Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.mft
File: AXCkm2bRQaGePv12siXcoGwTjus.mft (raw, json)
Hash identifier: Nb3fcScnA2QcIXB1Wl8jOElGy6UCj3I6lx+FqzpUZmc=
Subject key identifier: 68:71:6D:77:74:38:6C:34:89:39:47:36:53:19:D9:5E:E3:53:78:71
Authority key identifier: 01:70:A4:9B:66:D1:41:A1:9E:3E:FD:76:B2:25:DC:A0:6C:13:8E:EB
Certificate issuer: /CN=0170a49b66d141a19e3efd76b225dca06c138eeb
Certificate serial: 019CEB94377C0289D8D3A74E35304CF8C6A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXCkm2bRQaGePv12siXcoGwTjus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.mft
Manifest number: 36
Signing time: Sat 14 Mar 2026 09:01:25 +0000
Manifest this update: Sat 14 Mar 2026 09:01:25 +0000
Manifest next update: Sun 15 Mar 2026 09:01:25 +0000
Files and hashes: 1: AXCkm2bRQaGePv12siXcoGwTjus.crl (hash: adiO0324pimaSuvI5nEncAvohh9I11mFRq0I+ZS8dcg=)
2: zlyCcC0Ul5zEfxfhjrFpAiSpAHQ.asa (hash: nGTbBj1nHurYFd5cQcZSNhQFoQXg2jJ4C1ZQY3Rxxv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXCkm2bRQaGePv12siXcoGwTjus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 09:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:eb:94:37:7c:02:89:d8:d3:a7:4e:35:30:4c:f8:c6:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0170a49b66d141a19e3efd76b225dca06c138eeb
Validity
Not Before: Mar 14 09:01:25 2026 GMT
Not After : Mar 15 09:01:25 2026 GMT
Subject: CN=68716d7774386c34893947365319d95ee3537871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8b:cd:ad:0b:e4:7f:ec:fc:0c:21:dd:c7:f5:
98:6b:46:e4:16:c4:e7:bc:9f:d6:ba:2e:61:17:3f:
5b:2b:64:6b:5f:2a:df:15:8e:85:a5:5b:8f:65:f2:
00:ed:c4:17:3e:d3:91:f1:43:18:f3:af:da:83:45:
ed:5f:49:5e:e4:a8:2c:99:7b:1c:b9:be:04:9b:fe:
19:1f:04:5c:76:b5:15:a5:cb:3d:34:30:56:05:af:
d9:07:f6:72:12:2c:51:70:79:12:d3:dc:18:8c:55:
72:7d:2a:ea:eb:fc:0d:c2:80:3e:32:b9:ef:76:48:
8d:93:98:31:78:62:26:b6:c1:cc:39:f2:40:3b:f1:
d5:14:f4:0a:c3:04:c7:f1:5d:9b:3d:f5:c0:8c:5f:
26:15:ba:c8:52:c8:f1:9d:d0:22:bc:03:03:b6:e4:
e4:04:fc:75:91:f5:85:b0:38:40:15:c5:b9:50:29:
c5:22:f5:6a:a2:54:27:7b:db:15:b8:1f:25:24:42:
b1:8f:70:22:b3:d4:f8:52:3b:b7:02:05:c5:b7:3f:
95:f2:82:c3:28:24:a8:1d:07:46:ce:80:11:05:2c:
d2:38:58:e2:42:7c:8f:6d:09:b2:35:ab:68:78:83:
ad:f3:3d:8e:ee:bc:1c:dd:18:a0:fd:8e:81:e1:62:
26:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:71:6D:77:74:38:6C:34:89:39:47:36:53:19:D9:5E:E3:53:78:71
X509v3 Authority Key Identifier:
keyid:01:70:A4:9B:66:D1:41:A1:9E:3E:FD:76:B2:25:DC:A0:6C:13:8E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXCkm2bRQaGePv12siXcoGwTjus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/00e11f-9209-4370-a9c8-74886e11810e/1/AXCkm2bRQaGePv12siXcoGwTjus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:17:bf:32:6e:56:f4:96:a4:a4:14:a7:52:a3:07:b5:ec:66:
97:0c:84:79:83:a9:33:3d:ce:17:d4:28:79:ba:5a:80:c0:68:
9a:ff:1a:2c:5b:2b:39:18:68:5d:0f:c9:e9:82:5f:53:fd:ed:
30:61:fb:f2:b2:96:f5:d1:d4:7d:c4:3b:e1:12:5c:2c:a2:c8:
66:b3:2c:70:a0:91:7e:a6:29:db:30:8e:12:90:f1:94:69:a5:
32:6d:fe:88:af:cc:38:6b:f6:79:df:2d:1a:69:a5:00:47:a2:
03:3e:9b:9d:a7:e4:d1:c6:5f:e6:0d:e4:9c:8c:8f:3a:9b:7a:
c8:13:37:96:72:52:58:3c:03:cf:7f:c7:8b:32:e9:33:d0:53:
66:2b:ab:3f:13:1c:6d:c8:35:a0:c1:ce:4a:7b:f5:27:1d:3d:
c8:ff:74:52:60:f7:e3:24:6f:de:f7:35:a8:9e:6f:3b:8f:62:
aa:77:24:8c:d5:e0:57:2e:5b:96:a0:ac:25:14:e3:b2:e3:c4:
4d:d9:e9:b2:0e:43:80:bb:a8:28:d4:73:c3:b4:62:fa:d3:5a:
46:1f:7f:6c:94:90:ba:cb:a9:a3:18:52:67:80:e5:a9:54:33:
df:78:d4:c2:36:c6:91:e3:6e:de:e5:36:20:ad:34:d5:06:be:
6f:db:48:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 16:48:16 2026 by rpki-client