Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
File: aOi66pXUBANI8KiexOS9FSdfbDk.mft (raw, json)
Hash identifier: b19c/nahX0Q069omxxBIj7ZXeIQjKrzTkO3FkBQfdpE=
Subject key identifier: D0:A2:C9:96:B9:FF:76:5B:6E:EF:90:95:1F:00:30:FE:E3:9C:10:3C
Authority key identifier: 68:E8:BA:EA:95:D4:04:03:48:F0:A8:9E:C4:E4:BD:15:27:5F:6C:39
Certificate issuer: /CN=68e8baea95d4040348f0a89ec4e4bd15275f6c39
Certificate serial: 019F8FB5C6120FD92E2780DB1958ACB0ABCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
Manifest number: 19C5
Signing time: Thu 23 Jul 2026 16:01:22 +0000
Manifest this update: Thu 23 Jul 2026 16:01:22 +0000
Manifest next update: Fri 24 Jul 2026 16:01:22 +0000
Files and hashes: 1: F7uNYW_BAZq9rI9uR7hZmoD2t2c.roa (hash: 66sSkYjfMPB1iz46OvsCyBJxFuzzlDOw8irePRrhJqo=)
2: ZbRHE63NTowomZ--6hRN7-VQWd4.roa (hash: 9fZQ79ry0wcmms4XZEk0xvVuXwwePg4F6u4eylx66hY=)
3: aOi66pXUBANI8KiexOS9FSdfbDk.crl (hash: MVzEU90YN9mD6tHUWXw9K+3Nxtf9PdQ1zpMTTA67UDE=)
4: cAIe2NM_E7WCCYmd0eVZsMmImNA.roa (hash: sic7GmBZVp2aPzVp03gq0Hxyh3yCltc3C8dhZASVy34=)
5: iN8E5J8FWFCEMY65ALgZit2wZ5o.roa (hash: 3gIZ7quZRp5VH+343KfEOmSv0A/IFrhSpW84UgHzh6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:c6:12:0f:d9:2e:27:80:db:19:58:ac:b0:ab:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e8baea95d4040348f0a89ec4e4bd15275f6c39
Validity
Not Before: Jul 23 16:01:22 2026 GMT
Not After : Jul 24 16:01:22 2026 GMT
Subject: CN=d0a2c996b9ff765b6eef90951f0030fee39c103c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f4:0b:74:1a:df:d6:b1:c3:0c:9e:19:03:10:
77:51:a0:ec:0a:6e:d6:15:05:1f:99:58:a8:ec:8e:
26:63:01:9e:01:48:a1:88:df:88:78:79:e7:81:e5:
af:36:5e:9b:36:6d:8d:21:3c:f4:eb:9a:c7:72:f0:
a2:25:3f:e3:04:e7:0a:6e:d6:6e:ca:76:c4:3b:64:
a6:a9:d7:6a:9a:31:c2:6c:5b:c5:65:92:0b:ba:5a:
e2:f8:80:c5:3a:bc:5c:c5:c7:37:2a:f7:9d:f3:7a:
b4:07:bf:52:ac:8b:85:19:f5:f9:da:6c:3f:d5:7c:
95:82:72:ef:5e:b5:a5:41:89:be:bd:b2:8c:3e:4d:
2c:fa:cb:66:69:fa:5c:a5:07:70:a1:fb:78:e8:94:
15:e0:fa:a1:26:4b:15:30:73:e8:92:ba:6d:30:25:
df:67:92:9b:f2:d7:a6:f2:19:6d:c5:f3:48:b8:54:
92:2a:e4:05:43:61:ee:1f:7e:85:fd:aa:0e:a8:5f:
4b:c9:05:23:30:33:c5:96:ec:d7:d6:1d:5a:0e:38:
eb:a7:c5:1e:78:d1:cf:59:f4:44:54:33:6a:71:a4:
9c:2b:88:a6:be:d1:64:a0:87:65:ae:69:a1:bf:79:
e9:4f:5b:d2:17:2c:4c:7c:6b:af:94:13:56:ef:51:
b4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A2:C9:96:B9:FF:76:5B:6E:EF:90:95:1F:00:30:FE:E3:9C:10:3C
X509v3 Authority Key Identifier:
keyid:68:E8:BA:EA:95:D4:04:03:48:F0:A8:9E:C4:E4:BD:15:27:5F:6C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:5f:6a:38:80:9b:da:1b:61:42:66:b2:d5:13:f4:05:5f:81:
96:a8:26:78:b2:63:d5:52:c5:28:d1:f3:6b:c5:90:ca:4c:83:
5e:4b:cd:c2:9c:88:3c:81:da:d5:15:51:f3:b4:f5:d9:4e:c9:
5f:8d:7a:6b:21:7b:c2:0d:e5:f3:2c:07:c1:16:ca:ee:77:46:
47:d6:c3:64:92:6d:5b:88:b2:de:29:0a:cc:fb:00:c9:00:bc:
e7:d5:13:65:93:5a:1c:7c:19:aa:08:0a:c8:b6:c1:2a:2e:12:
ee:77:7c:1f:c6:7d:14:91:c3:0f:98:a0:c8:fc:b9:ad:55:ad:
ba:25:e7:8f:b8:1e:01:ab:41:d3:ef:1e:9d:32:43:f9:b5:06:
5d:0b:17:bc:56:11:5f:8a:69:8e:2d:44:99:4a:fa:81:98:7e:
21:59:0f:30:ae:2d:76:bf:0f:0b:23:5f:4b:e7:94:ff:25:90:
90:bb:5a:e6:75:66:b6:3f:4d:b3:aa:33:d7:15:17:3b:59:c0:
00:57:80:e2:88:63:07:7e:44:8d:ac:66:dd:8b:3e:dd:2e:46:
61:2c:a3:63:cf:d3:cc:c5:58:e1:28:7e:e0:31:07:a9:75:13:
c5:bb:44:2c:47:3a:3f:58:84:e6:e2:19:de:86:38:63:49:e9:
1f:2d:05:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:39:43 2026 by rpki-client