Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
File: aOi66pXUBANI8KiexOS9FSdfbDk.mft (raw, json)
Hash identifier: LCdolLRg9Q807TiKSttdZKAedB1vh1KtvAc4ghVcE9M=
Subject key identifier: 08:F0:97:5F:27:02:86:0C:FB:61:FB:50:55:27:B2:2F:48:9B:E8:7D
Authority key identifier: 68:E8:BA:EA:95:D4:04:03:48:F0:A8:9E:C4:E4:BD:15:27:5F:6C:39
Certificate issuer: /CN=68e8baea95d4040348f0a89ec4e4bd15275f6c39
Certificate serial: 019D27A8E1DE7E01F31418383FF773309457
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 01:01:12 +0000
Manifest this update: Thu 26 Mar 2026 01:01:12 +0000
Manifest next update: Fri 27 Mar 2026 01:01:12 +0000
Files and hashes: 1: F7uNYW_BAZq9rI9uR7hZmoD2t2c.roa (hash: 66sSkYjfMPB1iz46OvsCyBJxFuzzlDOw8irePRrhJqo=)
2: ZbRHE63NTowomZ--6hRN7-VQWd4.roa (hash: 9fZQ79ry0wcmms4XZEk0xvVuXwwePg4F6u4eylx66hY=)
3: aOi66pXUBANI8KiexOS9FSdfbDk.crl (hash: oQyGZLpEvHBUW5tKflZDcFv6OrJgzXRyzruMuWLQ/bE=)
4: cAIe2NM_E7WCCYmd0eVZsMmImNA.roa (hash: sic7GmBZVp2aPzVp03gq0Hxyh3yCltc3C8dhZASVy34=)
5: iN8E5J8FWFCEMY65ALgZit2wZ5o.roa (hash: 3gIZ7quZRp5VH+343KfEOmSv0A/IFrhSpW84UgHzh6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:e1:de:7e:01:f3:14:18:38:3f:f7:73:30:94:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e8baea95d4040348f0a89ec4e4bd15275f6c39
Validity
Not Before: Mar 26 01:01:12 2026 GMT
Not After : Mar 27 01:01:12 2026 GMT
Subject: CN=08f0975f2702860cfb61fb505527b22f489be87d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7b:95:c3:40:8e:69:cd:a6:20:83:bf:51:35:
ff:a7:5c:9b:5a:29:37:af:84:00:c3:43:bc:b1:b8:
92:71:b6:5d:1e:f9:7d:81:71:77:d3:47:c4:dc:28:
78:11:d5:68:46:87:28:b0:23:62:6c:94:22:50:9b:
62:56:7a:f9:e1:03:29:08:29:84:1c:3d:fa:69:ce:
68:06:43:2f:13:48:78:cf:57:37:cc:d7:07:b4:c5:
b0:62:ce:6f:e1:81:31:15:18:67:bf:cf:18:80:56:
65:0c:de:1d:17:af:7a:22:89:bb:8d:1c:c5:82:7d:
35:c9:36:c2:56:96:3e:db:cb:36:2c:eb:35:02:48:
98:73:f2:10:d8:25:bc:84:dd:f0:12:95:2f:35:7d:
60:38:6b:26:4a:0d:c8:61:3c:bd:3b:b4:c6:49:8d:
a2:6b:92:a2:1d:8d:2a:fa:8a:5c:3e:ca:9b:c2:a1:
c0:40:f6:c1:20:7c:74:b8:9b:98:30:c5:e0:e4:fe:
5c:26:ba:1d:1e:d1:53:2f:64:97:7a:38:54:97:cc:
ae:bb:af:3a:2e:85:12:66:17:e8:a1:03:f4:f2:60:
ee:46:e4:b5:49:56:0e:76:32:61:55:f7:56:f3:d5:
2e:18:28:f8:37:cc:2c:b8:53:5f:84:eb:61:8b:a4:
f4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F0:97:5F:27:02:86:0C:FB:61:FB:50:55:27:B2:2F:48:9B:E8:7D
X509v3 Authority Key Identifier:
keyid:68:E8:BA:EA:95:D4:04:03:48:F0:A8:9E:C4:E4:BD:15:27:5F:6C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:19:71:c0:53:45:e4:97:04:f9:91:97:d8:07:7b:93:df:f0:
44:cb:79:fd:73:dd:e8:1c:db:44:ad:a5:cb:8b:45:bc:0a:35:
92:c4:06:60:39:56:1c:15:e4:5a:ce:f3:73:30:86:fa:3a:44:
74:b0:16:6f:06:e1:d5:e4:85:f0:0c:59:cc:fb:fd:63:f2:f8:
41:46:d5:94:97:2d:cd:cb:de:ab:bc:38:74:54:35:15:e5:e0:
85:83:fd:f8:11:ab:f2:ca:05:10:e9:e1:65:99:e8:c0:0a:87:
59:78:ee:11:50:17:f8:af:a0:a9:f2:f6:2a:43:b9:40:f1:50:
e1:c5:f9:22:c0:7a:3a:6a:57:fa:60:7c:bd:fb:53:a0:12:51:
08:cd:6b:c5:9d:11:66:8a:b7:3e:09:61:22:f6:3a:53:8a:05:
75:be:72:96:1b:31:de:b8:ff:bd:af:c7:9a:29:86:97:c2:24:
a2:14:e9:9a:a7:98:d9:2f:fd:fc:5a:c4:54:0d:7b:49:35:cd:
03:4b:e0:fe:b1:68:a3:1c:a5:1e:0b:f0:f6:12:b4:ae:6e:11:
e1:fa:58:6f:96:85:36:41:a5:c4:93:aa:e3:0f:b4:5c:e9:b8:
0e:68:5d:5e:e1:90:ce:55:71:16:f1:ea:93:e0:69:c4:ef:35:
cf:66:f7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:20:09 2026 by rpki-client