Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.mft
File: axJMeKp4A8OiPc1y0Nwa6uXe18w.mft (raw, json)
Hash identifier: VmmbH5tT9FkymObpweAG8u6wL2aZ6UW3i65y9vYKeRI=
Subject key identifier: A0:13:6C:78:FD:FB:23:E0:B9:F8:80:58:B6:40:0B:C5:4F:88:C9:D8
Authority key identifier: 6B:12:4C:78:AA:78:03:C3:A2:3D:CD:72:D0:DC:1A:EA:E5:DE:D7:CC
Certificate issuer: /CN=6b124c78aa7803c3a23dcd72d0dc1aeae5ded7cc
Certificate serial: 019D389C3A790B91C19DCB2D76DA6590D5E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axJMeKp4A8OiPc1y0Nwa6uXe18w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 08:00:55 +0000
Manifest this update: Sun 29 Mar 2026 08:00:55 +0000
Manifest next update: Mon 30 Mar 2026 08:00:55 +0000
Files and hashes: 1: axJMeKp4A8OiPc1y0Nwa6uXe18w.crl (hash: Ewsbxr9i8rrtdt+lPPq07Z2UWb1qVMrnSjYrWdHL+m8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.mft
rsync://rpki.ripe.net/repository/DEFAULT/axJMeKp4A8OiPc1y0Nwa6uXe18w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:3a:79:0b:91:c1:9d:cb:2d:76:da:65:90:d5:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b124c78aa7803c3a23dcd72d0dc1aeae5ded7cc
Validity
Not Before: Mar 29 08:00:55 2026 GMT
Not After : Mar 30 08:00:55 2026 GMT
Subject: CN=a0136c78fdfb23e0b9f88058b6400bc54f88c9d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9c:71:bb:86:9e:5a:d3:e6:ab:ad:1f:84:56:
f2:52:4f:52:87:89:09:21:a0:c8:52:7f:27:71:80:
b0:24:cf:46:68:43:e9:3a:86:fe:dc:52:8f:32:55:
7f:28:b2:68:52:30:2d:51:d5:c2:c9:5c:19:0f:c8:
2a:75:7e:f2:df:fd:22:88:33:2f:44:e7:21:2f:81:
01:69:81:0d:bc:4d:c6:bc:8e:78:18:ca:c3:02:3c:
74:07:92:12:73:0f:2d:60:b9:44:67:25:ba:83:9d:
4c:61:51:b2:ba:4c:d3:46:b3:dd:30:bc:fd:7a:02:
79:e6:62:54:e9:bb:94:f9:a7:e3:f7:4b:23:c8:13:
a8:7f:47:3f:10:ba:4a:ec:6a:95:34:22:81:f6:5d:
d5:78:5d:6b:4d:29:49:02:cb:99:e7:32:b0:2f:b9:
6e:28:cb:a5:08:c4:3b:8e:06:31:0f:4b:6d:d5:7a:
93:23:a2:31:55:6c:da:77:2e:77:70:67:84:a0:68:
9c:3e:90:e3:8e:94:5a:c8:35:0b:0c:b6:6b:1d:d6:
56:2f:1e:39:f7:70:70:e3:e5:71:83:60:84:33:3e:
4d:28:2e:22:74:56:8e:16:5d:37:89:1b:59:a5:54:
13:b8:e8:00:46:a8:6b:e7:c6:e9:b5:5e:a7:cd:94:
41:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:13:6C:78:FD:FB:23:E0:B9:F8:80:58:B6:40:0B:C5:4F:88:C9:D8
X509v3 Authority Key Identifier:
keyid:6B:12:4C:78:AA:78:03:C3:A2:3D:CD:72:D0:DC:1A:EA:E5:DE:D7:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axJMeKp4A8OiPc1y0Nwa6uXe18w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:d8:7e:7d:e2:2a:81:86:14:18:ea:ee:f0:d1:9c:99:3b:bd:
