Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
File: AJEXecdn0jZOhvTifvjF_puwEJA.mft (raw, json)
Hash identifier: P7pHf2caAWk8Tu8idSYAQdx6rMVjn8tu8JPAOyz4WFk=
Subject key identifier: 21:D9:74:79:E8:63:71:9C:F4:2E:D9:85:2D:FC:90:74:14:9A:68:06
Authority key identifier: 00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90
Certificate issuer: /CN=00911779c767d2364e86f4e27ef8c5fe9bb01090
Certificate serial: 019CAA5878005E138A13853349BAE99F2E95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 17:00:50 +0000
Manifest this update: Sun 01 Mar 2026 17:00:50 +0000
Manifest next update: Mon 02 Mar 2026 17:00:50 +0000
Files and hashes: 1: 54HsmLR_UKPkm_TCTo42ipm87TY.roa (hash: 3pMQX3BegRu9d4oZoSrihtauzn+P8II7ckWGMjV6n94=)
2: AJEXecdn0jZOhvTifvjF_puwEJA.crl (hash: YLHvYLzNLDlNxLpmWHZQI9j8nftkx5Jap0DjmDnwd8s=)
3: zv7xXr_KZ8YHAf6cRm8h9Oh8AJs.roa (hash: ozB7NhhSE1yVLk2WKSYofXpTlw9D87gtz/SOBq9sRpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:78:00:5e:13:8a:13:85:33:49:ba:e9:9f:2e:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00911779c767d2364e86f4e27ef8c5fe9bb01090
Validity
Not Before: Mar 1 17:00:50 2026 GMT
Not After : Mar 2 17:00:50 2026 GMT
Subject: CN=21d97479e863719cf42ed9852dfc9074149a6806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:29:28:0f:0b:98:79:b9:9a:41:71:a7:c9:25:
9e:01:fe:da:02:df:dd:41:ee:6b:cd:3b:24:5c:a8:
68:68:25:9c:16:86:8d:8a:34:58:89:86:71:c5:bd:
92:c1:fb:81:43:00:48:88:a0:1f:8f:0f:1f:f8:38:
2e:8a:c5:f6:16:6b:92:80:a1:72:9b:2d:74:66:50:
e4:ae:c4:cd:38:49:9c:8e:a7:24:10:9f:68:fe:a7:
f0:4f:1a:7c:f1:93:df:61:b1:fb:88:95:07:f8:9a:
01:c9:0a:1a:fc:77:5e:dd:84:ea:b3:e2:72:a8:24:
f0:3d:3b:e0:ca:18:e5:5e:83:01:73:c0:9a:b2:4f:
0a:74:17:24:cf:4e:7d:a3:03:37:6d:2b:1f:a3:9e:
01:e0:44:47:e0:40:82:d6:90:3f:d7:aa:7c:67:c7:
c8:f9:a2:58:fc:1e:24:8b:06:62:fa:ba:21:d1:3c:
d0:48:09:18:2f:2b:08:01:2f:9d:fd:82:9e:a5:a7:
4a:f1:3e:ae:d5:14:11:a8:12:a0:4d:a5:a0:ce:8f:
e3:ee:5c:7b:fd:3b:7a:e7:c1:b7:3b:84:64:00:cf:
2a:e4:bd:e1:9e:f2:61:30:f5:6f:f9:92:6f:eb:f7:
48:c0:61:97:0e:20:b4:bf:c3:3a:3d:66:00:8a:31:
cd:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D9:74:79:E8:63:71:9C:F4:2E:D9:85:2D:FC:90:74:14:9A:68:06
X509v3 Authority Key Identifier:
keyid:00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:05:b1:14:66:5b:68:80:c2:40:1d:0c:6b:dc:c4:a1:07:fa:
38:1f:b2:87:97:b3:13:94:d7:91:3b:5c:a8:c1:a1:e4:3a:c1:
