Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
File: AJEXecdn0jZOhvTifvjF_puwEJA.mft (raw, json)
Hash identifier: gXvV3VSrlfT0tusgcI0sOvFgZHoj+MfEYF18xsrXksw=
Subject key identifier: E6:AC:3C:AF:50:78:80:3C:A7:88:89:74:8A:86:7C:B5:53:1A:5C:69
Authority key identifier: 00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90
Certificate issuer: /CN=00911779c767d2364e86f4e27ef8c5fe9bb01090
Certificate serial: 01A0C4E959D78D2E91C0413B4FE41181F876
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
Manifest number: 1A67
Signing time: Mon 21 Sep 2026 17:00:22 +0000
Manifest this update: Mon 21 Sep 2026 17:00:22 +0000
Manifest next update: Tue 22 Sep 2026 17:00:22 +0000
Files and hashes: 1: 54HsmLR_UKPkm_TCTo42ipm87TY.roa (hash: 3pMQX3BegRu9d4oZoSrihtauzn+P8II7ckWGMjV6n94=)
2: AJEXecdn0jZOhvTifvjF_puwEJA.crl (hash: U/ECqJBdZzu3P6PdgJ3YoYuWAuuhWhJh05r5Bhlaz0Q=)
3: zv7xXr_KZ8YHAf6cRm8h9Oh8AJs.roa (hash: ozB7NhhSE1yVLk2WKSYofXpTlw9D87gtz/SOBq9sRpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:e9:59:d7:8d:2e:91:c0:41:3b:4f:e4:11:81:f8:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00911779c767d2364e86f4e27ef8c5fe9bb01090
Validity
Not Before: Sep 21 17:00:22 2026 GMT
Not After : Sep 22 17:00:22 2026 GMT
Subject: CN=e6ac3caf5078803ca78889748a867cb5531a5c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:7c:4f:17:72:e9:92:fc:46:b5:b8:14:6d:91:
e0:fe:c7:4b:95:2f:54:88:f8:12:56:a2:f4:52:d9:
98:30:48:e0:83:66:08:c7:3d:f1:2b:cd:60:f7:fd:
31:ad:06:9d:90:95:bf:cf:61:1b:3e:b1:fe:44:dc:
f1:15:36:65:bf:54:c2:f3:00:92:61:65:1e:9c:1e:
f7:d5:ca:a2:82:31:f3:af:ee:48:bd:5a:53:14:95:
c4:f6:38:92:30:75:f9:74:77:7a:bd:87:d0:d1:db:
e9:90:31:b9:35:58:87:9c:ad:cf:00:67:3f:91:3e:
01:0c:31:ca:7d:da:e1:bc:28:01:9a:00:b1:ed:6a:
5e:8d:e5:00:2d:9d:e3:9e:f3:95:da:7b:2b:71:53:
85:a9:e3:4d:7c:e8:cf:83:7f:df:bc:fe:76:3f:4a:
46:5f:a3:10:87:3a:ee:cb:fb:36:df:4c:05:c1:9e:
f6:b0:7c:13:23:93:c7:3a:94:f8:c0:0e:1c:0d:f6:
13:89:ea:5a:d8:c4:76:80:0e:f3:61:29:f4:c2:51:
9c:aa:22:14:36:71:fa:87:32:46:01:f8:90:49:88:
8e:9d:6b:b7:38:31:3f:f7:92:9c:17:42:38:e9:0c:
2b:5a:14:ca:e4:f9:1b:e7:33:0f:99:76:0d:05:29:
e8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:AC:3C:AF:50:78:80:3C:A7:88:89:74:8A:86:7C:B5:53:1A:5C:69
X509v3 Authority Key Identifier:
keyid:00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:49:c7:dd:20:df:61:68:19:88:b8:42:02:c9:e0:51:cd:a8:
e0:9b:79:4d:f5:73:5b:9b:5e:52:71:d4:22:81:e3:58:82:bf:
9d:10:70:3d:8d:80:52:d5:70:d2:9d:6d:73:8b:37:d9:0f:8f:
7a:6d:30:ad:57:ed:8a:f5:30:53:eb:7f:1f:b7:6a:b2:87:ba:
cf:fb:1a:70:12:d3:2f:40:f4:8a:01:d3:e8:4f:85:cd:c7:8c:
08:74:2d:de:ef:19:46:9c:80:38:1c:3d:fd:a2:bb:6d:bb:51:
a3:90:fc:ef:95:15:25:3e:bb:55:4b:33:b4:0f:25:63:57:4f:
a8:a1:8c:02:43:d4:2c:af:e5:25:b1:5e:09:73:45:c3:71:0d:
63:81:81:90:39:4e:f0:0a:e2:c1:38:5c:de:18:8c:e2:27:dd:
cf:b3:13:a5:19:7d:72:de:2a:0c:7c:2b:29:ae:4c:de:ea:ac:
b8:8d:68:f4:dd:7a:2f:17:9a:58:56:36:60:af:6c:43:22:1b:
10:39:54:b2:91:a3:56:76:e9:fe:36:c9:c6:8b:13:02:07:95:
64:57:80:33:a0:1c:98:a7:e2:ae:cc:69:9a:d2:9d:e6:b9:6f:
4b:8c:ca:42:d2:91:a3:e3:82:3a:c2:e0:e9:d1:0d:a3:24:23:
88:9a:25:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:57:58 2026 by rpki-client