Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
File: AJEXecdn0jZOhvTifvjF_puwEJA.mft (raw, json)
Hash identifier: HjsQHSYUBOpDh2tD9Lw4Ie4OyBa729NqQQb5UC/Ml/I=
Subject key identifier: 05:98:DB:DF:BC:97:0B:C1:9B:7A:51:C4:B7:79:4F:83:90:97:AE:91
Authority key identifier: 00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90
Certificate issuer: /CN=00911779c767d2364e86f4e27ef8c5fe9bb01090
Certificate serial: 019D27DFE85BD3060CD499A98D25EF92C046
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 02:01:18 +0000
Manifest this update: Thu 26 Mar 2026 02:01:18 +0000
Manifest next update: Fri 27 Mar 2026 02:01:18 +0000
Files and hashes: 1: 54HsmLR_UKPkm_TCTo42ipm87TY.roa (hash: 3pMQX3BegRu9d4oZoSrihtauzn+P8II7ckWGMjV6n94=)
2: AJEXecdn0jZOhvTifvjF_puwEJA.crl (hash: OW358xXTFKgyF6DCXA4+qvLjHZthVAJvwyGMvg2Ebnc=)
3: zv7xXr_KZ8YHAf6cRm8h9Oh8AJs.roa (hash: ozB7NhhSE1yVLk2WKSYofXpTlw9D87gtz/SOBq9sRpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:e8:5b:d3:06:0c:d4:99:a9:8d:25:ef:92:c0:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00911779c767d2364e86f4e27ef8c5fe9bb01090
Validity
Not Before: Mar 26 02:01:18 2026 GMT
Not After : Mar 27 02:01:18 2026 GMT
Subject: CN=0598dbdfbc970bc19b7a51c4b7794f839097ae91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8a:93:4d:71:7a:e5:7a:e8:0c:56:61:63:91:
d3:fa:18:6f:cc:ae:44:0e:3c:71:1a:28:d0:df:9f:
e5:b0:c0:67:06:64:91:95:45:59:a6:61:a3:87:c1:
b1:0d:56:8a:e2:db:e2:e0:51:c5:d9:9b:e0:0b:75:
0d:cc:ce:3e:26:6e:0c:eb:41:88:21:58:5d:61:bd:
be:3f:c7:6e:f0:76:79:87:bd:fa:f3:05:ae:2f:a6:
d5:44:b0:ea:d9:a3:9d:2c:62:9d:2c:b3:1f:c5:62:
ba:0c:9d:c8:3e:d5:ec:c4:5b:f3:a6:e8:66:85:49:
de:90:61:eb:1b:ce:5b:6c:b7:c3:b2:ec:82:03:8a:
73:cc:1c:12:5a:ef:cc:de:1f:7d:1b:03:26:8f:28:
0e:c2:43:88:b6:ab:8f:cb:52:52:80:85:8b:b1:01:
01:22:9e:99:88:e7:25:ee:ec:73:77:6a:c1:9e:76:
64:9e:18:80:53:51:7f:2a:dc:18:08:37:9f:1e:c3:
c1:cc:20:46:f8:7a:5f:1b:27:97:11:87:a8:80:2a:
24:53:45:dd:97:8c:76:60:be:59:07:f4:45:ee:e9:
e7:a6:30:23:6f:b3:7c:17:37:1c:4c:0f:9f:52:6c:
eb:84:29:d6:17:e5:56:c3:49:31:4e:d2:3f:14:e1:
c0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:98:DB:DF:BC:97:0B:C1:9B:7A:51:C4:B7:79:4F:83:90:97:AE:91
X509v3 Authority Key Identifier:
keyid:00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:78:68:f5:8e:17:e6:b2:fd:41:f3:7e:bf:72:c9:0b:4e:fe:
0f:36:8f:24:13:5a:2e:28:f4:4f:74:7f:bb:ed:76:cd:15:c8:
13:e0:7b:05:69:87:fa:8c:e9:3f:48:c8:35:b1:ff:9e:71:9a:
01:5b:c6:03:85:15:59:07:44:a2:be:1e:72:7d:74:1a:5a:af:
b9:bc:e2:b3:ec:60:63:30:90:e2:7b:3b:b9:8e:55:a5:b2:bd:
11:98:6a:39:b4:20:05:80:f2:d6:45:0a:08:1e:38:66:6e:e0:
7e:6b:a5:5e:15:72:09:31:94:94:c2:53:14:a4:0d:65:59:ff:
8e:ff:08:5c:82:d5:02:67:11:2b:21:be:e8:92:54:23:f1:63:
e0:e8:5a:21:1a:a5:3a:be:71:ec:df:1e:a8:dd:5d:92:14:56:
01:33:28:61:15:a8:73:83:66:79:27:ff:b6:e4:f0:74:ec:17:
63:ce:3c:c6:7e:59:a0:3d:04:e0:2b:15:44:0f:ae:68:a3:14:
77:29:f1:43:7f:5b:c7:ac:8e:23:31:78:6a:2b:f6:6e:15:c5:
b4:73:3a:b3:3a:79:aa:bb:0e:61:71:55:9d:04:6f:69:1e:7a:
f9:52:02:84:0a:a6:49:02:b4:12:a8:55:ff:87:fb:17:e1:c1:
af:df:49:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:26:50 2026 by rpki-client