Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
File: AJEXecdn0jZOhvTifvjF_puwEJA.mft (raw, json)
Hash identifier: iUhpV7hzOpzoCuxyMI3BOIMV2NRZdjDgApx3rg6VSXA=
Subject key identifier: CB:F6:9F:3C:E9:E6:0A:34:36:57:80:AA:10:91:FB:11:CC:AC:ED:7C
Authority key identifier: 00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90
Certificate issuer: /CN=00911779c767d2364e86f4e27ef8c5fe9bb01090
Certificate serial: 019E3072784CFB980FD718B111DA387665BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
Manifest number: 1911
Signing time: Sat 16 May 2026 11:01:08 +0000
Manifest this update: Sat 16 May 2026 11:01:08 +0000
Manifest next update: Sun 17 May 2026 11:01:08 +0000
Files and hashes: 1: 54HsmLR_UKPkm_TCTo42ipm87TY.roa (hash: 3pMQX3BegRu9d4oZoSrihtauzn+P8II7ckWGMjV6n94=)
2: AJEXecdn0jZOhvTifvjF_puwEJA.crl (hash: 6hR2TjGfPB4UkcEjl7LdnvJPj9SR/GnVtQqLM7o7qjA=)
3: zv7xXr_KZ8YHAf6cRm8h9Oh8AJs.roa (hash: ozB7NhhSE1yVLk2WKSYofXpTlw9D87gtz/SOBq9sRpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:78:4c:fb:98:0f:d7:18:b1:11:da:38:76:65:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00911779c767d2364e86f4e27ef8c5fe9bb01090
Validity
Not Before: May 16 11:01:08 2026 GMT
Not After : May 17 11:01:08 2026 GMT
Subject: CN=cbf69f3ce9e60a34365780aa1091fb11ccaced7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7a:7a:fa:75:a2:0b:dd:e5:ca:42:19:c3:44:
3a:63:72:ad:f0:c0:36:43:d9:ef:6c:e2:5b:2d:45:
06:83:01:8b:eb:36:ac:4f:aa:63:60:5e:2f:ed:e2:
02:89:45:e9:3e:23:02:0c:15:ed:de:e0:84:2a:07:
c3:50:b4:44:34:d1:5c:20:6c:26:ab:13:8d:35:0f:
eb:58:45:46:f5:1c:b8:dc:e6:52:0d:9e:af:03:f7:
f8:45:6f:ef:47:32:e5:0f:2f:66:58:1f:5a:18:14:
08:af:32:dc:d7:e4:2b:db:6c:00:2d:44:24:0f:fc:
f4:71:80:65:dd:b3:2b:14:bd:b0:c3:76:5b:4d:4e:
9b:55:52:a0:58:39:ee:43:e8:7e:ad:62:0e:dc:30:
a8:ef:aa:73:4c:37:e4:3d:0e:65:a8:ca:3f:60:c4:
16:97:84:41:30:95:bb:e6:38:6e:a1:a4:b4:38:bd:
06:5a:4b:76:25:6d:19:50:2b:74:c3:3e:b9:83:1a:
d5:b8:dc:6f:4d:e7:88:58:b2:3c:b9:d8:4c:d6:48:
66:c4:43:ad:dc:d3:27:a2:e3:64:2b:8d:93:49:99:
61:04:05:ab:59:10:ea:5f:cc:48:5e:87:87:19:88:
91:46:61:4b:0f:0e:12:6b:10:89:66:44:78:7f:e3:
5c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F6:9F:3C:E9:E6:0A:34:36:57:80:AA:10:91:FB:11:CC:AC:ED:7C
X509v3 Authority Key Identifier:
keyid:00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:c3:26:bd:7f:8d:c3:f3:2a:a0:88:66:75:a8:2c:d3:c7:73:
6c:f7:2a:87:17:84:ab:03:18:a9:be:09:70:c4:73:2e:39:04:
16:5f:0c:eb:55:8f:6b:2a:b6:db:e0:2c:77:d6:4e:c0:df:0f:
27:24:db:cc:6c:a5:58:3c:0c:3c:1d:0d:a2:90:94:fa:35:b9:
8b:bd:cd:54:14:43:d5:dd:09:87:c8:62:a9:8a:9e:b7:dd:c3:
d3:73:9e:c8:03:f1:ec:c6:7f:5b:6b:a7:18:43:8e:3d:0d:bc:
e6:7e:f2:c8:49:4c:e0:9b:8d:f9:5f:ad:fd:19:b4:74:f6:3d:
6b:74:b6:50:fb:fd:71:68:80:31:63:b5:7e:12:ee:a8:51:11:
0a:c2:37:eb:b0:9e:16:32:34:f3:3c:ab:a8:8e:48:d8:d7:5b:
be:ca:54:c3:b9:df:9d:1a:08:15:b7:af:91:a0:25:83:e9:b2:
56:87:27:23:c3:b0:3d:da:bc:4b:c9:2e:23:9d:96:31:61:83:
96:18:a7:cb:4d:44:a3:6b:0b:f5:a6:db:89:bc:7a:59:6f:9b:
f1:d3:e7:16:95:b3:bb:1b:70:3f:dc:1a:a2:ce:cc:4f:a6:09:
6b:81:df:81:d5:6f:4a:69:1a:65:38:2a:ad:2d:21:f4:d3:de:
04:de:49:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:39 2026 by rpki-client