Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
File: AJEXecdn0jZOhvTifvjF_puwEJA.mft (raw, json)
Hash identifier: er4bjweGENMF7I1Wzl19lvVBk1UP1acyZtFZJk8zYvg=
Subject key identifier: 48:15:42:06:FB:6D:C1:4D:0D:5C:DC:CF:03:5D:45:D8:3D:89:B6:F8
Authority key identifier: 00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90
Certificate issuer: /CN=00911779c767d2364e86f4e27ef8c5fe9bb01090
Certificate serial: 019EBF5ACDF6BA0958C6F9BD2F1A9A3F2772
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
Manifest number: 195B
Signing time: Sat 13 Jun 2026 05:00:59 +0000
Manifest this update: Sat 13 Jun 2026 05:00:59 +0000
Manifest next update: Sun 14 Jun 2026 05:00:59 +0000
Files and hashes: 1: 54HsmLR_UKPkm_TCTo42ipm87TY.roa (hash: 3pMQX3BegRu9d4oZoSrihtauzn+P8II7ckWGMjV6n94=)
2: AJEXecdn0jZOhvTifvjF_puwEJA.crl (hash: LOfs0Ye4ftiuZc9MUtC9X1NYecyktBAMxhIG5iae4JQ=)
3: zv7xXr_KZ8YHAf6cRm8h9Oh8AJs.roa (hash: ozB7NhhSE1yVLk2WKSYofXpTlw9D87gtz/SOBq9sRpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:cd:f6:ba:09:58:c6:f9:bd:2f:1a:9a:3f:27:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00911779c767d2364e86f4e27ef8c5fe9bb01090
Validity
Not Before: Jun 13 05:00:59 2026 GMT
Not After : Jun 14 05:00:59 2026 GMT
Subject: CN=48154206fb6dc14d0d5cdccf035d45d83d89b6f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:59:f3:29:89:40:4f:00:ec:b3:79:4b:ab:e5:
aa:22:20:65:7c:b9:88:b8:c8:69:1c:5f:4d:53:66:
ff:c1:a3:85:a9:4a:1e:ad:41:7d:1c:90:a3:75:30:
7f:1e:37:6e:b1:f2:03:7d:ab:37:ca:d7:a0:4e:8b:
3d:3f:17:18:47:b0:b4:12:7d:74:73:1a:0b:a7:c6:
38:2d:5c:71:99:d4:3c:46:80:51:de:40:cd:0a:2e:
65:53:89:32:23:50:23:d5:a1:a7:dd:5b:d8:4b:69:
b4:ab:16:7a:d6:ca:6b:21:f6:8f:a6:79:03:c1:3a:
7f:06:11:fb:cd:fa:3d:a5:ef:53:a5:b3:ea:59:1f:
19:9f:2d:38:58:d2:6e:78:2c:88:a6:ec:67:82:c6:
4d:db:e2:e8:bb:06:4d:7f:d8:26:b2:c4:90:91:d6:
9e:18:13:fd:ec:35:93:04:fc:e6:90:d6:4b:3a:35:
f7:eb:fd:70:94:72:b9:9a:ee:d7:7a:b2:15:9f:d3:
4e:3e:4e:5b:df:34:b6:fa:1d:61:25:6f:89:8d:09:
24:8f:c6:96:61:d0:43:bd:c1:57:0c:13:05:d2:8e:
09:cb:74:39:43:c2:b6:c8:92:6f:5e:6d:d0:2b:1c:
2e:27:45:7e:4b:08:dd:bf:eb:8b:7a:c2:2f:71:00:
99:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:15:42:06:FB:6D:C1:4D:0D:5C:DC:CF:03:5D:45:D8:3D:89:B6:F8
X509v3 Authority Key Identifier:
keyid:00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:d5:fc:91:fb:f6:39:3f:1d:99:c6:19:f5:1a:91:fc:af:89:
f6:99:8f:87:fb:00:84:61:ac:25:8c:17:10:ab:72:24:ff:ce:
c8:6c:e4:a0:34:f4:04:ab:50:22:0e:51:15:05:dd:51:ef:63:
f4:d4:49:9d:42:17:d1:2f:79:47:f1:64:bc:ab:48:9d:dc:79:
0b:9f:6a:64:0b:f7:0b:03:20:15:34:24:fd:51:a7:90:70:50:
d5:7e:73:78:92:c7:21:71:b5:e6:83:16:92:ec:1f:1d:6f:f3:
84:7d:2d:00:22:df:ff:9a:fa:9e:e2:2d:a8:22:a5:e4:55:7a:
6e:51:91:81:e1:58:8c:5f:a1:7b:c1:2d:05:a1:4d:03:3c:af:
28:9a:36:32:0a:1e:fa:3d:a5:d2:06:d9:59:ce:bb:83:2c:bc:
5e:f9:57:43:a6:bf:6d:45:f8:7c:56:f2:74:f8:8e:7b:de:f0:
f4:f1:2a:aa:ea:64:69:d1:b4:f6:27:30:1d:26:08:f4:d8:ff:
4c:c3:17:2f:eb:bd:da:f4:01:85:e2:9e:32:9e:dd:30:9d:e5:
25:45:c0:f0:1c:d0:50:fc:ea:dc:03:ea:68:19:c3:52:96:d1:
6f:15:d6:d7:fc:b6:08:77:9c:e8:80:86:a7:59:a0:34:e4:13:
fa:c2:f9:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:46:59 2026 by rpki-client