Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.mft
File: AXCkm2bRQaGePv12siXcoGwTjus.mft (raw, json)
Hash identifier: d4WdpQHK2IcJXDgAAEkomtDIx9Z05NR78QTijzatjbA=
Subject key identifier: 40:69:AC:2E:5A:73:36:96:F8:EF:63:6A:B4:EC:22:A8:D6:82:41:C6
Authority key identifier: 01:70:A4:9B:66:D1:41:A1:9E:3E:FD:76:B2:25:DC:A0:6C:13:8E:EB
Certificate issuer: /CN=0170a49b66d141a19e3efd76b225dca06c138eeb
Certificate serial: 019DDCFAFB6C5B98B2FDF662BD05698B117E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXCkm2bRQaGePv12siXcoGwTjus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.mft
Manifest number: B3
Signing time: Thu 30 Apr 2026 06:02:09 +0000
Manifest this update: Thu 30 Apr 2026 06:02:09 +0000
Manifest next update: Fri 01 May 2026 06:02:09 +0000
Files and hashes: 1: AXCkm2bRQaGePv12siXcoGwTjus.crl (hash: b5lBOff7v5zCatkHY5klVUJu6WZj85s0aU79v9kh1Xg=)
2: zlyCcC0Ul5zEfxfhjrFpAiSpAHQ.asa (hash: nGTbBj1nHurYFd5cQcZSNhQFoQXg2jJ4C1ZQY3Rxxv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXCkm2bRQaGePv12siXcoGwTjus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 06:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dc:fa:fb:6c:5b:98:b2:fd:f6:62:bd:05:69:8b:11:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0170a49b66d141a19e3efd76b225dca06c138eeb
Validity
Not Before: Apr 30 06:02:09 2026 GMT
Not After : May 1 06:02:09 2026 GMT
Subject: CN=4069ac2e5a733696f8ef636ab4ec22a8d68241c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:55:e7:2f:82:79:42:72:f6:10:09:0e:c9:ea:
e3:d6:9c:56:93:f9:80:d7:d2:17:36:49:53:89:60:
18:3c:82:7f:19:1f:93:e4:25:44:45:f8:13:ac:d3:
59:71:98:8b:32:06:f0:3a:ad:c1:b7:0e:d4:c1:b3:
e5:0f:59:54:f1:e8:8b:58:5e:85:62:fa:69:51:71:
6c:d1:f5:bd:13:ec:fd:77:6f:2d:83:c4:96:d3:e1:
a6:39:9f:b2:d3:c3:5c:35:c7:98:08:1a:ff:db:39:
67:8f:14:c0:ec:a2:30:e5:5e:78:d4:7e:3c:69:7f:
65:2d:82:e0:bf:13:07:b3:0f:06:7b:36:43:12:5f:
7e:6c:be:96:1d:60:9e:21:d0:1b:08:e2:b3:8c:3c:
bb:d3:dc:a6:f4:2f:7a:21:cd:51:b7:f2:db:5c:98:
1b:d1:4b:6a:21:09:fd:87:34:85:3a:40:c8:d2:13:
7f:c8:a4:0c:14:02:46:29:f5:35:08:4f:93:bd:d2:
31:98:65:60:62:e7:56:de:cb:c3:da:cc:f0:8b:5a:
cb:6f:91:88:23:e8:3f:bf:85:16:c6:fb:89:2c:3b:
37:5a:b9:90:92:0b:b9:3f:84:53:34:93:aa:48:a3:
f8:f9:22:29:ac:b8:f2:2e:39:49:c9:9b:25:a6:55:
84:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:69:AC:2E:5A:73:36:96:F8:EF:63:6A:B4:EC:22:A8:D6:82:41:C6
X509v3 Authority Key Identifier:
keyid:01:70:A4:9B:66:D1:41:A1:9E:3E:FD:76:B2:25:DC:A0:6C:13:8E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXCkm2bRQaGePv12siXcoGwTjus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:f8:3b:a1:40:85:f6:e5:84:a0:9a:5a:71:55:a2:5b:03:3c:
3c:8b:69:97:c2:61:e9:1a:4a:70:6a:19:35:3a:a6:60:c2:f6:
cc:4f:33:33:ee:3e:36:15:28:fe:c3:54:38:2e:9c:0e:35:b9:
b1:e5:52:81:fc:47:a9:74:0c:86:1b:29:b0:ec:76:47:09:db:
9a:15:de:64:84:dc:2f:f9:f8:1a:09:59:97:88:a6:21:4a:c4:
a4:aa:52:d0:b7:8f:b2:ef:3d:8d:0b:d1:a3:83:bd:ba:01:78:
e1:83:86:36:8c:08:54:e7:fb:e5:72:24:2f:ee:40:ae:8c:16:
a4:c9:bf:1a:72:4f:cf:d5:16:4d:14:a5:e7:ce:c5:6d:86:c4:
3a:49:45:ef:bf:fc:d0:cf:71:27:48:30:cd:9d:b6:73:6c:f5:
60:ba:96:3c:68:1b:0c:53:96:23:71:44:55:0f:88:a8:34:33:
8d:0b:4f:60:cd:1f:e4:7c:86:8e:1f:52:42:77:75:ad:b7:26:
b2:0a:79:99:56:cb:d1:4a:0c:55:d0:47:4a:b8:25:b9:39:7d:
2f:80:21:5a:89:d7:50:b1:86:0c:92:9c:03:c8:57:b3:bc:bb:
92:7b:ff:10:4f:8d:83:20:50:d6:3e:df:84:55:be:32:f5:71:
4f:6e:29:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:58:34 2026 by rpki-client