e1:ff:b0:c3:fe:53:b6:e9:4e:47:cc:78:b6:2a:a7:bd:51:32:
7b:e2:4d:de:15:b2:70:4d:c9:6f:81:a5:89:23:a1:fe:55:65:
34:f9:57:53:10:88:d5:52:63:fb:48:27:a6:32:91:5e:6a:dd:
55:5e:14:06:42:ba:e3:30:70:ca:31:48:62:6e:35:40:c5:70:
5b:bb:13:cc:f2:77:3a:37:ec:ec:5f:4c:44:aa:16:f4:47:58:
e5:6a:5d:f5:74:c3:00:91:36:02:ba:1b:e3:dc:c5:65:0c:ec:
5a:7e:5a:00:84:e8:71:d1:f9:3a:63:43:16:7f:a2:b5:68:e3:
5a:1c:ea:e1:77:26:3f:30:b4:c5:a9:97:b0:9e:40:e7:9a:dd:
1e:23:8c:0b:0f:3d:9d:c9:10:d4:77:60:2d:04:65:71:90:41:
5f:c8:e9:25:d4:b1:1f:d2:09:e1:01:d1:24:06:8d:11:52:03:
04:0c:61:d6:27:af:c5:09:2e:4c:4c:00:47:ad:e9:d2:86:2e:
c4:12:ac:9b:02:6b:fb:87:7c:bd:d9:e1:30:63:92:fe:d2:72:
c2:b8:5a:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWHgAXhOKE4UzSbrpny6VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwOTExNzc5Yzc2N2QyMzY0ZTg2ZjRlMjdlZjhjNWZlOWJi
MDEwOTAwHhcNMjYwMzAxMTcwMDUwWhcNMjYwMzAyMTcwMDUwWjAzMTEwLwYDVQQD
EygyMWQ5NzQ3OWU4NjM3MTljZjQyZWQ5ODUyZGZjOTA3NDE0OWE2ODA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SkoDwuYebmaQXGnySWeAf7aAt/d
Qe5rzTskXKhoaCWcFoaNijRYiYZxxb2SwfuBQwBIiKAfjw8f+DguisX2FmuSgKFy
my10ZlDkrsTNOEmcjqckEJ9o/qfwTxp88ZPfYbH7iJUH+JoByQoa/Hde3YTqs+Jy
qCTwPTvgyhjlXoMBc8Cask8KdBckz059owM3bSsfo54B4ERH4ECC1pA/16p8Z8fI
+aJY/B4kiwZi+roh0TzQSAkYLysIAS+d/YKepadK8T6u1RQRqBKgTaWgzo/j7lx7
/Tt658G3O4RkAM8q5L3hnvJhMPVv+ZJv6/dIwGGXDiC0v8M6PWYAijHNuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCHZdHnoY3Gc9C7ZhS38kHQUmmgGMB8GA1UdIwQY
MBaAFACRF3nHZ9I2Tob04n74xf6bsBCQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUpFWGVjZG4walpPaHZUaWZ2akZfcHV3RUpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8yNTlmYmUtMjg1NS00ZTE5LTkxOGYt
NjJjMWIxZmYzYTI2LzEvQUpFWGVjZG4walpPaHZUaWZ2akZfcHV3RUpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8yNTlmYmUtMjg1NS00ZTE5LTkxOGYtNjJjMWIxZmYzYTI2
LzEvQUpFWGVjZG4walpPaHZUaWZ2akZfcHV3RUpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhQWxFGZb
aIDCQB0Ma9zEoQf6OB+yh5ezE5TXkTtcqMGh5DrB4f+ww/5TtulOR8x4tiqnvVEy
e+JN3hWycE3Jb4GliSOh/lVlNPlXUxCI1VJj+0gnpjKRXmrdVV4UBkK64zBwyjFI
Ym41QMVwW7sTzPJ3Ojfs7F9MRKoW9EdY5Wpd9XTDAJE2Arob49zFZQzsWn5aAITo
cdH5OmNDFn+itWjjWhzq4XcmPzC0xamXsJ5A55rdHiOMCw89nckQ1HdgLQRlcZBB
X8jpJdSxH9IJ4QHRJAaNEVIDBAxh1ievxQkuTEwAR63p0oYuxBKsmwJr+4d8vdnh
MGOS/tJywrhapw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:27 2026 by rpki-client