Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
File: AJEXecdn0jZOhvTifvjF_puwEJA.mft (raw, json)
Hash identifier: 23uF9NEqAoeOXppwZ5uMUZYvaYCqJry2m9Pl6JGbXzI=
Subject key identifier: EE:60:2E:B7:FE:96:A5:A8:99:B8:C4:36:C2:C3:3A:02:26:44:42:B7
Authority key identifier: 00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90
Certificate issuer: /CN=00911779c767d2364e86f4e27ef8c5fe9bb01090
Certificate serial: 019F183140915C4F97FE1D8BAABE3E6CD3E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
Manifest number: 1989
Signing time: Tue 30 Jun 2026 11:01:48 +0000
Manifest this update: Tue 30 Jun 2026 11:01:48 +0000
Manifest next update: Wed 01 Jul 2026 11:01:48 +0000
Files and hashes: 1: 54HsmLR_UKPkm_TCTo42ipm87TY.roa (hash: 3pMQX3BegRu9d4oZoSrihtauzn+P8II7ckWGMjV6n94=)
2: AJEXecdn0jZOhvTifvjF_puwEJA.crl (hash: nhQTLXxwoHHi14rs7/1d754pubxOzVjcDxJ3U+8gzfc=)
3: zv7xXr_KZ8YHAf6cRm8h9Oh8AJs.roa (hash: ozB7NhhSE1yVLk2WKSYofXpTlw9D87gtz/SOBq9sRpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:31:40:91:5c:4f:97:fe:1d:8b:aa:be:3e:6c:d3:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00911779c767d2364e86f4e27ef8c5fe9bb01090
Validity
Not Before: Jun 30 11:01:48 2026 GMT
Not After : Jul 1 11:01:48 2026 GMT
Subject: CN=ee602eb7fe96a5a899b8c436c2c33a02264442b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7a:f5:80:82:55:10:81:ec:06:62:c7:9b:dd:
70:30:19:bb:6b:ec:75:00:d3:0c:bf:27:ff:da:9b:
56:86:09:3b:ef:d4:ef:0d:79:3b:60:a8:83:99:14:
27:2f:70:47:3e:0a:94:12:11:0d:d8:18:33:db:e4:
a0:52:a7:3a:c6:4a:ee:46:36:0b:88:55:a6:07:7e:
26:a2:18:3c:de:2a:44:f6:fd:ab:1c:b5:2b:b8:95:
bb:5d:cc:45:90:b7:52:06:a3:ff:f1:3a:3b:58:2c:
7f:9c:35:0e:0e:1b:5e:22:d8:f3:e2:3a:b9:99:54:
2f:3d:fc:e0:19:6c:03:8d:43:19:00:61:44:1a:0e:
71:25:1b:f2:de:da:f5:5e:b6:16:cf:5b:9f:49:c0:
4f:94:d5:7c:d0:cf:ab:85:ae:32:e4:83:c7:9a:3c:
a3:ac:d8:b5:a1:c7:1e:0a:18:11:5b:5f:fd:dc:5d:
0f:56:da:66:44:b4:d0:69:6b:9a:01:d4:e4:1a:ab:
fc:aa:ac:30:11:9c:ae:75:da:64:82:db:f1:eb:2d:
01:f7:65:f2:bd:0d:f4:37:98:28:4a:0c:bf:4c:92:
ae:0e:00:18:91:d6:b0:d3:22:d4:f3:b2:67:fb:8b:
30:42:bc:44:44:93:2a:f6:dd:58:a0:be:00:58:8e:
3d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:60:2E:B7:FE:96:A5:A8:99:B8:C4:36:C2:C3:3A:02:26:44:42:B7
X509v3 Authority Key Identifier:
keyid:00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:0c:6e:7b:b1:07:f1:97:97:b0:19:39:fb:f3:1f:a3:6c:62:
