Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
File: AJEXecdn0jZOhvTifvjF_puwEJA.mft (raw, json)
Hash identifier: miiXlhF9UcMei/dVKVOaclJAPb98Govf5iwHBTxgy+I=
Subject key identifier: 58:13:CC:FB:B5:5E:45:66:DA:BD:27:D2:97:A7:15:1D:92:1F:30:0A
Authority key identifier: 00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90
Certificate issuer: /CN=00911779c767d2364e86f4e27ef8c5fe9bb01090
Certificate serial: 01A0D45D1C99B12FF6F7C2429305FB37A48B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
Manifest number: 1A6F
Signing time: Thu 24 Sep 2026 17:01:06 +0000
Manifest this update: Thu 24 Sep 2026 17:01:06 +0000
Manifest next update: Fri 25 Sep 2026 17:01:06 +0000
Files and hashes: 1: 54HsmLR_UKPkm_TCTo42ipm87TY.roa (hash: 3pMQX3BegRu9d4oZoSrihtauzn+P8II7ckWGMjV6n94=)
2: AJEXecdn0jZOhvTifvjF_puwEJA.crl (hash: re2gTYr5lpGUIZIBLT+u2XQywyd7Je9s2SUQQ9RCcVw=)
3: zv7xXr_KZ8YHAf6cRm8h9Oh8AJs.roa (hash: ozB7NhhSE1yVLk2WKSYofXpTlw9D87gtz/SOBq9sRpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5d:1c:99:b1:2f:f6:f7:c2:42:93:05:fb:37:a4:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00911779c767d2364e86f4e27ef8c5fe9bb01090
Validity
Not Before: Sep 24 17:01:06 2026 GMT
Not After : Sep 25 17:01:06 2026 GMT
Subject: CN=5813ccfbb55e4566dabd27d297a7151d921f300a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ad:4f:c3:0e:cf:74:b0:52:0f:39:f1:e4:82:
68:22:4a:5e:97:37:b3:c3:4b:07:fa:8a:6a:3a:4b:
7b:dd:38:f4:d0:b0:3f:75:3b:c5:0c:53:1c:82:5c:
f5:d1:a7:01:b5:97:c3:df:15:8d:d4:27:73:2e:78:
e7:be:2d:26:f0:6f:0c:a0:04:f6:ff:65:b9:d4:9d:
38:d6:69:11:a6:41:43:ba:21:7b:a8:c5:26:e0:7b:
66:34:9e:0e:cb:8c:50:f8:c6:f9:71:00:85:bd:6e:
ac:99:49:df:d2:5e:84:1a:fb:da:5d:3b:a7:7f:70:
eb:e6:46:c3:c3:d1:41:cd:e3:d1:cc:76:13:a6:41:
60:c6:a9:31:66:9a:df:2c:dc:c8:8f:58:17:3d:49:
fd:5a:8a:c8:5f:0a:22:4b:53:2d:2b:ff:c5:c7:f9:
31:af:81:7c:24:cd:0f:d3:05:2f:f0:e6:79:f0:a6:
fc:a3:93:ab:39:fb:5e:96:2f:fa:bb:3f:ab:3d:79:
a2:1a:02:5b:72:9e:a9:db:7f:b5:3b:fc:6c:2e:80:
6e:a7:2d:17:92:10:ec:ca:74:cf:f7:ed:aa:eb:5e:
2e:77:d7:29:46:e2:1d:af:45:52:df:0b:4b:d9:b9:
79:9e:9a:17:ac:87:54:60:ef:7e:21:d2:1d:43:42:
8f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:13:CC:FB:B5:5E:45:66:DA:BD:27:D2:97:A7:15:1D:92:1F:30:0A
X509v3 Authority Key Identifier:
keyid:00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:ce:eb:34:65:eb:51:49:31:9e:a3:40:70:cf:2a:69:0d:ee:
75:45:62:8d:e6:70:07:9b:bd:6f:09:fe:9c:47:72:97:f1:6c:
67:ef:07:b4:3e:61:6e:4d:32:cd:5e:28:0d:0f:ae:ca:37:92:
ec:45:16:83:a2:b4:85:75:02:87:1a:f0:d9:97:1d:f8:19:72:
f1:6e:34:7b:a2:0d:17:f1:30:df:e9:a8:ee:4e:96:ac:60:9d:
b4:97:9c:68:4a:f2:83:c5:3f:e7:0f:90:3b:20:e2:02:5f:5f:
9b:29:b4:6c:5f:f8:21:39:7f:61:68:f7:06:21:4f:1e:44:a0:
8b:ff:d7:67:d0:30:b3:17:cd:82:48:69:51:e9:ee:89:47:ee:
66:17:99:ca:8e:ee:2d:b2:e6:48:54:82:5a:4b:7b:59:c9:5f:
f4:01:d2:35:dd:d5:44:a6:e6:f1:bb:7f:83:d8:76:c5:04:12:
47:c6:04:5c:cc:10:78:60:56:20:f5:3c:3f:e1:6f:7a:0f:9e:
58:08:31:fb:f5:03:d2:7a:23:bc:85:3b:05:d5:f3:f1:22:2e:
7c:5f:46:c8:bc:36:a1:2e:c2:98:2c:b3:25:1d:05:e7:65:04:
21:fc:78:5f:df:74:5b:0c:c1:2c:81:a1:59:3e:e6:21:4e:3f:
ca:c3:99:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:10:18 2026 by rpki-client