Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
File: axoVfiCtyjtEBnuo2NyrrmmKi-w.mft (raw, json)
Hash identifier: W3Zn2YsUTutXRJgoFtbOv5L+AiRA4IvJGd3dgSPQZtI=
Subject key identifier: 33:B9:6E:88:16:9D:20:4C:EE:78:98:28:70:E6:A3:E0:E3:AD:13:04
Authority key identifier: 6B:1A:15:7E:20:AD:CA:3B:44:06:7B:A8:D8:DC:AB:AE:69:8A:8B:EC
Certificate issuer: /CN=6b1a157e20adca3b44067ba8d8dcabae698a8bec
Certificate serial: 019CC3055155BDC10914FEBAD2450E86A0C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
Manifest number: 1153
Signing time: Fri 06 Mar 2026 12:00:31 +0000
Manifest this update: Fri 06 Mar 2026 12:00:31 +0000
Manifest next update: Sat 07 Mar 2026 12:00:31 +0000
Files and hashes: 1: axoVfiCtyjtEBnuo2NyrrmmKi-w.crl (hash: rhYe0YJzfHOaes48ElSNyoSd3BejYM9Aotai+LtkoYY=)
2: tp2VAgTi6H7UsWr3WWiFgob6-Yg.roa (hash: CPo8RNxtFyI7EIPAUaIjkVpI3fVg5oAaTxsNnGEN0eI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 10:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c3:05:51:55:bd:c1:09:14:fe:ba:d2:45:0e:86:a0:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b1a157e20adca3b44067ba8d8dcabae698a8bec
Validity
Not Before: Mar 6 12:00:31 2026 GMT
Not After : Mar 7 12:00:31 2026 GMT
Subject: CN=33b96e88169d204cee78982870e6a3e0e3ad1304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:77:de:b7:53:34:9d:49:38:e4:47:7f:c5:b4:
c0:b0:cf:3b:77:ab:e8:6e:ef:17:38:17:86:06:c3:
46:67:90:e7:45:5a:ae:33:12:b0:dc:b8:06:b0:86:
4a:28:50:86:0d:9b:3b:b6:31:b5:f8:bc:9d:f4:7b:
cc:51:26:69:85:91:07:55:00:25:42:d6:81:55:19:
c9:65:75:40:f8:d0:37:8f:5e:68:a3:3f:c0:33:eb:
01:2d:50:0b:5b:46:a7:4e:fb:60:8a:4a:a8:7e:c3:
86:83:c9:fd:3e:dc:35:8c:d0:ce:2f:da:f1:2c:7e:
32:86:a6:b6:3d:15:12:43:c9:38:53:0a:df:88:fe:
09:d3:40:90:21:00:a9:1d:6d:d5:69:40:e3:57:95:
a0:42:de:25:7e:75:4f:59:42:e8:10:45:1b:63:8d:
84:c6:cf:92:58:65:af:e7:33:c8:e5:ee:9e:63:1b:
25:e2:5f:66:80:9c:d4:59:6a:16:69:50:af:c0:1a:
29:15:a6:69:c5:4d:ba:85:7b:0f:bf:fb:25:75:28:
a9:fa:35:9e:27:a0:2f:4c:b4:95:ff:81:dd:af:2e:
40:12:aa:b4:92:82:97:01:68:bb:ea:1c:b6:4b:9d:
d7:a8:16:cf:f2:eb:f1:98:ec:fe:6d:cf:2e:2a:99:
3b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B9:6E:88:16:9D:20:4C:EE:78:98:28:70:E6:A3:E0:E3:AD:13:04
X509v3 Authority Key Identifier:
keyid:6B:1A:15:7E:20:AD:CA:3B:44:06:7B:A8:D8:DC:AB:AE:69:8A:8B:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:a3:9c:a8:a2:58:6f:88:b7:f6:2c:e9:10:b4:a6:93:69:4f:
29:41:59:35:63:07:77:06:46:2b:17:31:b8:ee:ac:14:a9:65:
0e:f1:9b:1e:8a:9d:78:9f:e4:45:69:6a:2a:0f:d5:99:06:30:
71:f1:d7:5f:b5:3e:ec:cb:26:ca:72:fe:72:4a:5c:2c:41:5b:
2b:52:58:96:0a:b7:ea:17:20:cd:f8:1c:4c:9a:a0:88:ad:24:
20:60:e5:66:3f:6b:94:87:bb:f4:4b:01:12:3b:19:10:1b:84:
63:64:71:29:7d:d8:ec:13:11:0b:cc:db:4d:f1:f9:cd:e5:a8:
67:3f:0f:8c:ea:cc:12:d3:f7:41:47:61:2f:f2:de:27:48:18:
9a:93:df:49:0d:e0:12:79:7e:e7:61:8e:5f:08:58:0c:1a:3a:
38:6a:40:7f:5e:14:ce:72:a8:0a:71:08:bb:d1:ba:54:59:c6:
65:44:31:a2:fe:22:78:89:b9:96:9f:e2:19:d4:9e:a4:a6:9d:
14:3e:09:5a:d9:53:91:b4:a0:cf:58:c8:2b:c6:17:74:e6:ca:
89:09:a8:47:37:d2:73:dc:47:01:1d:19:c2:b1:e1:6b:3b:ba:
f4:9e:5b:d6:ca:51:f6:b8:54:c7:cd:06:dd:b9:cc:79:0f:82:
ae:c2:da:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 17:58:31 2026 by rpki-client