Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
File: axoVfiCtyjtEBnuo2NyrrmmKi-w.mft (raw, json)
Hash identifier: Br4BFJ8LiR0vYDS93ri6VwOvvcnFfwCAjAOoYf5lm0U=
Subject key identifier: 57:E6:4E:79:04:B5:8A:0D:26:CD:18:48:7B:3A:CF:27:6B:B4:C9:3B
Authority key identifier: 6B:1A:15:7E:20:AD:CA:3B:44:06:7B:A8:D8:DC:AB:AE:69:8A:8B:EC
Certificate issuer: /CN=6b1a157e20adca3b44067ba8d8dcabae698a8bec
Certificate serial: 019E9281C83FE561DD03B1812AA8C087474B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
Manifest number: 1243
Signing time: Thu 04 Jun 2026 12:00:39 +0000
Manifest this update: Thu 04 Jun 2026 12:00:39 +0000
Manifest next update: Fri 05 Jun 2026 12:00:39 +0000
Files and hashes: 1: axoVfiCtyjtEBnuo2NyrrmmKi-w.crl (hash: yc/nGoXurkcwFpXOjBToL9o/GByR7/5gEtfYzsewqjo=)
2: tp2VAgTi6H7UsWr3WWiFgob6-Yg.roa (hash: CPo8RNxtFyI7EIPAUaIjkVpI3fVg5oAaTxsNnGEN0eI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:92:81:c8:3f:e5:61:dd:03:b1:81:2a:a8:c0:87:47:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b1a157e20adca3b44067ba8d8dcabae698a8bec
Validity
Not Before: Jun 4 12:00:39 2026 GMT
Not After : Jun 5 12:00:39 2026 GMT
Subject: CN=57e64e7904b58a0d26cd18487b3acf276bb4c93b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:10:21:32:51:c3:2f:97:1b:d7:e2:9e:f6:2f:
30:3d:63:60:24:ec:fb:81:a8:f7:30:5f:0a:5d:f7:
7a:c3:88:68:19:db:73:cc:8a:6f:14:8b:f0:fd:8d:
5e:fe:26:72:48:7a:bc:81:2e:1f:c7:d5:81:3a:00:
93:9b:90:6f:41:98:c7:03:3d:72:07:2c:11:a4:40:
35:d2:9a:7c:49:c0:8f:b9:c5:4c:67:7a:5b:69:b3:
75:a0:7e:3f:d6:16:2d:d7:68:43:7c:26:ff:ce:96:
4b:df:3e:6d:a1:e5:8c:28:3c:a2:ac:2f:a1:09:43:
ae:38:79:0b:98:6d:87:51:17:e3:d7:ae:d2:16:57:
02:d1:f2:ea:0c:38:4f:df:cc:20:91:0c:82:6e:d5:
b9:af:b9:bb:a1:49:46:db:57:96:9d:8b:ed:79:cc:
d0:01:80:c8:b1:b7:9b:9f:8c:ed:e8:81:0e:87:ee:
06:4c:2b:a8:51:2e:79:94:c1:cd:05:f0:48:4e:64:
25:bc:5b:0c:3d:35:b2:d8:bc:f1:1e:a3:fe:69:d3:
88:06:c0:86:03:d6:3a:1a:12:1a:03:79:4a:c8:a5:
84:ba:96:7d:cd:bc:49:91:d7:f0:4c:13:43:af:c9:
56:e3:fd:52:a3:d0:97:45:a5:f5:49:11:d1:76:20:
02:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E6:4E:79:04:B5:8A:0D:26:CD:18:48:7B:3A:CF:27:6B:B4:C9:3B
X509v3 Authority Key Identifier:
keyid:6B:1A:15:7E:20:AD:CA:3B:44:06:7B:A8:D8:DC:AB:AE:69:8A:8B:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:1e:91:7d:01:24:fe:09:1a:d3:b7:fa:01:c9:2e:e7:22:e0:
