Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
File: AJEXecdn0jZOhvTifvjF_puwEJA.mft (raw, json)
Hash identifier: YvOujdkBEWEAuEm4yMHlMZaTiHYgKRFf4dXwA46P84s=
Subject key identifier: 9B:52:F0:73:7D:0B:64:3E:2F:AF:D4:82:8C:F8:46:6C:CF:C9:B6:53
Authority key identifier: 00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90
Certificate issuer: /CN=00911779c767d2364e86f4e27ef8c5fe9bb01090
Certificate serial: 019D39416ACE11A07A43FB2DF3C081C10BAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 11:01:21 +0000
Manifest this update: Sun 29 Mar 2026 11:01:21 +0000
Manifest next update: Mon 30 Mar 2026 11:01:21 +0000
Files and hashes: 1: 54HsmLR_UKPkm_TCTo42ipm87TY.roa (hash: 3pMQX3BegRu9d4oZoSrihtauzn+P8II7ckWGMjV6n94=)
2: AJEXecdn0jZOhvTifvjF_puwEJA.crl (hash: eQnLiZinfE9c3JtCwExKklqfAb7SG1EorL2/wvu8zu4=)
3: zv7xXr_KZ8YHAf6cRm8h9Oh8AJs.roa (hash: ozB7NhhSE1yVLk2WKSYofXpTlw9D87gtz/SOBq9sRpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:6a:ce:11:a0:7a:43:fb:2d:f3:c0:81:c1:0b:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00911779c767d2364e86f4e27ef8c5fe9bb01090
Validity
Not Before: Mar 29 11:01:21 2026 GMT
Not After : Mar 30 11:01:21 2026 GMT
Subject: CN=9b52f0737d0b643e2fafd4828cf8466ccfc9b653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:16:c0:73:83:10:2c:ac:7a:a3:0a:6a:de:4d:
a1:ca:9b:8b:88:31:c0:12:f3:85:eb:38:7f:ab:65:
41:12:21:8a:20:e3:7f:4f:9a:f6:27:a0:e1:8f:73:
d2:d7:b5:57:ec:0c:89:fb:e1:20:ab:fe:fc:9a:69:
eb:12:fc:50:9d:f0:a2:73:2f:e8:a6:37:08:42:e7:
ac:72:13:87:aa:d9:53:e8:59:18:98:84:0d:53:fc:
1d:1f:1a:e9:e5:bc:d0:ed:73:cf:d6:6e:fb:bf:86:
fa:60:14:db:99:9f:04:e7:6c:55:26:c4:72:84:6a:
d2:18:5d:98:cf:0a:0a:1c:53:51:09:a2:cc:ea:32:
fc:35:64:2a:26:7d:aa:85:49:c6:2f:eb:e1:1c:48:
b1:3c:c3:fa:25:09:a0:a8:41:60:6b:b4:7b:4f:e6:
83:bb:60:ba:55:a8:89:a6:fb:8d:88:0c:6f:56:7f:
1c:0a:6d:83:0d:76:ff:6f:f6:22:d0:fd:53:cd:0b:
e4:ba:2a:f9:02:18:7e:12:80:4b:6c:d5:74:67:30:
5f:53:a9:b1:c8:59:6b:1b:96:20:06:9a:56:ff:33:
fb:01:f0:d2:c3:d5:02:67:e5:89:05:74:45:1b:3d:
5c:02:be:eb:29:cb:7f:47:43:a7:a2:8a:bb:10:be:
ab:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:52:F0:73:7D:0B:64:3E:2F:AF:D4:82:8C:F8:46:6C:CF:C9:B6:53
X509v3 Authority Key Identifier:
keyid:00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:41:8c:ea:74:85:58:02:e5:2f:58:08:6b:94:32:5c:68:66:
78:5b:f0:83:7f:89:42:de:56:0c:7f:0c:34:b8:78:e7:bc:14:
2e:e3:36:0f:29:84:ab:3a:7e:da:54:9a:12:d7:8e:49:55:45:
21:f4:f4:94:47:9f:62:8e:75:52:71:f9:04:2a:17:d2:bd:a8:
74:04:2f:5b:39:24:72:1a:46:ad:73:eb:cc:3e:8f:0f:ee:dd:
7f:54:10:e5:66:1f:5c:89:6a:7d:82:94:38:9f:08:21:95:1d:
8f:30:8f:7f:6a:56:31:66:34:5f:b9:b8:69:7e:70:a2:4b:48:
af:ad:ff:2c:0e:f6:0a:1e:81:cf:56:f7:b5:79:ec:0e:6b:f5:
07:92:72:76:de:8d:0d:f4:a4:e9:82:bd:9a:ac:d6:04:e2:33:
a0:79:b6:80:88:4b:a5:0b:77:47:b8:6b:6e:15:21:51:87:88:
7b:43:7d:14:4e:b5:38:09:6a:b9:ec:37:78:d7:ad:61:33:3b:
a5:8d:e0:45:36:b5:a2:b6:0d:80:19:e3:37:78:35:c8:ab:e0:
2a:10:f8:91:e1:9e:40:0b:b9:9b:eb:d8:63:ae:7c:95:89:9c:
ef:81:51:63:74:04:4f:31:db:6c:e2:b2:45:56:c5:0c:b6:03:
54:3e:4e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:53:50 2026 by rpki-client