Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
File: AJEXecdn0jZOhvTifvjF_puwEJA.mft (raw, json)
Hash identifier: t0oteOsEFDWvMmUyclNr9Z68HS9/N41gXbGPtk/Np40=
Subject key identifier: 5C:49:16:88:47:53:07:35:69:20:76:F2:82:3E:32:C8:03:1B:FC:F4
Authority key identifier: 00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90
Certificate issuer: /CN=00911779c767d2364e86f4e27ef8c5fe9bb01090
Certificate serial: 01A13E94AE10FD0DC72542CCF74AA48D02DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
Manifest number: 1AA6
Signing time: Thu 15 Oct 2026 08:01:33 +0000
Manifest this update: Thu 15 Oct 2026 08:01:33 +0000
Manifest next update: Fri 16 Oct 2026 08:01:33 +0000
Files and hashes: 1: 54HsmLR_UKPkm_TCTo42ipm87TY.roa (hash: 3pMQX3BegRu9d4oZoSrihtauzn+P8II7ckWGMjV6n94=)
2: AJEXecdn0jZOhvTifvjF_puwEJA.crl (hash: s50j+34T2eudhkvkSSdvIBra5GbcySF0Ivltp2TbMtM=)
3: zv7xXr_KZ8YHAf6cRm8h9Oh8AJs.roa (hash: ozB7NhhSE1yVLk2WKSYofXpTlw9D87gtz/SOBq9sRpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:94:ae:10:fd:0d:c7:25:42:cc:f7:4a:a4:8d:02:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00911779c767d2364e86f4e27ef8c5fe9bb01090
Validity
Not Before: Oct 15 08:01:33 2026 GMT
Not After : Oct 16 08:01:33 2026 GMT
Subject: CN=5c49168847530735692076f2823e32c8031bfcf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:86:ee:60:ad:68:c3:3f:fd:4a:69:c8:4d:e7:
81:6a:f7:5b:7a:65:ed:94:aa:31:0f:d6:5f:ca:00:
a5:2a:39:59:3c:4c:91:5d:7e:e9:9e:33:ea:d0:46:
89:6b:92:70:84:fc:1e:9e:d4:74:30:08:06:f8:36:
ec:10:69:38:d3:5e:64:02:dc:4e:7c:67:1c:05:4e:
d4:ce:81:d3:43:c0:50:84:85:82:43:3c:5e:49:14:
37:58:a0:bd:b8:b9:35:c2:f5:17:cd:f2:1a:6d:cb:
07:78:bb:c2:66:d9:4e:05:e1:d5:86:a0:97:70:1b:
83:86:fc:bc:48:d7:35:0f:5f:cc:78:3e:a1:22:72:
55:82:ee:ac:c3:cf:b6:a6:0f:e3:59:36:49:28:61:
d0:36:b9:49:6d:f4:43:d0:cd:1d:d8:32:05:b6:c7:
74:33:4a:63:e2:71:cb:83:2b:18:24:26:98:7f:32:
89:c9:f3:b9:47:0a:3b:99:d5:48:df:90:a0:d8:b2:
88:05:35:01:2d:26:32:ea:b2:ed:91:57:9c:0d:f1:
da:f3:ed:8b:d5:1b:12:33:ca:7e:db:87:12:27:05:
bd:56:1a:37:5b:68:3f:a2:9c:00:7a:4f:47:20:61:
48:f2:a2:74:7a:81:38:31:08:fb:52:c3:5e:31:a2:
10:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:49:16:88:47:53:07:35:69:20:76:F2:82:3E:32:C8:03:1B:FC:F4
X509v3 Authority Key Identifier:
keyid:00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:b0:5d:ab:7a:32:76:e4:d9:76:75:05:23:84:48:d2:6b:0f:
73:ac:27:f9:b6:da:cc:fd:27:ef:c0:4c:5e:80:b6:b0:e0:82:
fa:38:0a:42:60:3f:d7:61:0d:d5:8c:7e:12:d0:60:b5:fb:d7:
a5:d7:ef:dc:6f:15:b8:d0:ac:ee:79:ef:88:95:b1:78:f8:66:
97:00:39:3b:30:64:27:91:af:9d:71:4b:12:bc:52:0c:7e:7a:
70:93:48:75:18:25:f0:0d:a1:82:9c:75:20:e1:26:5f:ac:e9:
d5:f5:de:f0:37:d0:d8:28:a2:b9:89:20:d5:19:aa:4f:b7:c2:
84:27:9f:d2:07:59:7b:8a:e2:dd:7c:d2:5c:ba:7c:4e:84:ad:
9d:06:34:1b:92:94:30:9a:5a:01:54:17:35:2b:f3:83:76:97:
79:1e:3a:e3:b2:a5:63:99:69:95:cf:ee:ef:53:cb:80:93:6d:
c6:b3:77:82:6a:7f:88:b2:7c:75:ad:5b:b3:16:82:4d:61:65:
8c:5d:a6:f3:80:fa:74:fb:64:41:18:98:86:8b:0d:b4:82:ff:
06:41:03:09:f3:06:55:ea:d2:7c:af:8c:3a:1f:8b:8a:b7:b0:
7b:43:d7:95:71:82:bc:dc:c2:63:f8:df:a9:4b:25:94:64:0c:
0b:bc:37:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 17:50:33 2026 by rpki-client