f1:ae:5a:24:54:fb:0f:63:53:d7:5c:cc:79:fe:0f:77:d8:18:
ff:31:d0:bc:f5:38:c3:82:5a:4f:b7:c6:a0:63:7f:0f:9a:2c:
0a:e2:1c:e1:b0:3f:0e:a2:1a:6b:d3:64:e4:20:70:92:49:dd:
f1:23:fa:db:42:81:89:03:59:0d:c1:80:2f:2e:4b:de:43:03:
e2:b2:f6:19:af:ff:e3:13:4b:e7:63:b4:85:65:d4:e2:d2:7e:
83:c2:07:a7:6c:13:2b:53:96:5c:ed:a1:79:52:8a:95:0f:d2:
f8:0b:79:75:ef:1a:12:7d:6b:10:ab:1d:9e:62:16:1c:b1:fa:
98:c7:27:6a:18:6f:eb:38:83:c8:b4:85:02:bd:9f:c3:90:c5:
8b:e3:70:b6:6f:50:ae:0f:61:b0:ae:f4:88:f5:ed:9e:9c:54:
5c:33:42:43:37:7d:21:db:b4:08:be:3c:02:47:61:6e:f5:45:
16:5b:28:b6:6b:aa:30:d3:23:31:29:fd:ee:c8:48:18:fc:13:
42:a3:14:d5:ac:b7:bd:0e:d2:83:1d:ff:af:e9:0f:93:24:ce:
ab:a4:30:40:79:4f:ad:8f:32:c2:cf:4b:99:dc:e6:04:e2:6c:
c5:a3:56:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nDp5C5HBncstdtplkNXmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMTI0Yzc4YWE3ODAzYzNhMjNkY2Q3MmQwZGMxYWVhZTVk
ZWQ3Y2MwHhcNMjYwMzI5MDgwMDU1WhcNMjYwMzMwMDgwMDU1WjAzMTEwLwYDVQQD
EyhhMDEzNmM3OGZkZmIyM2UwYjlmODgwNThiNjQwMGJjNTRmODhjOWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Jxxu4aeWtPmq60fhFbyUk9Sh4kJ
IaDIUn8ncYCwJM9GaEPpOob+3FKPMlV/KLJoUjAtUdXCyVwZD8gqdX7y3/0iiDMv
ROchL4EBaYENvE3GvI54GMrDAjx0B5IScw8tYLlEZyW6g51MYVGyukzTRrPdMLz9
egJ55mJU6buU+afj90sjyBOof0c/ELpK7GqVNCKB9l3VeF1rTSlJAsuZ5zKwL7lu
KMulCMQ7jgYxD0tt1XqTI6IxVWzady53cGeEoGicPpDjjpRayDULDLZrHdZWLx45
93Bw4+Vxg2CEMz5NKC4idFaOFl03iRtZpVQTuOgARqhr58bptV6nzZRBGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKATbHj9+yPgufiAWLZAC8VPiMnYMB8GA1UdIwQY
MBaAFGsSTHiqeAPDoj3NctDcGurl3tfMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXhKTWVLcDRBOE9pUGMxeTBOd2E2dVhlMTh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9kMzFhOTAtZGQ4Yy00ODAwLWI5MmQt
OTQzNTNmYzliMmFmLzEvYXhKTWVLcDRBOE9pUGMxeTBOd2E2dVhlMTh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9kMzFhOTAtZGQ4Yy00ODAwLWI5MmQtOTQzNTNmYzliMmFm
LzEvYXhKTWVLcDRBOE9pUGMxeTBOd2E2dVhlMTh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcdh+feIq
gYYUGOru8NGcmTu98a5aJFT7D2NT11zMef4Pd9gY/zHQvPU4w4JaT7fGoGN/D5os
CuIc4bA/DqIaa9Nk5CBwkknd8SP620KBiQNZDcGALy5L3kMD4rL2Ga//4xNL52O0
hWXU4tJ+g8IHp2wTK1OWXO2heVKKlQ/S+At5de8aEn1rEKsdnmIWHLH6mMcnahhv
6ziDyLSFAr2fw5DFi+Nwtm9Qrg9hsK70iPXtnpxUXDNCQzd9Idu0CL48AkdhbvVF
FlsotmuqMNMjMSn97shIGPwTQqMU1ay3vQ7Sgx3/r+kPkyTOq6QwQHlPrY8yws9L
mdzmBOJsxaNWtQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:00 2026 by rpki-client