Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
File: aOi66pXUBANI8KiexOS9FSdfbDk.mft (raw, json)
Hash identifier: qa6XmAS9VRaadTH+uyEIYax6l6wHkJC4VH2rfiDvLUQ=
Subject key identifier: 06:8C:0D:64:71:78:D8:59:9E:14:5D:18:CF:73:DE:9A:3E:1E:FD:12
Authority key identifier: 68:E8:BA:EA:95:D4:04:03:48:F0:A8:9E:C4:E4:BD:15:27:5F:6C:39
Certificate issuer: /CN=68e8baea95d4040348f0a89ec4e4bd15275f6c39
Certificate serial: 019E1CEB92AB2CADC849FDC371401E5DD147
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
Manifest number: 1905
Signing time: Tue 12 May 2026 16:01:01 +0000
Manifest this update: Tue 12 May 2026 16:01:01 +0000
Manifest next update: Wed 13 May 2026 16:01:01 +0000
Files and hashes: 1: F7uNYW_BAZq9rI9uR7hZmoD2t2c.roa (hash: 66sSkYjfMPB1iz46OvsCyBJxFuzzlDOw8irePRrhJqo=)
2: ZbRHE63NTowomZ--6hRN7-VQWd4.roa (hash: 9fZQ79ry0wcmms4XZEk0xvVuXwwePg4F6u4eylx66hY=)
3: aOi66pXUBANI8KiexOS9FSdfbDk.crl (hash: 8ujY88Mj4HjT4Ni1Jyns1h9gAPJmXlkNsVqYxB1pjU4=)
4: cAIe2NM_E7WCCYmd0eVZsMmImNA.roa (hash: sic7GmBZVp2aPzVp03gq0Hxyh3yCltc3C8dhZASVy34=)
5: iN8E5J8FWFCEMY65ALgZit2wZ5o.roa (hash: 3gIZ7quZRp5VH+343KfEOmSv0A/IFrhSpW84UgHzh6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 16:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:92:ab:2c:ad:c8:49:fd:c3:71:40:1e:5d:d1:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e8baea95d4040348f0a89ec4e4bd15275f6c39
Validity
Not Before: May 12 16:01:01 2026 GMT
Not After : May 13 16:01:01 2026 GMT
Subject: CN=068c0d647178d8599e145d18cf73de9a3e1efd12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:80:0f:ca:cb:75:15:68:c4:e3:5a:f5:77:cd:
1c:cc:21:16:03:b5:d2:88:cc:72:7c:3c:42:21:4c:
ae:94:dd:56:70:c9:46:19:b2:6e:bd:ea:4f:3b:0e:
62:0a:b3:db:78:88:be:2c:9d:2b:aa:c5:b1:d1:57:
59:27:18:ad:b1:43:c6:d9:f8:5c:46:2d:23:fc:7a:
9d:a0:db:c9:bf:ab:43:28:a8:42:31:b9:59:2e:03:
8d:19:51:0a:33:70:0a:b6:a0:dd:38:b3:1e:b3:69:
7a:b5:19:c3:be:81:e6:96:70:a7:fc:4d:2f:49:82:
66:c6:66:1e:df:fb:11:61:d8:52:21:61:c9:04:4a:
27:5f:1b:2b:a4:a7:f7:90:d6:48:3b:08:c8:48:de:
84:05:16:49:ce:01:42:2e:25:b6:42:4a:3b:e9:43:
c2:72:01:af:3c:ba:ba:ea:24:c8:ae:57:0a:61:cb:
15:9c:2d:85:a5:3f:ad:9d:5c:32:a5:d0:4b:15:8e:
d3:d9:b3:8d:4a:5a:c7:52:76:d6:2b:f3:eb:f0:15:
64:fb:a7:ae:e6:64:0a:9b:ac:4a:cb:85:e5:5d:15:
9c:8b:22:74:2f:54:75:72:8d:df:db:47:b2:db:0e:
35:18:e0:3a:56:e1:b3:a9:fa:27:ff:2a:7a:67:bf:
1f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:8C:0D:64:71:78:D8:59:9E:14:5D:18:CF:73:DE:9A:3E:1E:FD:12
X509v3 Authority Key Identifier:
keyid:68:E8:BA:EA:95:D4:04:03:48:F0:A8:9E:C4:E4:BD:15:27:5F:6C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:bb:e5:14:df:3a:67:c8:76:ba:8b:9a:87:c0:80:e7:6d:97:
f1:de:bf:e0:68:a5:ed:d8:f4:c7:a6:d3:53:c2:4e:63:bd:51:
ca:ea:a4:18:0e:04:3f:f4:bd:70:27:f2:a3:1b:c2:c6:fb:df:
6a:54:b4:f6:6e:46:0e:23:29:45:3f:00:e9:e5:41:3c:34:ce:
ea:78:cc:f5:b5:32:8d:9a:bd:ba:24:00:42:54:19:d8:28:dd:
76:ba:ad:f8:96:e0:54:42:b2:00:6b:f8:98:07:2d:4f:25:b1:
6c:34:84:c6:93:f6:a4:88:dd:5f:30:ce:4e:66:cc:4b:d8:51:
50:a7:0a:ed:cf:08:fd:28:ee:6b:1f:5e:12:66:3f:71:0d:c7:
a3:32:4a:ef:00:6f:ad:51:39:fa:c7:44:c5:7e:35:91:17:35:
74:57:b0:e5:35:21:8a:1b:ed:f5:26:c6:6d:92:5f:fc:5c:e8:
4d:86:77:30:b5:89:f0:85:dd:00:23:50:f5:21:86:21:69:19:
95:f3:c2:fb:0d:75:74:5b:4d:e6:ad:6a:17:e1:5f:94:ca:3a:
ef:4b:be:e9:f3:b5:d3:51:99:8f:b0:16:32:7e:2a:fb:fb:3b:
ad:cd:85:d7:9d:d0:52:3c:32:92:d5:df:a0:59:b3:e2:85:a4:
93:bf:59:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:27:40 2026 by rpki-client