Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
File: aOi66pXUBANI8KiexOS9FSdfbDk.mft (raw, json)
Hash identifier: EUi1rvgiQ8yBWO21nxiGFFRvjyqo7hlNz/5u4pjaA18=
Subject key identifier: 6D:F2:C0:A1:0D:71:96:C1:60:85:76:14:EA:49:FF:F7:F4:E1:AE:4C
Authority key identifier: 68:E8:BA:EA:95:D4:04:03:48:F0:A8:9E:C4:E4:BD:15:27:5F:6C:39
Certificate issuer: /CN=68e8baea95d4040348f0a89ec4e4bd15275f6c39
Certificate serial: 01A0CE5AA242FF89B753EDBB2AC027745F3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
Manifest number: 1A6A
Signing time: Wed 23 Sep 2026 13:00:41 +0000
Manifest this update: Wed 23 Sep 2026 13:00:41 +0000
Manifest next update: Thu 24 Sep 2026 13:00:41 +0000
Files and hashes: 1: F7uNYW_BAZq9rI9uR7hZmoD2t2c.roa (hash: 66sSkYjfMPB1iz46OvsCyBJxFuzzlDOw8irePRrhJqo=)
2: ZbRHE63NTowomZ--6hRN7-VQWd4.roa (hash: 9fZQ79ry0wcmms4XZEk0xvVuXwwePg4F6u4eylx66hY=)
3: aOi66pXUBANI8KiexOS9FSdfbDk.crl (hash: GvvS3esUwerPHDzoKZoN+HEBrM+eqtMRjAl4fb2UHQc=)
4: cAIe2NM_E7WCCYmd0eVZsMmImNA.roa (hash: sic7GmBZVp2aPzVp03gq0Hxyh3yCltc3C8dhZASVy34=)
5: iN8E5J8FWFCEMY65ALgZit2wZ5o.roa (hash: 3gIZ7quZRp5VH+343KfEOmSv0A/IFrhSpW84UgHzh6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:5a:a2:42:ff:89:b7:53:ed:bb:2a:c0:27:74:5f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e8baea95d4040348f0a89ec4e4bd15275f6c39
Validity
Not Before: Sep 23 13:00:41 2026 GMT
Not After : Sep 24 13:00:41 2026 GMT
Subject: CN=6df2c0a10d7196c160857614ea49fff7f4e1ae4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:07:79:66:84:f6:be:2f:4a:ba:f4:66:11:71:
b2:87:b2:7a:d4:02:58:17:3f:d0:da:57:27:f8:69:
b3:85:8e:df:2d:57:04:c4:b8:92:44:1f:a8:71:97:
2c:92:3d:c1:c7:ab:c2:6a:46:aa:6d:fb:bb:b6:74:
50:f4:f4:95:4a:79:41:54:02:50:4e:da:78:33:1b:
57:b8:a6:74:05:bf:01:51:b3:c2:7a:6c:ab:8f:16:
24:b2:f7:e5:ff:29:95:82:11:96:21:24:73:46:46:
1a:90:22:9d:1b:0e:8e:76:08:5a:15:5b:db:92:dc:
9e:18:62:44:fd:7a:1e:1b:3e:1b:25:52:8c:71:e2:
6a:9d:b3:1f:a8:8d:8e:4f:ed:d4:95:7d:4e:12:1d:
df:1a:6d:1c:8c:33:26:8a:3b:6f:63:e5:6a:f1:52:
14:77:e6:de:cd:77:59:49:a5:88:6e:9c:6b:85:f4:
38:23:64:9a:84:f5:15:43:b9:cf:91:4c:2e:e7:9b:
d2:49:a9:4e:63:ba:5a:81:e5:4f:b5:b0:df:49:bf:
d2:5a:59:d7:9a:98:cf:f0:ca:24:b6:3a:7f:da:18:
61:61:82:79:98:5f:5f:cb:ab:c8:69:36:04:a8:e6:
b3:75:f5:63:e6:7a:69:b7:c1:5a:3c:0b:97:0f:b9:
29:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F2:C0:A1:0D:71:96:C1:60:85:76:14:EA:49:FF:F7:F4:E1:AE:4C
X509v3 Authority Key Identifier:
keyid:68:E8:BA:EA:95:D4:04:03:48:F0:A8:9E:C4:E4:BD:15:27:5F:6C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:b6:97:6d:93:96:45:36:0d:41:d7:ab:4f:7e:5b:b1:93:1d:
fb:10:fd:ef:7b:74:fe:74:31:1b:73:e8:67:d6:61:1a:d9:89:
2a:4c:86:f7:d1:0e:43:27:8e:2a:07:c2:df:e5:5a:43:72:27:
ce:22:da:f6:29:b3:54:d3:ee:6b:c3:32:2c:ce:de:40:b9:04:
3b:09:39:71:d5:57:9c:60:ef:56:55:74:02:77:ae:bf:b8:cd:
2e:b4:7e:4a:a8:5e:2d:66:6a:20:ae:3a:eb:c3:31:78:e6:db:
8a:9d:58:c9:f6:c2:b3:d5:73:3e:1f:0f:11:de:1a:9d:78:27:
a2:a7:ab:c8:63:33:11:ea:5c:c9:ed:8c:92:6f:0e:4d:d5:d0:
6c:db:39:ab:c4:af:32:0f:47:96:16:56:ef:5a:d7:e8:d2:9f:
45:97:d6:a3:39:83:f4:b4:74:11:d1:21:cf:b5:ab:9a:65:ee:
f1:3d:19:57:a3:85:f3:82:0c:17:9c:ca:0b:84:3f:4b:33:01:
ae:b5:fc:fd:e2:3b:db:45:5e:dc:43:3b:33:ba:72:cd:b9:56:
69:a6:97:85:14:82:aa:40:5b:25:83:e6:df:54:04:92:fd:b0:
f4:50:d4:7a:46:d1:5d:5f:d4:95:30:e8:55:89:a1:16:51:74:
2a:8e:96:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:51:45 2026 by rpki-client