Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
File: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft (raw, json)
Hash identifier: jtxpe8Wim0AW7XxcTYKwmCL7W13pfR3Q5VcPMUXBHeE=
Subject key identifier: 77:B7:C3:A8:3E:70:94:DA:DC:65:25:BB:23:42:9D:D5:3D:16:29:A8
Authority key identifier: 68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14
Certificate issuer: /CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314
Certificate serial: 019F921106DBF86F13864112E3F3848AC01E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
Manifest number: 19C4
Signing time: Fri 24 Jul 2026 03:00:17 +0000
Manifest this update: Fri 24 Jul 2026 03:00:17 +0000
Manifest next update: Sat 25 Jul 2026 03:00:17 +0000
Files and hashes: 1: YUXKYpsFemsNDBecWX4MUwbfgXA.roa (hash: aALLuFrEzNbZ6xLI2lfoFLt5fV9m8J9Klkm3q6Pz7LI=)
2: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl (hash: QFHCLfQ8VzzXjbVScKGEqcQnqYyTXFxqvoHge/ykrbM=)
3: ce5lJ-hpH1wu-kVRML7xAZPt-gE.roa (hash: 8ViUaToRkyhjrSgTu0qhVkwYrKw/qmbuzYwV/hXV6/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:06:db:f8:6f:13:86:41:12:e3:f3:84:8a:c0:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314
Validity
Not Before: Jul 24 03:00:17 2026 GMT
Not After : Jul 25 03:00:17 2026 GMT
Subject: CN=77b7c3a83e7094dadc6525bb23429dd53d1629a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b6:ea:b9:9a:6a:81:ae:a9:db:c3:71:c6:63:
d6:fc:b1:b5:fd:4d:bb:04:1b:01:a6:67:ba:c6:5b:
cc:a0:12:f4:2d:db:ed:41:bb:71:74:14:2f:02:e6:
1e:c0:14:fa:d1:e4:8e:65:36:f0:7d:48:ae:78:aa:
9e:ee:0a:c2:16:67:76:cc:e1:d7:5c:33:21:81:50:
0f:2d:06:aa:44:14:fc:99:1f:56:34:9e:44:0a:b9:
11:38:a1:a4:80:a3:a0:76:e4:c2:f3:3f:f8:71:50:
99:44:64:db:23:51:3a:e7:0b:f1:9e:54:c5:d9:eb:
62:f2:b3:b2:60:11:89:cf:1c:45:7b:32:57:9f:ad:
26:74:bf:03:ff:4b:c6:8d:88:d6:f1:bb:88:6c:bd:
5c:6a:e0:63:b2:ee:39:61:0c:e3:6d:34:df:b6:01:
e5:02:fd:d0:d6:dc:e4:a2:79:c9:8e:cc:70:85:60:
9b:ea:7a:fe:0f:15:66:3f:98:a1:e6:8d:7d:bb:a9:
b6:41:8f:2d:5d:a5:11:3a:6a:0c:fd:21:06:f6:ec:
8d:f6:e2:46:6e:cd:97:1b:a4:bf:6e:ab:2d:05:e8:
0f:ac:f7:72:87:52:33:d7:65:f7:7c:5d:5f:ea:1f:
e8:fe:89:a1:1a:6b:72:df:99:e3:72:dd:78:fd:9e:
29:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B7:C3:A8:3E:70:94:DA:DC:65:25:BB:23:42:9D:D5:3D:16:29:A8
X509v3 Authority Key Identifier:
keyid:68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:64:3e:54:01:25:46:7b:35:a4:de:af:01:3e:ff:b0:5b:82:
8f:55:13:6b:e4:ee:f9:cc:2c:5b:55:9c:3a:63:16:db:ab:6a:
87:a9:49:f7:51:a6:c4:fb:0f:bf:e5:7b:4d:ff:26:f5:87:80:
f8:ed:e8:12:67:af:de:54:c2:4b:2b:20:15:be:fe:96:f1:11:
19:f8:88:f1:d5:2f:b8:4b:ee:c8:b5:36:81:63:53:01:8b:d4:
f6:a7:33:e4:c6:ed:95:cf:50:34:05:4e:1b:36:78:76:43:7f:
a5:27:24:67:0e:05:d2:ef:ae:e4:2d:26:7b:0c:aa:4e:2e:b7:
12:45:61:14:1d:e1:bc:b7:de:f5:8e:d9:00:e5:27:7f:b0:79:
b8:39:25:ae:92:dc:41:18:a2:5d:b7:8e:7b:be:3e:5d:bb:5b:
35:a7:9e:25:0a:f9:59:e8:71:87:a3:d0:40:9f:37:ac:09:80:
a1:1e:47:d3:6a:b6:bb:5b:36:82:1c:dc:b9:10:ca:e8:83:20:
47:d6:06:76:50:c3:3d:21:00:6b:47:a9:89:5b:3b:3e:10:ca:
88:f3:d0:1a:8e:57:37:53:f4:57:a2:e2:ad:95:26:a3:09:22:
c2:14:04:74:f4:f8:97:9b:96:6a:f8:e4:8b:82:5d:1c:44:fa:
f8:6e:12:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:27:42 2026 by rpki-client