Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
File: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft (raw, json)
Hash identifier: TAmeWjJmU4tCoX5jJqeIKHvZYtN2TpHEE2RM4ZgayEA=
Subject key identifier: 93:36:BC:25:B2:44:D3:9C:EA:28:E2:D4:4A:6B:F3:34:3E:4D:AD:61
Authority key identifier: 68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14
Certificate issuer: /CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314
Certificate serial: 01A0D682DEB9AEFE00A6CFDB4F0FC12913E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
Manifest number: 1A6C
Signing time: Fri 25 Sep 2026 03:01:35 +0000
Manifest this update: Fri 25 Sep 2026 03:01:35 +0000
Manifest next update: Sat 26 Sep 2026 03:01:35 +0000
Files and hashes: 1: YUXKYpsFemsNDBecWX4MUwbfgXA.roa (hash: aALLuFrEzNbZ6xLI2lfoFLt5fV9m8J9Klkm3q6Pz7LI=)
2: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl (hash: 2gxakgbq2rA41ShQ3FDcc7ETfzvA4t/wCYZw1O4t+Cg=)
3: ce5lJ-hpH1wu-kVRML7xAZPt-gE.roa (hash: 8ViUaToRkyhjrSgTu0qhVkwYrKw/qmbuzYwV/hXV6/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:82:de:b9:ae:fe:00:a6:cf:db:4f:0f:c1:29:13:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314
Validity
Not Before: Sep 25 03:01:35 2026 GMT
Not After : Sep 26 03:01:35 2026 GMT
Subject: CN=9336bc25b244d39cea28e2d44a6bf3343e4dad61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c9:0e:c8:58:62:d9:2a:23:8e:12:ae:06:44:
b9:34:93:1e:1e:e9:18:f4:ea:e4:af:9d:b9:1a:fd:
a0:64:6b:97:b5:b7:40:9c:97:b1:46:5e:62:75:7d:
01:e4:75:e2:c8:52:4c:b8:9b:16:17:d3:0d:94:e5:
53:a3:68:91:9d:55:93:80:e6:74:8f:b4:9d:d1:a0:
70:f8:3a:9d:90:ea:6b:e0:e1:38:f0:85:20:bc:dd:
d2:d3:81:87:7b:7c:e0:88:c4:8c:78:d5:7e:36:c5:
87:e5:43:2c:87:5b:c0:b3:87:66:37:59:64:25:b2:
1e:6b:2f:d2:59:53:aa:aa:fb:3c:09:46:43:ea:01:
27:ef:f4:e6:f3:4c:91:05:9b:74:49:80:cf:87:06:
55:95:01:3e:5b:ef:31:fe:d2:02:18:29:dc:17:0e:
1f:52:04:58:fb:c4:42:f0:97:e9:fa:27:4f:3b:0f:
52:d8:17:0f:f4:15:af:5a:40:0c:bd:92:4c:b5:cc:
6e:60:86:8c:37:03:82:2c:18:4a:16:89:e6:a5:46:
a7:4c:bc:0e:0a:93:d3:4c:b5:49:6c:41:d6:79:fd:
4a:8f:ee:9c:0e:41:8b:d3:6c:07:48:b3:cf:ee:45:
a8:c7:c9:c7:3c:a5:40:96:e3:a0:0f:76:16:8c:96:
1d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:36:BC:25:B2:44:D3:9C:EA:28:E2:D4:4A:6B:F3:34:3E:4D:AD:61
X509v3 Authority Key Identifier:
keyid:68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:ee:0f:c8:23:94:b8:db:eb:40:b4:fa:59:06:05:4b:1b:8f:
3e:cf:5e:cc:a2:ff:71:4b:68:ca:b0:9d:c3:40:34:1b:c3:69:
aa:e0:69:da:f8:5f:98:38:f6:8c:7f:02:4a:a5:fb:e8:23:14:
45:eb:ba:a1:13:47:d1:2d:87:97:32:e8:7a:64:26:8b:38:26:
de:91:6a:1b:6d:92:d2:b5:38:6a:a6:55:46:04:9d:bc:f2:ce:
32:e9:56:78:d0:57:b3:11:a1:87:1a:27:86:a0:0b:f0:73:10:
0b:4d:b3:0f:66:ee:b2:4a:82:fc:18:75:76:50:b7:28:d2:22:
0c:a2:d5:e8:6d:21:83:5c:2b:52:07:37:89:b1:1d:54:b7:d2:
15:10:b7:b0:9b:80:42:ef:6b:06:7a:d8:f1:5c:10:fc:6b:64:
76:48:30:64:4f:24:23:38:16:db:cf:5d:26:e0:57:78:35:48:
ed:36:3a:0c:84:b1:c6:b6:8a:1d:ad:d6:10:3c:7a:20:38:8c:
56:e1:de:66:a3:1c:0c:80:d6:9d:9f:a1:20:95:27:49:78:a4:
98:6f:6c:0f:f8:7a:a1:e0:10:8d:e3:33:cd:52:d0:f4:be:97:
ee:75:0a:d9:a6:4a:95:a5:42:5d:8e:02:f3:28:ff:a4:a4:80:
00:45:aa:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:24:46 2026 by rpki-client