:fd:d8:
33:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:50:5A:FB:E9:0C:22:B7:BC:33:CB:0D:9E:E7:86:59:15:9B:64:D8
X509v3 Authority Key Identifier:
keyid:01:70:A4:9B:66:D1:41:A1:9E:3E:FD:76:B2:25:DC:A0:6C:13:8E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXCkm2bRQaGePv12siXcoGwTjus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:df:1e:7e:de:20:29:06:bf:1a:d8:62:32:4c:9f:95:f8:fb:
b1:99:c4:09:88:7b:18:02:02:08:16:92:00:16:56:ea:1d:8a:
85:74:3e:50:b3:05:a4:8f:ec:a9:0b:76:ce:50:3a:0c:0a:99:
e3:42:b5:79:ac:74:96:01:ae:7a:1e:db:8c:8f:90:ac:58:ee:
25:f6:bd:ae:62:32:2b:04:e0:fe:a0:06:37:05:a7:14:52:c8:
8d:4a:90:ab:f9:84:c6:f3:af:48:a5:be:2c:ef:95:76:c8:d6:
91:4c:d3:88:31:3d:a8:b1:76:71:4d:03:14:1b:56:89:be:29:
ac:ff:b2:af:6b:a2:88:14:71:23:06:e3:60:9f:a2:64:cf:81:
ec:48:55:f3:ab:87:70:b6:3c:c5:63:f0:b4:32:57:54:c4:5d:
ee:71:c3:50:31:20:88:7f:77:c6:bc:df:07:31:fa:ee:ea:22:
63:0f:2e:82:15:24:70:88:d2:24:79:6f:31:0f:ba:7a:ab:e8:
4d:46:7a:e1:8e:64:5f:2a:a2:cf:27:a2:15:80:e4:73:fe:8a:
37:5e:f2:02:b9:aa:a6:5f:2a:29:2e:c3:b5:5c:87:2a:71:6f:
3b:a2:f7:1e:7c:f2:d1:05:a7:86:6a:19:1e:43:1a:26:9a:14:
20:22:53:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:28:16 2026 by rpki-client