Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
File: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft (raw, json)
Hash identifier: VLqGl9fsPVHLcT+B8XFkoZmUxTV9Jsrq4QoVbnBLPZ8=
Subject key identifier: 96:CF:C5:2C:EB:57:80:68:D9:24:8C:19:E1:73:1C:9F:57:56:61:98
Authority key identifier: 68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14
Certificate issuer: /CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314
Certificate serial: 019E1D59C1475D3401135B3D1978C559D2A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
Manifest number: 1903
Signing time: Tue 12 May 2026 18:01:21 +0000
Manifest this update: Tue 12 May 2026 18:01:21 +0000
Manifest next update: Wed 13 May 2026 18:01:21 +0000
Files and hashes: 1: YUXKYpsFemsNDBecWX4MUwbfgXA.roa (hash: aALLuFrEzNbZ6xLI2lfoFLt5fV9m8J9Klkm3q6Pz7LI=)
2: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl (hash: SWPhwi+hFPAMJDFEeDMzwJpdVlcl1sOW+ArETsBbrVo=)
3: ce5lJ-hpH1wu-kVRML7xAZPt-gE.roa (hash: 8ViUaToRkyhjrSgTu0qhVkwYrKw/qmbuzYwV/hXV6/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:c1:47:5d:34:01:13:5b:3d:19:78:c5:59:d2:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314
Validity
Not Before: May 12 18:01:21 2026 GMT
Not After : May 13 18:01:21 2026 GMT
Subject: CN=96cfc52ceb578068d9248c19e1731c9f57566198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5d:c5:f1:30:08:2f:8d:54:07:20:e3:2f:1a:
33:92:f5:31:62:0e:ed:60:0c:d6:58:d8:98:22:09:
46:cb:13:15:14:3c:6b:5c:55:9f:34:20:2a:b0:a1:
c0:ee:17:92:b2:9b:62:c2:06:c3:b1:81:c5:18:80:
03:cb:e9:41:b9:0d:83:cd:cf:76:fb:4c:c3:00:74:
1e:e4:6b:a6:63:1d:b9:64:da:40:57:31:8e:96:76:
4b:71:0b:c5:07:94:71:fd:1f:40:ed:a5:59:93:d6:
b3:80:17:41:49:e7:9a:fa:ba:7c:e3:0f:1c:62:19:
2a:05:58:94:04:88:1f:91:cd:90:0a:7b:1e:7b:f8:
bb:50:bb:41:01:a0:89:89:64:07:7c:c6:f9:e2:a2:
ca:76:f7:a6:95:ad:fb:f2:f0:a1:7a:69:1a:36:9a:
47:d3:63:8e:49:ec:97:d3:ee:05:f6:3a:64:ec:60:
46:13:21:65:79:c3:02:8a:de:60:2d:02:a1:4e:5b:
60:b4:9f:2a:7b:c3:8d:71:76:c0:52:6c:e1:ed:a0:
5c:b0:19:e8:11:fc:3f:70:40:48:61:e6:94:7f:d0:
70:5f:2f:ce:95:ff:e9:08:5d:e3:e3:a0:03:22:86:
10:c8:d8:e0:61:fa:66:f8:bf:ea:fe:46:5c:b9:7c:
6f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:CF:C5:2C:EB:57:80:68:D9:24:8C:19:E1:73:1C:9F:57:56:61:98
X509v3 Authority Key Identifier:
keyid:68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:6a:45:83:4c:69:7b:0c:08:f2:d1:47:3c:0f:8e:bb:de:24:
88:de:10:a4:e0:6c:61:37:f9:92:f2:98:76:77:fc:16:94:3b:
31:05:76:dc:18:f0:84:e3:af:9c:ac:93:40:64:ba:38:9b:d9:
0e:c3:c0:e1:d7:ce:36:9a:6d:bc:b9:d0:ca:bc:6a:a5:86:e9:
9f:e0:5c:52:ca:ed:e4:13:e6:a1:69:14:46:0f:31:18:d7:99:
7e:da:70:81:a7:4f:f5:6c:87:c2:ae:43:75:dd:8b:0d:36:52:
92:d2:2a:2c:75:da:fb:01:ae:12:30:1d:10:7f:cf:57:01:9c:
e9:43:81:0e:6f:e4:b1:78:8c:5c:05:98:dc:68:95:c9:54:f8:
8e:f8:03:35:67:10:bb:1f:05:76:fc:ce:6e:b8:7c:b7:55:fe:
61:98:52:48:8a:5e:eb:7a:aa:99:3f:de:04:93:4c:19:7c:21:
46:9c:86:50:c1:75:a1:f0:8c:1d:5d:57:6e:e9:d1:7b:36:5b:
94:8b:92:7b:79:e1:6c:43:89:b0:c2:70:5f:95:ff:70:75:b1:
88:e0:f9:ca:7c:28:38:f1:e2:34:08:8d:82:84:88:f5:32:50:
9d:28:09:1f:57:5e:9e:3e:96:e3:9f:83:a6:76:03:b9:44:53:
c9:bc:93:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:12:21 2026 by rpki-client