Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
File: AJEXecdn0jZOhvTifvjF_puwEJA.mft (raw, json)
Hash identifier: h2ykOMBCPfZt7DLgOdMNpbQlHYHpbIQWV/IeIVZJvjQ=
Subject key identifier: 0C:28:DC:6D:0A:FA:16:15:3F:67:4E:92:69:F5:3B:DC:A9:45:79:70
Authority key identifier: 00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90
Certificate issuer: /CN=00911779c767d2364e86f4e27ef8c5fe9bb01090
Certificate serial: 019F8FECAB22BEFA108481F9109478C782FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
Manifest number: 19C7
Signing time: Thu 23 Jul 2026 17:01:19 +0000
Manifest this update: Thu 23 Jul 2026 17:01:19 +0000
Manifest next update: Fri 24 Jul 2026 17:01:19 +0000
Files and hashes: 1: 54HsmLR_UKPkm_TCTo42ipm87TY.roa (hash: 3pMQX3BegRu9d4oZoSrihtauzn+P8II7ckWGMjV6n94=)
2: AJEXecdn0jZOhvTifvjF_puwEJA.crl (hash: hEqLQNW4UEanGc1n8wpHCTDzKd+rVLgaLnGrJ9ffvMY=)
3: zv7xXr_KZ8YHAf6cRm8h9Oh8AJs.roa (hash: ozB7NhhSE1yVLk2WKSYofXpTlw9D87gtz/SOBq9sRpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:ab:22:be:fa:10:84:81:f9:10:94:78:c7:82:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00911779c767d2364e86f4e27ef8c5fe9bb01090
Validity
Not Before: Jul 23 17:01:19 2026 GMT
Not After : Jul 24 17:01:19 2026 GMT
Subject: CN=0c28dc6d0afa16153f674e9269f53bdca9457970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:24:0f:30:e9:51:09:6a:ba:45:62:ed:95:5a:
46:a2:4c:33:ba:29:4b:93:89:70:44:65:f6:92:70:
6c:7f:b3:ea:38:ea:b8:b1:9f:14:3f:63:94:40:61:
55:c5:71:25:6a:df:2b:51:d1:23:b6:b4:7f:34:5c:
a9:b0:76:38:53:a3:9e:e4:92:ed:e0:a6:da:cf:9b:
f1:ca:90:94:06:7d:3f:82:5b:d5:8e:2c:6e:69:fa:
9e:b0:98:b3:73:4d:36:13:8d:b3:8b:bc:bd:16:ab:
ba:0b:61:db:73:9b:09:d2:f5:2a:e4:51:d9:7b:6a:
07:d3:40:a8:db:da:ae:fa:da:32:4c:05:07:cc:60:
f1:20:5c:d6:cc:0a:90:a4:b8:2b:19:13:9f:61:c7:
e8:92:d6:ec:e3:59:72:11:3a:b4:ce:6b:b3:79:2c:
7f:d2:a6:2e:9e:9a:43:0a:d2:90:58:39:6c:f8:e5:
5e:a2:94:9c:38:86:aa:20:7c:af:49:87:db:0e:0b:
9f:98:2a:0f:ac:32:c8:b2:a2:f6:d1:48:fd:94:f4:
21:50:3f:b9:16:b1:c9:96:8a:fa:7a:b0:98:6e:ac:
72:84:ef:7f:5f:0a:f6:a9:fb:7b:e6:3e:38:ed:27:
81:a9:c5:f3:f5:c4:1d:c5:54:a0:98:91:c4:37:db:
1e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:28:DC:6D:0A:FA:16:15:3F:67:4E:92:69:F5:3B:DC:A9:45:79:70
X509v3 Authority Key Identifier:
keyid:00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:73:bd:85:77:9f:92:86:f1:38:1a:cc:9e:0b:c9:03:57:8e:
7e:b8:5d:7a:dc:a5:3e:b7:7c:c2:ef:d8:26:6d:41:dc:29:e5:
ca:07:3d:11:4b:68:98:34:02:75:ab:32:f5:a6:6e:e4:65:10:
f4:74:62:d7:a1:fc:fe:a7:5e:68:8c:a6:59:e3:39:9d:f2:c7:
73:73:99:90:79:23:60:9a:fa:dd:a5:a8:4a:19:68:af:28:bb:
25:c5:1b:a1:09:a3:ea:58:c8:c5:0a:2f:63:03:fc:ea:15:30:
5f:b3:7d:78:d3:13:0f:fd:97:e5:cf:53:cc:9f:10:bf:ac:0e:
e6:05:7c:4f:43:d8:e8:9d:47:bb:26:b0:36:86:5e:8d:23:08:
1b:0b:33:9e:2b:34:0f:67:b3:4c:96:19:2b:43:10:2b:6c:fb:
09:51:86:d1:bc:97:19:ec:5b:2c:45:43:a1:23:2e:42:cf:cd:
5c:e2:c7:59:64:45:a9:b6:f2:6f:ac:7d:38:5b:9d:4c:48:0a:
bb:07:ae:16:e8:e9:9c:fe:79:9b:3e:fe:b3:de:17:d4:7e:9b:
d2:5e:0c:0d:ad:f8:22:7c:91:24:11:29:48:41:8d:6a:52:2c:
64:53:cf:92:86:9b:00:88:22:68:79:7e:d6:7d:d4:65:be:f4:
d4:c0:a3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:13:47 2026 by rpki-client