Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
File: AJEXecdn0jZOhvTifvjF_puwEJA.mft (raw, json)
Hash identifier: jtkzd2+JU0MvFyjDnCOssZ0eeCsnHWMxBjEBUkLdu2I=
Subject key identifier: F4:9C:8B:9C:E4:5B:E7:01:26:E0:A9:31:71:F9:B1:EE:05:94:03:34
Authority key identifier: 00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90
Certificate issuer: /CN=00911779c767d2364e86f4e27ef8c5fe9bb01090
Certificate serial: 019D97E16A977BC57A041572D93E12215BA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
Manifest number: 18C2
Signing time: Thu 16 Apr 2026 20:00:25 +0000
Manifest this update: Thu 16 Apr 2026 20:00:25 +0000
Manifest next update: Fri 17 Apr 2026 20:00:25 +0000
Files and hashes: 1: 54HsmLR_UKPkm_TCTo42ipm87TY.roa (hash: 3pMQX3BegRu9d4oZoSrihtauzn+P8II7ckWGMjV6n94=)
2: AJEXecdn0jZOhvTifvjF_puwEJA.crl (hash: bY+MdJYxYvcRdPzz4p/JXkNJ87S+dCNq+8OAFdp2XXQ=)
3: zv7xXr_KZ8YHAf6cRm8h9Oh8AJs.roa (hash: ozB7NhhSE1yVLk2WKSYofXpTlw9D87gtz/SOBq9sRpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:6a:97:7b:c5:7a:04:15:72:d9:3e:12:21:5b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00911779c767d2364e86f4e27ef8c5fe9bb01090
Validity
Not Before: Apr 16 20:00:25 2026 GMT
Not After : Apr 17 20:00:25 2026 GMT
Subject: CN=f49c8b9ce45be70126e0a93171f9b1ee05940334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:44:50:02:b5:9a:be:cd:52:55:e2:8a:97:6f:
28:38:93:01:65:01:e5:3e:3d:4f:8b:f1:15:57:56:
3f:f7:dc:2f:46:54:2c:88:d4:cc:58:c2:1b:e6:e1:
99:43:38:f2:42:d0:0b:1e:fb:6c:89:d7:a0:04:1e:
27:95:2d:4e:69:2d:9b:a5:c0:01:fb:47:32:a3:75:
d8:4f:d5:bc:cd:64:b6:5b:57:eb:69:ca:97:53:5e:
25:85:f7:e5:da:ed:96:49:e5:1f:02:cb:d2:b9:3a:
41:3a:ed:8a:15:a5:1a:b4:da:5c:ee:52:ba:36:6f:
6b:41:da:b1:00:4d:e5:8a:3b:bf:fa:07:2e:1e:93:
e5:01:6e:30:af:61:4a:bb:47:12:93:09:36:98:56:
b4:4c:05:9a:4a:07:5b:1a:18:82:f7:cc:a4:3c:b0:
45:b5:84:74:1b:6c:b2:4a:81:9e:65:34:97:61:66:
92:98:f1:44:00:2b:cb:47:48:52:b3:4b:cc:ef:bb:
70:df:f7:9b:13:b7:02:70:d1:10:8b:3a:f8:6b:78:
1d:7e:f0:4c:44:d3:1f:38:e5:08:51:96:79:a4:26:
f4:2c:f1:ca:b6:f9:8a:2c:67:26:14:13:2c:61:12:
9d:fa:fb:f2:8c:e5:35:85:9d:9b:36:54:eb:0f:8b:
1a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:9C:8B:9C:E4:5B:E7:01:26:E0:A9:31:71:F9:B1:EE:05:94:03:34
X509v3 Authority Key Identifier:
keyid:00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:2c:8a:d9:e0:74:ff:e3:1b:9f:1b:66:9b:ca:3b:68:26:8b:
bd:56:11:c4:01:64:1e:0c:47:da:da:9e:fa:ce:df:3a:ef:db:
72:01:fb:82:d8:fa:6c:7f:a5:44:2f:91:bf:fd:b9:6f:01:a5:
e4:e6:0e:ce:e4:c7:49:e7:c0:0c:c7:d6:29:e5:68:ae:dd:9a:
a8:4e:50:27:e7:54:5a:f1:92:57:e3:15:60:b8:83:d2:fe:82:
89:f9:08:01:21:23:32:29:92:58:13:c5:38:ab:19:3f:e2:f7:
a5:de:df:60:f5:73:30:db:58:ea:d3:db:98:65:31:7c:c6:b4:
56:9f:65:07:37:09:ba:64:d4:1b:fe:df:9e:32:1c:9c:5c:31:
63:14:fc:00:a7:44:3a:d0:51:a5:36:04:d9:ad:11:ad:d5:95:
7f:98:79:3e:9f:a0:d2:1c:ec:ac:d9:d7:86:96:3c:8a:14:98:
1b:f1:07:5d:b6:bb:5d:2d:d0:85:5f:5d:1f:46:ec:90:97:45:
a9:13:af:7b:a7:01:41:24:04:ad:2c:11:5a:c8:e0:d5:8c:8c:
00:6c:38:38:f7:d2:0c:47:48:eb:31:33:63:7e:d2:4b:6a:45:
32:74:d2:af:66:ae:b9:b0:34:17:d6:7b:c0:1f:e6:6d:a2:2e:
c0:75:1f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:59:59 2026 by rpki-client