Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
File: axoVfiCtyjtEBnuo2NyrrmmKi-w.mft (raw, json)
Hash identifier: SXLwc5qOlz0eaMtfp7MQX+QomWldM4XIS2CtvSCZfyQ=
Subject key identifier: D2:2A:A4:E5:D6:AF:B4:75:AB:F9:AB:3B:01:B2:1B:04:11:31:9D:54
Authority key identifier: 6B:1A:15:7E:20:AD:CA:3B:44:06:7B:A8:D8:DC:AB:AE:69:8A:8B:EC
Certificate issuer: /CN=6b1a157e20adca3b44067ba8d8dcabae698a8bec
Certificate serial: 01A06D956469F15C923A5FE09F0EE3311B55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
Manifest number: 1339
Signing time: Fri 04 Sep 2026 18:01:42 +0000
Manifest this update: Fri 04 Sep 2026 18:01:42 +0000
Manifest next update: Sat 05 Sep 2026 18:01:42 +0000
Files and hashes: 1: axoVfiCtyjtEBnuo2NyrrmmKi-w.crl (hash: gk0dmWTB2KWd4oi6HNtiUr8Jg9R4frTkgExGQMaKwNI=)
2: tp2VAgTi6H7UsWr3WWiFgob6-Yg.roa (hash: CPo8RNxtFyI7EIPAUaIjkVpI3fVg5oAaTxsNnGEN0eI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 18:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:95:64:69:f1:5c:92:3a:5f:e0:9f:0e:e3:31:1b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b1a157e20adca3b44067ba8d8dcabae698a8bec
Validity
Not Before: Sep 4 18:01:42 2026 GMT
Not After : Sep 5 18:01:42 2026 GMT
Subject: CN=d22aa4e5d6afb475abf9ab3b01b21b0411319d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:72:f5:b7:ab:d1:a7:9d:74:2c:c1:6b:a2:d1:
17:73:4a:4a:00:3b:e2:f3:2b:a1:87:ff:c7:19:ce:
35:81:55:f8:5c:78:04:42:b8:ed:a3:73:82:05:1a:
aa:96:7f:e0:46:72:5f:07:bd:9a:62:07:5e:72:15:
8c:47:b0:4c:7e:08:02:bf:80:91:70:b6:fa:bc:ed:
1c:df:c6:14:b3:cc:5e:f1:59:fd:16:fb:09:35:69:
96:19:ac:1e:00:14:a1:14:40:32:12:ec:a1:77:4f:
65:6e:e4:2d:83:f2:ee:71:0a:34:71:02:63:53:b8:
5f:be:77:8b:16:bb:f7:58:13:be:9f:0c:ca:ea:30:
f9:d0:46:56:72:f8:ea:e6:60:ba:f3:fe:b8:55:a4:
b5:01:c2:31:e8:f0:10:7b:80:3c:de:a6:7c:bc:47:
ff:80:d5:9a:8a:7b:3a:dc:b0:ef:a8:b5:51:91:35:
1c:6d:ad:30:16:ea:31:8c:88:e1:ef:dc:36:51:1d:
89:15:0c:04:aa:c5:a3:d0:0a:fc:ee:df:55:ee:87:
da:56:f0:d9:63:1e:de:d8:59:c6:1c:58:17:45:fd:
52:2c:f6:e9:f7:ec:f7:d4:82:20:dc:81:55:5e:11:
26:17:c0:f0:e1:5e:ab:23:77:3e:2f:87:96:4a:c1:
8d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:2A:A4:E5:D6:AF:B4:75:AB:F9:AB:3B:01:B2:1B:04:11:31:9D:54
X509v3 Authority Key Identifier:
keyid:6B:1A:15:7E:20:AD:CA:3B:44:06:7B:A8:D8:DC:AB:AE:69:8A:8B:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:26:61:eb:14:0a:40:49:c0:1d:5b:ad:ae:f7:19:0d:a1:24:
6f:e5:c5:97:cd:8f:8d:45:09:3f:c3:3c:5c:84:92:6f:5a:85:
06:98:62:05:4f:02:13:62:d0:b1:08:e3:4e:15:7c:96:96:89:
b8:c8:2f:4a:8d:39:a3:0d:3f:70:bc:4c:39:11:33:a6:32:8f:
a5:f3:75:91:06:b4:50:cc:94:c3:d2:da:76:d1:ed:9e:ef:30:
ae:51:e4:3c:69:b1:98:a9:66:c6:58:34:71:15:c8:af:cd:ad:
c6:e3:0c:f9:43:86:7a:6e:6d:b6:0f:8a:37:a1:13:1d:2b:56:
33:b1:9a:cf:96:77:44:3d:0d:e9:f6:be:63:84:7d:13:39:d1:
00:c3:a6:49:f6:12:da:b2:8c:cf:74:67:6c:bb:cc:5f:46:97:
5c:23:d6:94:c5:ec:9a:b1:90:60:eb:a6:63:c7:29:39:db:92:
a2:18:d8:27:27:02:ad:69:29:96:97:d8:12:df:49:37:34:05:
17:6e:d3:10:20:d0:91:81:0f:0c:69:c4:ef:35:ef:86:ae:9e:
15:32:34:72:54:b8:eb:39:e6:ac:93:66:7e:d5:df:b2:4d:a4:
18:5d:48:b3:5a:83:43:b2:76:51:76:97:ad:a7:5f:e8:3f:e5:
a0:69:97:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:38:59 2026 by rpki-client