ef:f1:29:36:cb:02:c7:31:b6:0d:83:76:be:c9:f2:49:b3:0a:
6a:58:aa:32:20:32:7d:68:67:75:a9:f7:6c:c0:63:16:20:f2:
37:ad:00:ae:96:3b:ad:5b:de:4e:9f:a5:72:b2:0d:f3:f3:53:
8d:50:b8:ef:2e:97:2e:10:f8:c0:e1:53:dd:c9:a4:05:43:c4:
80:64:d5:21:9e:c3:ad:06:7b:37:71:82:88:ab:c0:37:28:11:
82:3b:c6:68:fa:dd:34:b5:b4:f2:da:36:aa:81:37:66:02:6a:
7b:bf:73:24:10:63:16:b5:9f:dd:e0:1e:25:f3:e1:3e:cd:87:
2b:2a:c5:57:37:93:c4:18:94:8f:8a:21:61:17:6e:93:e0:60:
c9:8a:b3:07:26:35:0a:a2:12:26:8b:f1:8c:de:37:41:62:fe:
7a:59:61:d4:e2:d0:4c:0c:7a:28:a9:cc:0d:78:44:74:46:2b:
1b:d8:c5:b6:1f:e4:3f:72:e5:99:d2:dd:c0:55:dd:73:d7:80:
75:1c:a3:c7:92:41:83:cc:22:3b:0d:56:08:ba:1f:47:f2:2b:
30:37:21:4d:61:9c:23:44:da:5b:3f:67:73:7a:d9:01:8b:e5:
76:3a:17:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YMUCRXE+X/h2Lqr4+bNPlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwOTExNzc5Yzc2N2QyMzY0ZTg2ZjRlMjdlZjhjNWZlOWJi
MDEwOTAwHhcNMjYwNjMwMTEwMTQ4WhcNMjYwNzAxMTEwMTQ4WjAzMTEwLwYDVQQD
EyhlZTYwMmViN2ZlOTZhNWE4OTliOGM0MzZjMmMzM2EwMjI2NDQ0MmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnr1gIJVEIHsBmLHm91wMBm7a+x1
ANMMvyf/2ptWhgk779TvDXk7YKiDmRQnL3BHPgqUEhEN2Bgz2+SgUqc6xkruRjYL
iFWmB34mohg83ipE9v2rHLUruJW7XcxFkLdSBqP/8To7WCx/nDUODhteItjz4jq5
mVQvPfzgGWwDjUMZAGFEGg5xJRvy3tr1XrYWz1ufScBPlNV80M+rha4y5IPHmjyj
rNi1occeChgRW1/93F0PVtpmRLTQaWuaAdTkGqv8qqwwEZyuddpkgtvx6y0B92Xy
vQ30N5goSgy/TJKuDgAYkdaw0yLU87Jn+4swQrxERJMq9t1YoL4AWI49vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO5gLrf+lqWombjENsLDOgImREK3MB8GA1UdIwQY
MBaAFACRF3nHZ9I2Tob04n74xf6bsBCQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUpFWGVjZG4walpPaHZUaWZ2akZfcHV3RUpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8yNTlmYmUtMjg1NS00ZTE5LTkxOGYt
NjJjMWIxZmYzYTI2LzEvQUpFWGVjZG4walpPaHZUaWZ2akZfcHV3RUpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8yNTlmYmUtMjg1NS00ZTE5LTkxOGYtNjJjMWIxZmYzYTI2
LzEvQUpFWGVjZG4walpPaHZUaWZ2akZfcHV3RUpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKgxue7EH
8ZeXsBk5+/Mfo2xi7/EpNssCxzG2DYN2vsnySbMKaliqMiAyfWhndan3bMBjFiDy
N60ArpY7rVveTp+lcrIN8/NTjVC47y6XLhD4wOFT3cmkBUPEgGTVIZ7DrQZ7N3GC
iKvANygRgjvGaPrdNLW08to2qoE3ZgJqe79zJBBjFrWf3eAeJfPhPs2HKyrFVzeT
xBiUj4ohYRduk+BgyYqzByY1CqISJovxjN43QWL+ellh1OLQTAx6KKnMDXhEdEYr
G9jFth/kP3LlmdLdwFXdc9eAdRyjx5JBg8wiOw1WCLofR/IrMDchTWGcI0TaWz9n
c3rZAYvldjoXjQ==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:25 2026 by rpki-client