73:1b:b8:f4:e7:6f:27:83:c2:09:64:45:b4:da:43:81:af:cf:
91:45:c8:e9:75:a7:d1:15:70:b7:f2:ee:56:0b:e3:29:d0:70:
db:4e:67:ca:ac:41:78:2a:6c:98:8e:90:44:80:86:de:0e:36:
9b:a7:da:0b:e9:0b:45:80:5e:64:52:4b:8b:0b:31:e0:ce:eb:
f9:e0:bb:8a:e8:98:2e:49:6f:e4:18:89:4c:2d:3d:da:55:f6:
69:c8:81:90:94:ca:12:90:9f:e7:ef:b3:fd:94:b9:6d:f3:c9:
fb:10:de:6d:d3:71:e3:7d:78:a4:38:95:12:f2:40:dc:73:30:
9b:e2:a8:31:24:3e:a7:81:40:aa:0a:07:e7:a2:c0:9d:85:56:
96:92:af:95:35:61:43:e8:7d:51:10:4d:21:0f:b9:8c:24:1b:
02:68:47:40:fe:64:b8:89:ff:be:55:bf:c8:dc:24:0a:a8:78:
eb:d3:0d:71:99:32:ee:03:85:4d:bf:c7:8c:98:03:1a:17:be:
69:a4:33:81:6a:71:65:dd:d6:b9:4e:fd:a0:c1:2f:ff:7e:a3:
91:9b:a7:65:6e:25:bf:5b:db:d3:f4:2e:c9:f1:56:34:4e:f8:
64:86:7a:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6Sgcg/5WHdA7GBKqjAh0dLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMWExNTdlMjBhZGNhM2I0NDA2N2JhOGQ4ZGNhYmFlNjk4
YThiZWMwHhcNMjYwNjA0MTIwMDM5WhcNMjYwNjA1MTIwMDM5WjAzMTEwLwYDVQQD
Eyg1N2U2NGU3OTA0YjU4YTBkMjZjZDE4NDg3YjNhY2YyNzZiYjRjOTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxAhMlHDL5cb1+Ke9i8wPWNgJOz7
gaj3MF8KXfd6w4hoGdtzzIpvFIvw/Y1e/iZySHq8gS4fx9WBOgCTm5BvQZjHAz1y
BywRpEA10pp8ScCPucVMZ3pbabN1oH4/1hYt12hDfCb/zpZL3z5toeWMKDyirC+h
CUOuOHkLmG2HURfj167SFlcC0fLqDDhP38wgkQyCbtW5r7m7oUlG21eWnYvteczQ
AYDIsbebn4zt6IEOh+4GTCuoUS55lMHNBfBITmQlvFsMPTWy2LzxHqP+adOIBsCG
A9Y6GhIaA3lKyKWEupZ9zbxJkdfwTBNDr8lW4/1So9CXRaX1SRHRdiACIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFfmTnkEtYoNJs0YSHs6zydrtMk7MB8GA1UdIwQY
MBaAFGsaFX4grco7RAZ7qNjcq65piovsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXhvVmZpQ3R5anRFQm51bzJOeXJybW1LaS13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC84NzAzODMtZGY5YS00NzljLThlZTEt
MzZkYzI4MDBmZGVkLzEvYXhvVmZpQ3R5anRFQm51bzJOeXJybW1LaS13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC84NzAzODMtZGY5YS00NzljLThlZTEtMzZkYzI4MDBmZGVk
LzEvYXhvVmZpQ3R5anRFQm51bzJOeXJybW1LaS13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHx6RfQEk
/gka07f6Acku5yLgcxu49OdvJ4PCCWRFtNpDga/PkUXI6XWn0RVwt/LuVgvjKdBw
205nyqxBeCpsmI6QRICG3g42m6faC+kLRYBeZFJLiwsx4M7r+eC7iuiYLklv5BiJ
TC092lX2aciBkJTKEpCf5++z/ZS5bfPJ+xDebdNx4314pDiVEvJA3HMwm+KoMSQ+
p4FAqgoH56LAnYVWlpKvlTVhQ+h9URBNIQ+5jCQbAmhHQP5kuIn/vlW/yNwkCqh4
69MNcZky7gOFTb/HjJgDGhe+aaQzgWpxZd3WuU79oMEv/36jkZunZW4lv1vb0/Qu
yfFWNE74ZIZ6hQ==
-----END CERTIFICATE-----
Generated at Thu Jun 4 17:24:13 2026 by rpki-client