Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/aoKFGhN-YFmlwZ4lJ_OepsrXxKo.mft
File: aoKFGhN-YFmlwZ4lJ_OepsrXxKo.mft (raw, json)
Hash identifier: IuLTvJbduxnNuwvdVSGhGZdXGfT/f4qsE6f4JFY4mdo=
Subject key identifier: 38:E6:25:D8:AD:2C:E7:50:AF:D7:B3:4B:BC:64:31:28:AB:CB:99:4F
Authority key identifier: 6A:82:85:1A:13:7E:60:59:A5:C1:9E:25:27:F3:9E:A6:CA:D7:C4:AA
Certificate issuer: /CN=6a82851a137e6059a5c19e2527f39ea6cad7c4aa
Certificate serial: 01A0D012A2D0C03A3FC24387349E61342EE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aoKFGhN-YFmlwZ4lJ_OepsrXxKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/aoKFGhN-YFmlwZ4lJ_OepsrXxKo.mft
Manifest number: E6
Signing time: Wed 23 Sep 2026 21:01:17 +0000
Manifest this update: Wed 23 Sep 2026 21:01:17 +0000
Manifest next update: Thu 24 Sep 2026 21:01:17 +0000
Files and hashes: 1: 9FkvkvYKkpvtxRzhjS2Dl3OyIC8.roa (hash: ++BWUNm5eh2q9n/GsxysekfFrNVNQyGEMNFnVvfJnvw=)
2: GmPMqm-sExPGS5qeFQnTPPpdDUg.asa (hash: auZklUf5YgGzAAHvLeEe5ft8gS41CAy8rwwpS4z5H3A=)
3: aoKFGhN-YFmlwZ4lJ_OepsrXxKo.crl (hash: unQ4ELD6OOFGaT+I66VGxNz/lxLZ6VRZygOP3gZkmCA=)
4: xDdkyYp6QT-6exThNJOY2QGkx2k.roa (hash: IFSLHxTz5eB1n+A0D/T5f1vKzmvjNloM94tpDCBISCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/aoKFGhN-YFmlwZ4lJ_OepsrXxKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/aoKFGhN-YFmlwZ4lJ_OepsrXxKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/aoKFGhN-YFmlwZ4lJ_OepsrXxKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:a2:d0:c0:3a:3f:c2:43:87:34:9e:61:34:2e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a82851a137e6059a5c19e2527f39ea6cad7c4aa
Validity
Not Before: Sep 23 21:01:17 2026 GMT
Not After : Sep 24 21:01:17 2026 GMT
Subject: CN=38e625d8ad2ce750afd7b34bbc643128abcb994f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2b:33:b9:5b:03:1f:b5:d4:88:ab:ee:84:5e:
f3:2e:39:bc:d6:96:37:b6:ef:e4:b1:dd:72:55:80:
87:b2:33:fd:66:e7:45:11:10:46:a1:0b:38:e7:17:
8f:b2:7e:b3:59:eb:dc:e3:7b:68:99:88:70:75:3c:
92:03:2b:81:c5:a8:4b:da:dd:e5:02:7a:ac:76:78:
52:c6:e9:a4:a0:73:f9:5a:9d:de:12:3b:98:9b:3f:
c7:d4:9f:d8:bf:9c:55:e9:f6:7f:82:9a:30:91:60:
81:25:7f:c2:90:9c:ee:51:a4:18:3d:55:aa:af:7e:
47:75:bc:55:c9:ff:d7:fd:89:e6:37:73:8e:6a:f8:
f6:07:b0:ab:4f:36:b8:a8:20:58:88:5a:b0:47:05:
b0:5f:9d:d5:33:b5:cf:48:d1:aa:8d:4d:35:e7:3c:
04:07:bc:16:5c:b3:8b:4d:18:a0:74:cb:ac:fc:27:
11:1f:89:dd:ac:03:06:1e:5b:fc:2b:3e:3a:0f:b7:
e9:43:9e:dd:05:b3:a3:9e:3c:08:f0:65:56:68:cf:
59:79:04:40:1f:80:ed:fa:78:d1:b2:f7:be:90:6f:
cd:c4:6c:a6:bf:5d:93:06:9c:00:b8:41:04:ed:61:
c3:e4:43:30:52:e3:bb:a0:f5:b1:ed:96:3b:5b:04:
bb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E6:25:D8:AD:2C:E7:50:AF:D7:B3:4B:BC:64:31:28:AB:CB:99:4F
X509v3 Authority Key Identifier:
keyid:6A:82:85:1A:13:7E:60:59:A5:C1:9E:25:27:F3:9E:A6:CA:D7:C4:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aoKFGhN-YFmlwZ4lJ_OepsrXxKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/aoKFGhN-YFmlwZ4lJ_OepsrXxKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/aoKFGhN-YFmlwZ4lJ_OepsrXxKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:73:47:f4:e3:8a:90:65:3e:a8:52:2e:1d:3e:5b:eb:cd:cc:
51:f7:3a:f2:60:86:82:3d:7e:8a:fb:41:3d:fd:98:7d:29:a2:
ad:d8:b4:a3:a0:9d:60:40:93:e8:3b:f7:a2:a4:a7:f6:4b:f1:
2b:b6:3a:f1:03:61:15:1c:5f:c1:72:5b:98:ed:fb:98:40:9c:
c9:30:df:f8:fe:4f:53:09:4e:24:3c:19:e7:7b:2b:91:5d:7e:
65:cb:cf:97:a1:00:cc:b2:9d:75:29:ef:79:2d:7f:d8:92:c2:
86:1a:60:9a:15:91:33:44:82:1c:4d:19:e0:ab:9c:fa:7a:1b:
4b:0d:c7:b0:5c:56:5a:a6:fa:84:72:aa:c0:c2:ac:77:51:82:
ab:e8:fb:48:f7:df:a3:a0:e2:99:1a:18:d9:9a:fc:56:8e:7a:
e3:40:8e:49:bc:47:d1:85:8d:b2:34:27:2e:9b:65:61:c0:6c:
e9:e9:10:a4:95:a0:33:31:30:fc:9a:f6:d1:82:5e:ee:82:ae:
6e:41:37:5f:8f:77:7c:8f:8c:b2:11:6a:6b:09:b5:bf:40:ce:
4e:11:59:51:cd:84:1f:cf:6a:1a:28:ab:9b:e9:3b:35:14:15:
b1:0e:7f:98:5a:a3:ac:36:c2:10:46:76:d7:0d:4d:46:ec:c8:
f4:ef:89:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:54:17 2026 by rpki-client