Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft
File: aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft (raw, json)
Hash identifier: FQiOy/WcG+Oa8WdWgPu2O04E4uGBmfCtOKmz33ErJQ4=
Subject key identifier: 02:B2:2A:7B:98:9D:6F:3D:ED:EB:0C:F4:22:5B:83:13:87:1A:44:63
Authority key identifier: 68:E0:78:B5:18:1B:E5:FB:E9:14:B4:12:A4:12:09:6B:C8:D7:15:49
Certificate issuer: /CN=68e078b5181be5fbe914b412a412096bc8d71549
Certificate serial: 019E1DFDE1656C2EA77861D29A5F0731AFB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOB4tRgb5fvpFLQSpBIJa8jXFUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft
Manifest number: 1909
Signing time: Tue 12 May 2026 21:00:37 +0000
Manifest this update: Tue 12 May 2026 21:00:37 +0000
Manifest next update: Wed 13 May 2026 21:00:37 +0000
Files and hashes: 1: 6nS7ChSMwS0NiVMZWHlnkhrttP8.asa (hash: iXhlJdpfjIUYJ5YZ/S4lqTUks7mtZzgak62hVEHY6bM=)
2: aOB4tRgb5fvpFLQSpBIJa8jXFUk.crl (hash: adqPzh5CxyzvRueg4xg8cNeeg33coQ1lCzSe8enYnXI=)
3: kh97mCRCb1gM-n6T2L16tRWt1No.roa (hash: Uv7w0anQc7bmfRwWtut6B/CD6qt0gTfBsNdk/bWiZ00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aOB4tRgb5fvpFLQSpBIJa8jXFUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fd:e1:65:6c:2e:a7:78:61:d2:9a:5f:07:31:af:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e078b5181be5fbe914b412a412096bc8d71549
Validity
Not Before: May 12 21:00:37 2026 GMT
Not After : May 13 21:00:37 2026 GMT
Subject: CN=02b22a7b989d6f3dedeb0cf4225b8313871a4463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:71:a5:8f:c1:06:96:b2:45:32:b7:0d:81:2d:
33:ec:29:7a:b5:e4:93:43:35:03:ae:bf:7d:4e:bb:
60:c5:20:af:93:d8:bd:62:3b:6f:61:06:5c:d9:86:
3d:6f:f2:74:b2:ae:66:4e:6d:e5:2d:bb:a7:37:5f:
1f:e3:1a:40:27:80:cc:4e:7d:ce:33:fa:f1:6f:9e:
67:94:5f:45:60:e4:66:20:eb:b9:1f:f2:75:e3:e5:
b2:78:73:cf:ae:9e:ab:03:db:cb:7c:db:62:96:0e:
e3:33:94:c8:f2:e8:b2:a0:61:e4:97:58:80:92:c0:
b9:d8:2c:c7:b0:0d:9f:2f:9c:ac:79:24:b1:cf:7f:
9b:99:3d:cf:e4:79:c2:38:3c:e0:ca:7b:e2:93:6c:
0b:1e:69:ad:82:50:3e:b8:f0:f6:3d:4e:91:d3:d9:
c9:6e:21:2c:35:5b:2f:cf:65:3a:b2:60:1d:1c:64:
47:c1:d0:2b:ec:7e:27:34:8e:84:ae:aa:b3:d7:ce:
f3:51:7e:70:a6:46:1c:2e:b8:80:32:fa:d7:f7:9e:
c3:34:b6:e6:5f:cc:29:67:4a:4a:a4:b1:60:ba:cb:
8f:2f:66:99:3d:7b:13:5f:85:0e:20:68:4f:11:6d:
3c:d1:02:c3:bd:05:16:85:db:00:5c:23:74:ca:d3:
67:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B2:2A:7B:98:9D:6F:3D:ED:EB:0C:F4:22:5B:83:13:87:1A:44:63
X509v3 Authority Key Identifier:
keyid:68:E0:78:B5:18:1B:E5:FB:E9:14:B4:12:A4:12:09:6B:C8:D7:15:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOB4tRgb5fvpFLQSpBIJa8jXFUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:35:c3:f8:4a:a3:3a:ef:c8:70:dc:26:f0:d1:5c:39:62:70:
14:e1:01:a2:05:77:dd:60:d2:9f:46:61:30:3a:9b:bf:bd:c2:
5d:92:3a:23:87:20:3b:14:6d:18:ff:56:a2:b4:69:e2:9d:72:
c2:1b:c6:c1:8b:f4:43:33:4f:2a:c9:39:c5:a7:82:68:af:99:
e2:43:25:58:9f:33:0c:09:ed:92:c1:18:64:36:c1:2a:4d:c9:
65:1b:5f:7c:fb:e4:78:a9:61:e0:78:ef:21:e4:12:83:59:aa:
10:0e:50:61:e7:4f:b6:73:52:e3:e3:15:58:07:d0:36:e3:ca:
4d:6a:27:30:7e:f0:e2:42:3b:73:ba:eb:f3:38:48:40:00:31:
69:30:e1:e7:29:29:72:84:74:37:4a:55:9a:03:48:ce:19:50:
9a:e7:e7:81:27:47:7f:da:52:28:e3:29:43:6a:48:1b:76:1d:
ae:b3:93:c8:53:b7:a9:42:29:df:d8:8d:54:96:02:30:dc:4d:
dd:76:58:c7:b8:c1:ec:a8:23:d4:e0:79:2b:b2:c9:7b:9f:34:
4f:6f:50:f5:45:fc:c3:19:e7:94:2f:d6:49:eb:36:65:ad:40:
60:e2:74:d6:bc:18:c4:0b:8f:2e:19:7a:60:3b:d0:37:41:18:
f9:54:ff:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:07:21 2026 by rpki-client