Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.mft
File: AXCkm2bRQaGePv12siXcoGwTjus.mft (raw, json)
Hash identifier: Q94ZyL3kSojl6djZZkspNtPaQ09id+SXg0vMUlRlGss=
Subject key identifier: 13:6A:10:B8:44:DC:F4:F2:5C:E3:77:FC:3C:9B:96:F2:A0:EE:6B:E1
Authority key identifier: 01:70:A4:9B:66:D1:41:A1:9E:3E:FD:76:B2:25:DC:A0:6C:13:8E:EB
Certificate issuer: /CN=0170a49b66d141a19e3efd76b225dca06c138eeb
Certificate serial: 01A0E36270143D5DECC26CB64F3A64108A46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXCkm2bRQaGePv12siXcoGwTjus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.mft
Manifest number: 0244
Signing time: Sun 27 Sep 2026 15:01:14 +0000
Manifest this update: Sun 27 Sep 2026 15:01:14 +0000
Manifest next update: Mon 28 Sep 2026 15:01:14 +0000
Files and hashes: 1: AXCkm2bRQaGePv12siXcoGwTjus.crl (hash: I93C6ukcQpQdY02ARpnO0sZ2+nqwxnkSIyXxakBn2XQ=)
2: zlyCcC0Ul5zEfxfhjrFpAiSpAHQ.asa (hash: nGTbBj1nHurYFd5cQcZSNhQFoQXg2jJ4C1ZQY3Rxxv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXCkm2bRQaGePv12siXcoGwTjus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:62:70:14:3d:5d:ec:c2:6c:b6:4f:3a:64:10:8a:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0170a49b66d141a19e3efd76b225dca06c138eeb
Validity
Not Before: Sep 27 15:01:14 2026 GMT
Not After : Sep 28 15:01:14 2026 GMT
Subject: CN=136a10b844dcf4f25ce377fc3c9b96f2a0ee6be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:39:80:9c:97:87:8a:a3:d3:08:5d:82:22:68:
f9:08:4b:b4:87:be:5c:fc:ee:ec:35:07:4f:33:b8:
63:6f:ae:07:7d:63:6f:fb:f2:67:4d:55:22:ba:b4:
17:20:3a:a9:3b:84:68:ec:22:31:14:b9:da:34:f8:
4d:bb:f7:eb:14:d2:e5:51:78:5a:bd:7d:2b:f1:f2:
cc:5d:31:33:0a:9b:ae:78:d0:84:5e:4a:d2:a7:84:
3d:dd:e9:5b:3d:39:19:0c:d4:0b:be:e3:10:c3:52:
1a:30:04:53:43:a4:8b:b0:da:48:ba:ea:1c:75:15:
9c:b3:66:0b:44:d7:bf:48:87:04:b3:9d:71:83:dc:
e5:81:57:de:4c:83:e5:1c:76:fa:d2:1d:fe:b7:70:
f6:13:7f:fd:c8:93:98:90:a2:e4:db:4c:c0:34:91:
ef:a6:4f:23:e9:b5:db:40:f9:10:f6:bb:26:91:48:
cd:61:17:da:70:15:ad:9f:7e:87:6e:f1:fd:ef:98:
de:7a:ce:c9:68:1a:e4:73:7c:fc:30:04:13:62:a5:
b4:eb:ab:1a:30:5e:35:df:69:50:a3:7b:4f:a0:03:
65:79:69:89:57:96:89:86:2e:2e:c2:df:8a:8e:1a:
bb:fd:5a:ca:b7:65:71:7f:d9:5b:1b:19:e7:9a:3f:
f8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:6A:10:B8:44:DC:F4:F2:5C:E3:77:FC:3C:9B:96:F2:A0:EE:6B:E1
X509v3 Authority Key Identifier:
keyid:01:70:A4:9B:66:D1:41:A1:9E:3E:FD:76:B2:25:DC:A0:6C:13:8E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXCkm2bRQaGePv12siXcoGwTjus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:f3:e7:0e:0b:73:ba:c5:c3:ec:30:b2:c9:87:be:b0:b7:bb:
9e:a2:ab:a8:bc:15:a0:df:1a:99:59:9c:93:a6:4b:bd:6d:b0:
16:de:eb:c4:d3:6d:d3:b7:1f:3b:99:1e:5d:77:35:5e:0c:77:
d4:1a:e0:c0:02:74:1f:9a:06:49:cd:92:5d:ef:6b:8f:5d:1b:
2c:fc:69:72:0b:a3:e8:49:fb:45:ce:e5:8e:2f:30:18:6a:c8:
bb:ff:24:d6:72:db:5b:37:cb:20:6c:06:bb:47:79:d8:81:d4:
87:50:1f:b9:61:74:91:17:9d:59:2a:ba:5c:0d:03:29:55:20:
ae:31:83:cd:ae:40:8a:72:1e:08:65:ef:b2:2d:b7:90:80:8f:
fb:57:a0:fa:23:26:3c:10:80:fa:50:0b:f8:c6:8a:4c:2e:1c:
f1:d6:f2:9e:52:8c:76:76:04:a3:42:da:35:7f:30:7e:95:08:
d6:75:44:5f:ea:71:c0:62:96:61:bc:d8:ae:d2:75:73:82:51:
cb:3a:66:3f:bf:4f:67:16:17:0c:0e:4e:15:cb:b7:8b:df:59:
35:f6:e0:d7:b6:d1:d1:cf:74:57:e8:f8:85:be:6d:d7:a9:9f:
7f:d5:e0:0e:c0:a9:4d:55:77:32:5a:21:83:cb:a3:91:0c:bd:
09:18:90:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:47:22 2026 by rpki-client