Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.mft
File: AXCkm2bRQaGePv12siXcoGwTjus.mft (raw, json)
Hash identifier: nRcYAJ4EDHPwzJtBOyjljttojEZV0F9AHJHnCDoxNzc=
Subject key identifier: CD:B6:AC:CC:41:18:39:7B:5B:9C:8C:3C:C2:C7:4A:AF:D5:3F:03:4A
Authority key identifier: 01:70:A4:9B:66:D1:41:A1:9E:3E:FD:76:B2:25:DC:A0:6C:13:8E:EB
Certificate issuer: /CN=0170a49b66d141a19e3efd76b225dca06c138eeb
Certificate serial: 019FF9B70AD0B427F3DC751CB4F46F4DA68D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXCkm2bRQaGePv12siXcoGwTjus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.mft
Manifest number: 01CB
Signing time: Thu 13 Aug 2026 06:02:30 +0000
Manifest this update: Thu 13 Aug 2026 06:02:30 +0000
Manifest next update: Fri 14 Aug 2026 06:02:30 +0000
Files and hashes: 1: AXCkm2bRQaGePv12siXcoGwTjus.crl (hash: F2zRb6/TMI5ArfvdKYh3AhGDQ22GRTXCxub+F0Awhp0=)
2: zlyCcC0Ul5zEfxfhjrFpAiSpAHQ.asa (hash: nGTbBj1nHurYFd5cQcZSNhQFoQXg2jJ4C1ZQY3Rxxv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXCkm2bRQaGePv12siXcoGwTjus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:b7:0a:d0:b4:27:f3:dc:75:1c:b4:f4:6f:4d:a6:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0170a49b66d141a19e3efd76b225dca06c138eeb
Validity
Not Before: Aug 13 06:02:30 2026 GMT
Not After : Aug 14 06:02:30 2026 GMT
Subject: CN=cdb6accc4118397b5b9c8c3cc2c74aafd53f034a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b9:5f:ff:0f:ec:e0:e3:bf:a7:b4:7d:d6:26:
36:c0:49:0d:e1:3e:49:64:90:7a:95:4f:73:e1:83:
8b:f9:c1:3f:61:dc:d5:11:bf:71:13:f0:53:34:72:
2c:3c:21:07:52:52:5b:15:ee:96:78:b6:1a:94:a0:
b3:fa:5d:c6:e4:12:64:99:52:bc:70:83:a2:d9:5e:
d3:1e:9c:2b:64:33:72:e1:e3:38:00:eb:b1:81:f2:
7f:5a:b2:c2:3a:ca:ce:71:c7:6f:31:1e:61:36:ed:
40:ee:d0:0b:a7:2e:e0:1b:62:d0:2a:b0:eb:a6:a4:
ce:81:21:80:46:d1:c1:86:d2:21:f4:35:48:b5:b8:
23:b1:32:5d:0b:d6:85:66:89:70:f7:c3:f2:00:a6:
43:a2:72:18:3b:37:ec:ca:2a:3d:3d:f2:78:69:2d:
13:a0:c4:92:b7:57:33:60:ab:97:43:e1:9a:3d:93:
50:d9:cf:45:a7:84:69:12:ab:59:61:e6:58:43:9c:
66:79:e9:0c:dc:3b:31:69:02:46:26:ce:b5:61:45:
cc:e4:49:36:32:a4:87:6f:ba:98:21:6f:ba:b5:a6:
12:9a:c4:b5:bb:9b:d7:33:88:de:b5:ad:64:d5:d4:
f1:5a:55:26:f8:40:54:b6:a5:d8:50:0d:06:18:34:
c6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B6:AC:CC:41:18:39:7B:5B:9C:8C:3C:C2:C7:4A:AF:D5:3F:03:4A
X509v3 Authority Key Identifier:
keyid:01:70:A4:9B:66:D1:41:A1:9E:3E:FD:76:B2:25:DC:A0:6C:13:8E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXCkm2bRQaGePv12siXcoGwTjus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:f6:dc:25:e0:a9:db:50:fe:0f:91:2b:ac:7c:04:cd:4e:2e:
e6:cb:c2:d9:c8:3d:8e:39:9a:e3:fa:19:15:64:99:e2:a5:fc:
73:ca:ed:25:27:89:55:b6:75:b3:91:dc:09:98:37:8c:37:59:
0e:42:80:84:f3:c5:0c:74:b5:6e:3b:62:47:29:3d:88:39:ce:
52:6a:ec:06:b4:84:3d:8a:e6:16:52:b4:14:ee:af:5d:68:fd:
1d:1d:03:e4:81:e8:9e:0d:7a:66:34:e2:d5:0c:9d:21:4b:cf:
97:4e:83:eb:42:fc:6e:31:55:f2:87:e6:60:23:fe:76:0b:92:
cb:54:74:e6:64:5e:6a:ac:37:f6:51:d8:54:26:b8:69:51:56:
d4:58:4c:68:54:30:4a:e9:ad:9b:fb:82:b7:ee:92:03:9f:17:
f4:17:f7:64:bd:8c:25:bf:25:4e:83:87:bf:45:70:03:1d:ba:
c7:b0:b8:19:f3:f9:08:29:72:64:1d:2a:49:f2:71:13:74:ce:
97:10:e9:09:6c:37:1f:90:49:69:ca:93:c9:25:ad:09:7f:f2:
37:36:93:77:ac:08:74:ed:c2:99:04:bf:e2:a3:f2:56:ff:e2:
af:1f:6d:20:d5:a8:20:ed:6e:91:19:21:53:91:fe:91:1b:10:
c9:ce:60:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:02:35 2026 by rpki-client