Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft
File: aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft (raw, json)
Hash identifier: 7eis3xvSg9ZJqseAnileDQ3+uX+ffoCXujOPsrBMWmg=
Subject key identifier: D6:5C:9F:E7:DE:C4:F4:35:45:FD:05:39:AD:35:75:B8:00:52:A7:12
Authority key identifier: 68:E0:78:B5:18:1B:E5:FB:E9:14:B4:12:A4:12:09:6B:C8:D7:15:49
Certificate issuer: /CN=68e078b5181be5fbe914b412a412096bc8d71549
Certificate serial: 019F90915BCFC6881071450CDFA522CDB98D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOB4tRgb5fvpFLQSpBIJa8jXFUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft
Manifest number: 19C9
Signing time: Thu 23 Jul 2026 20:01:12 +0000
Manifest this update: Thu 23 Jul 2026 20:01:12 +0000
Manifest next update: Fri 24 Jul 2026 20:01:12 +0000
Files and hashes: 1: E0qsSsXvJA7eTjmf9QIZIPlFRl0.asa (hash: pvwAZEYObtjRdyOg9qCz2xFJ0nX0q9m4ifjK1DFkmOo=)
2: aOB4tRgb5fvpFLQSpBIJa8jXFUk.crl (hash: MSIsqP+MjN1ksqAn2GzFqyQSY8E2U/XrWDD/OYagN3c=)
3: kh97mCRCb1gM-n6T2L16tRWt1No.roa (hash: Uv7w0anQc7bmfRwWtut6B/CD6qt0gTfBsNdk/bWiZ00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aOB4tRgb5fvpFLQSpBIJa8jXFUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:5b:cf:c6:88:10:71:45:0c:df:a5:22:cd:b9:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e078b5181be5fbe914b412a412096bc8d71549
Validity
Not Before: Jul 23 20:01:12 2026 GMT
Not After : Jul 24 20:01:12 2026 GMT
Subject: CN=d65c9fe7dec4f43545fd0539ad3575b80052a712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9b:0a:fb:c8:35:7d:55:df:52:a0:68:4b:52:
ca:bf:53:06:1f:17:99:50:10:48:04:2d:cd:b6:77:
6b:58:3b:cf:ed:6d:a2:35:26:16:2d:c6:22:94:51:
a8:dd:28:dc:11:57:ec:3e:c5:ec:60:12:51:a6:7b:
7a:40:9e:0c:55:bd:cc:1b:9d:d0:19:0c:bd:87:09:
ca:67:80:84:70:22:9a:a9:4a:25:48:88:b0:44:ef:
8e:92:a4:8c:3c:62:59:8b:5d:8c:90:f1:d5:6a:b4:
93:37:11:e2:55:2a:e9:23:36:65:c1:d2:bb:fb:1e:
b1:df:27:5c:56:44:3a:c0:45:f9:8d:fb:53:a1:e9:
f0:8e:ed:1f:c8:a4:9d:e8:f2:08:d4:ea:9a:90:7e:
7b:4f:1e:06:1a:f4:01:0c:25:f2:86:bf:ac:e1:b6:
23:8b:67:53:4b:81:d1:5f:10:6a:a9:5c:6e:f9:e5:
ce:36:74:3e:ad:62:d2:10:96:4f:ff:4a:40:4f:d9:
80:12:61:d1:1a:55:83:15:f0:10:79:bf:9d:a3:3a:
72:ae:69:9e:82:e0:89:a1:f6:7c:f3:95:ed:7f:d9:
a2:88:ba:a2:88:f0:6a:09:42:5e:16:8f:4a:c4:2b:
5f:89:99:1b:95:19:8f:60:61:ea:e3:4d:84:af:7a:
b4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:5C:9F:E7:DE:C4:F4:35:45:FD:05:39:AD:35:75:B8:00:52:A7:12
X509v3 Authority Key Identifier:
keyid:68:E0:78:B5:18:1B:E5:FB:E9:14:B4:12:A4:12:09:6B:C8:D7:15:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOB4tRgb5fvpFLQSpBIJa8jXFUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:3d:4a:e1:49:b7:72:39:93:87:36:0e:dc:ab:71:31:10:2d:
e1:b0:19:68:40:91:0c:a1:bd:51:d5:df:8c:9a:0c:94:c5:49:
cf:8a:1b:c2:47:af:fd:2f:0e:e4:9c:26:33:48:fa:67:df:85:
7c:43:90:f9:87:73:77:c6:88:78:d6:d1:87:22:71:f3:7f:a6:
6e:15:3a:b5:7b:cc:57:ae:84:62:43:ab:3c:44:6c:b9:58:e5:
21:eb:8c:a5:4c:de:1a:65:f2:a0:af:27:f9:d2:14:02:37:bf:
5c:40:be:56:a3:10:bc:c4:1c:38:8a:46:90:12:4a:4b:d1:89:
d1:cf:dc:2f:2c:16:03:9f:5e:c9:f4:98:69:55:06:44:56:f7:
82:e3:db:b8:91:ee:e7:16:11:38:78:b6:b5:e9:05:cf:31:71:
00:72:db:7b:41:c4:eb:1a:e4:68:4a:2a:19:b7:3d:55:9f:58:
6a:6a:a2:7a:d9:99:1c:63:67:ab:65:15:89:7d:ad:dc:5a:20:
3f:da:8b:0c:25:0a:3f:bb:b5:fd:e8:c8:5b:a6:37:74:ce:bf:
61:38:8d:b6:af:06:ed:30:f6:b2:e8:1e:0b:dc:df:d6:7c:f8:
58:66:00:b3:49:60:6b:5f:f3:cb:ae:a9:ad:c9:ca:cc:03:d7:
2b:22:4e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:19:38 2026 by rpki-client