Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
File: aOi66pXUBANI8KiexOS9FSdfbDk.mft (raw, json)
Hash identifier: E9/raGthm9t8yJk/+RvjjnRX10oiltiGegk0Z8olQcw=
Subject key identifier: 70:6D:C5:D1:3E:01:BB:DD:4D:66:00:A0:14:D6:2B:8B:16:F1:7D:D5
Authority key identifier: 68:E8:BA:EA:95:D4:04:03:48:F0:A8:9E:C4:E4:BD:15:27:5F:6C:39
Certificate issuer: /CN=68e8baea95d4040348f0a89ec4e4bd15275f6c39
Certificate serial: 01A1DACAF8DE7750B65D0BAA0A2CD53CD342
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
Manifest number: 1AF5
Signing time: Sat 14 Nov 2026 16:01:37 +0000
Manifest this update: Sat 14 Nov 2026 16:01:37 +0000
Manifest next update: Sun 15 Nov 2026 16:01:37 +0000
Files and hashes: 1: F7uNYW_BAZq9rI9uR7hZmoD2t2c.roa (hash: 66sSkYjfMPB1iz46OvsCyBJxFuzzlDOw8irePRrhJqo=)
2: ZbRHE63NTowomZ--6hRN7-VQWd4.roa (hash: 9fZQ79ry0wcmms4XZEk0xvVuXwwePg4F6u4eylx66hY=)
3: aOi66pXUBANI8KiexOS9FSdfbDk.crl (hash: P/7tylL1vC3x5fi4+Zx3Dy5ODOcA1kar9pnmr3qNOq4=)
4: cAIe2NM_E7WCCYmd0eVZsMmImNA.roa (hash: sic7GmBZVp2aPzVp03gq0Hxyh3yCltc3C8dhZASVy34=)
5: iN8E5J8FWFCEMY65ALgZit2wZ5o.roa (hash: 3gIZ7quZRp5VH+343KfEOmSv0A/IFrhSpW84UgHzh6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:ca:f8:de:77:50:b6:5d:0b:aa:0a:2c:d5:3c:d3:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e8baea95d4040348f0a89ec4e4bd15275f6c39
Validity
Not Before: Nov 14 16:01:37 2026 GMT
Not After : Nov 15 16:01:37 2026 GMT
Subject: CN=706dc5d13e01bbdd4d6600a014d62b8b16f17dd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:82:bd:2d:68:73:62:99:6d:a3:18:12:5d:db:
85:56:14:12:94:8b:0a:56:7c:b9:44:14:11:eb:77:
0f:a5:b7:ce:d1:be:df:09:ab:1c:e0:5c:24:31:d1:
9d:ea:46:97:6d:16:3b:7e:18:fe:bb:e6:d9:22:50:
a1:f7:b2:fb:1e:f1:c4:84:72:62:7c:55:7c:75:a1:
1b:fe:71:f7:bb:4e:5d:05:5b:a1:b0:34:93:cd:f9:
36:da:1d:1b:f1:4a:e8:da:01:d3:ef:0c:2d:92:be:
3a:d5:ab:a0:5e:94:0e:f8:2b:20:fc:a4:d4:34:36:
72:84:e0:91:e3:98:3b:5b:9f:9b:88:0c:ad:38:ea:
bb:70:43:ea:ac:0a:54:0f:14:51:2e:22:dd:e1:88:
25:9f:2a:8b:9e:96:c7:16:c9:74:88:f8:ee:07:31:
f1:80:3d:30:8b:0c:7b:88:61:ff:7c:f5:85:14:c1:
ca:27:d5:e4:f4:8c:9e:d1:6e:85:eb:0d:f1:c2:0c:
ac:f4:29:5f:53:b5:91:4c:6e:17:c7:0d:49:29:e2:
9a:c0:03:62:89:75:bd:ca:7c:63:ad:db:c4:36:52:
c6:38:5a:fe:dd:07:81:70:8b:70:8c:00:5d:73:20:
18:d7:93:d1:a9:8d:9c:bd:54:08:be:92:51:ed:fd:
51:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:6D:C5:D1:3E:01:BB:DD:4D:66:00:A0:14:D6:2B:8B:16:F1:7D:D5
X509v3 Authority Key Identifier:
keyid:68:E8:BA:EA:95:D4:04:03:48:F0:A8:9E:C4:E4:BD:15:27:5F:6C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:c6:61:3a:b6:3d:72:e0:37:c1:55:95:ad:38:7e:8a:17:b9:
56:34:6b:65:52:f3:29:91:0f:21:15:2b:ab:f6:c4:79:9e:fa:
0f:31:95:12:37:3a:d8:74:06:b1:cf:7b:27:6f:96:74:61:1d:
79:8f:0f:d1:f6:25:26:0d:1e:3a:be:21:f8:36:eb:76:8e:ad:
18:05:8e:81:c5:08:a8:f1:c1:43:2b:60:d5:5e:23:ab:6c:f2:
eb:06:8a:cb:4a:8f:3d:3e:87:c5:de:cb:ef:0c:0c:1d:d4:0d:
13:c1:7a:11:0e:dd:64:6d:f1:f2:d6:84:98:f9:43:bf:0d:b7:
8e:cd:1f:f1:a2:7a:c6:ba:92:a6:42:28:92:40:2f:4f:9d:4f:
05:91:6d:86:cd:87:6f:e6:52:91:c0:5c:e9:bd:e7:34:47:fb:
f4:b0:3a:0d:97:99:f7:7d:7e:b6:13:de:1a:cd:3b:d7:3d:af:
bc:a2:bc:98:3c:a5:84:f6:ef:42:4e:02:80:3e:0e:ec:92:cb:
63:1d:a8:11:ae:d6:4e:e7:5e:c8:58:7d:e6:46:ac:14:3a:4c:
12:57:4c:47:6f:ba:5c:5c:78:6a:2e:68:b8:ee:ce:83:07:d2:
5c:71:b7:d6:5a:ae:8a:ce:93:b1:6f:f4:e5:1f:a9:5a:9c:01:
3c:c3:e5:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHayvjed1C2XQuqCizVPNNCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZThiYWVhOTVkNDA0MDM0OGYwYTg5ZWM0ZTRiZDE1Mjc1
ZjZjMzkwHhcNMjYxMTE0MTYwMTM3WhcNMjYxMTE1MTYwMTM3WjAzMTEwLwYDVQQD
Eyg3MDZkYzVkMTNlMDFiYmRkNGQ2NjAwYTAxNGQ2MmI4YjE2ZjE3ZGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroK9LWhzYpltoxgSXduFVhQSlIsK
Vny5RBQR63cPpbfO0b7fCasc4FwkMdGd6kaXbRY7fhj+u+bZIlCh97L7HvHEhHJi
fFV8daEb/nH3u05dBVuhsDSTzfk22h0b8Uro2gHT7wwtkr461augXpQO+Csg/KTU
NDZyhOCR45g7W5+biAytOOq7cEPqrApUDxRRLiLd4YglnyqLnpbHFsl0iPjuBzHx
gD0wiwx7iGH/fPWFFMHKJ9Xk9Iye0W6F6w3xwgys9ClfU7WRTG4Xxw1JKeKawANi
iXW9ynxjrdvENlLGOFr+3QeBcItwjABdcyAY15PRqY2cvVQIvpJR7f1RUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHBtxdE+AbvdTWYAoBTWK4sW8X3VMB8GA1UdIwQY
MBaAFGjouuqV1AQDSPConsTkvRUnX2w5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU9pNjZwWFVCQU5JOEtpZXhPUzlGU2RmYkRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83NjUzZTAtOGE3Mi00MzUxLWJmY2Ut
MzcxMWZhZThjYTc3LzEvYU9pNjZwWFVCQU5JOEtpZXhPUzlGU2RmYkRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny83NjUzZTAtOGE3Mi00MzUxLWJmY2UtMzcxMWZhZThjYTc3
LzEvYU9pNjZwWFVCQU5JOEtpZXhPUzlGU2RmYkRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYMZhOrY9
cuA3wVWVrTh+ihe5VjRrZVLzKZEPIRUrq/bEeZ76DzGVEjc62HQGsc97J2+WdGEd
eY8P0fYlJg0eOr4h+Dbrdo6tGAWOgcUIqPHBQytg1V4jq2zy6waKy0qPPT6Hxd7L
7wwMHdQNE8F6EQ7dZG3x8taEmPlDvw23js0f8aJ6xrqSpkIokkAvT51PBZFths2H
b+ZSkcBc6b3nNEf79LA6DZeZ931+thPeGs071z2vvKK8mDylhPbvQk4CgD4O7JLL
Yx2oEa7WTudeyFh95kasFDpMEldMR2+6XFx4ai5ouO7OgwfSXHG31lquis6TsW/0
5R+pWpwBPMPlWg==
-----END CERTIFICATE-----
Generated at Sat Nov 14 22:44:32 2026 by rpki-client