Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
File: aOi66pXUBANI8KiexOS9FSdfbDk.mft (raw, json)
Hash identifier: CJzn1UkAxPEFcZoBCHJ+Qjn4TASW2zKc1CyZP8NMHcs=
Subject key identifier: F1:C2:CA:30:8F:84:D0:A7:F1:79:B2:37:AC:8F:DC:A3:06:AA:A5:90
Authority key identifier: 68:E8:BA:EA:95:D4:04:03:48:F0:A8:9E:C4:E4:BD:15:27:5F:6C:39
Certificate issuer: /CN=68e8baea95d4040348f0a89ec4e4bd15275f6c39
Certificate serial: 01A0F11E5ACE6CE5D81321E94973A40097B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
Manifest number: 1A7C
Signing time: Wed 30 Sep 2026 07:01:33 +0000
Manifest this update: Wed 30 Sep 2026 07:01:33 +0000
Manifest next update: Thu 01 Oct 2026 07:01:33 +0000
Files and hashes: 1: F7uNYW_BAZq9rI9uR7hZmoD2t2c.roa (hash: 66sSkYjfMPB1iz46OvsCyBJxFuzzlDOw8irePRrhJqo=)
2: ZbRHE63NTowomZ--6hRN7-VQWd4.roa (hash: 9fZQ79ry0wcmms4XZEk0xvVuXwwePg4F6u4eylx66hY=)
3: aOi66pXUBANI8KiexOS9FSdfbDk.crl (hash: jWjespOhDNCigQ+E511YKUyrQ3eCsSOpKDUWzNL9DT4=)
4: cAIe2NM_E7WCCYmd0eVZsMmImNA.roa (hash: sic7GmBZVp2aPzVp03gq0Hxyh3yCltc3C8dhZASVy34=)
5: iN8E5J8FWFCEMY65ALgZit2wZ5o.roa (hash: 3gIZ7quZRp5VH+343KfEOmSv0A/IFrhSpW84UgHzh6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:1e:5a:ce:6c:e5:d8:13:21:e9:49:73:a4:00:97:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e8baea95d4040348f0a89ec4e4bd15275f6c39
Validity
Not Before: Sep 30 07:01:33 2026 GMT
Not After : Oct 1 07:01:33 2026 GMT
Subject: CN=f1c2ca308f84d0a7f179b237ac8fdca306aaa590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:57:a4:55:da:c5:34:08:2a:39:5d:e1:94:92:
88:d3:11:be:ca:9d:27:b6:a0:11:2b:15:7c:7b:d8:
1f:c1:44:f3:66:35:75:9a:ab:86:db:71:14:6a:57:
2b:3f:c1:18:8d:4d:66:ce:e6:02:ed:09:5d:de:68:
bd:f1:5e:b3:f6:86:6b:09:18:ee:f7:73:9f:d9:56:
4b:d4:23:c5:e1:cc:4e:4c:34:8b:2f:b8:18:1c:24:
e8:3c:9d:93:a6:2f:a3:c0:ea:8f:80:d0:47:10:bc:
19:ae:a8:40:f2:d1:fb:fa:3b:ae:28:74:1d:3e:ba:
f9:f5:9f:38:a1:7f:37:9b:64:dd:4a:21:a6:5b:76:
74:f4:58:41:3a:22:c0:65:67:70:df:24:b9:a2:cb:
d3:49:c1:f0:5c:f3:58:2e:29:2d:53:60:da:35:0f:
72:db:16:52:f8:93:4e:ff:04:e9:b5:31:60:b3:b9:
3c:0a:5e:86:a4:d4:3b:9f:38:1a:60:98:eb:84:04:
20:b9:a9:32:99:c5:73:8c:22:a3:f3:58:8c:11:a6:
83:3a:c1:b5:ac:92:c3:02:29:d5:5b:a6:24:47:d4:
4e:5f:52:cf:f1:55:f5:3e:57:b6:eb:7b:52:49:f1:
3f:07:85:84:ed:de:f4:1d:ca:40:6a:f8:5f:f3:e2:
da:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C2:CA:30:8F:84:D0:A7:F1:79:B2:37:AC:8F:DC:A3:06:AA:A5:90
X509v3 Authority Key Identifier:
keyid:68:E8:BA:EA:95:D4:04:03:48:F0:A8:9E:C4:E4:BD:15:27:5F:6C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:4b:dd:f9:cb:35:f4:e8:c2:b5:07:e8:60:89:c5:02:5e:d2:
78:ac:67:33:7d:ee:92:95:f1:04:22:3b:55:bb:86:e0:c9:fb:
42:1d:3c:5f:4b:82:bd:ff:0f:9b:22:94:e5:f3:44:73:13:11:
cb:e0:f2:85:b0:06:d9:0c:fc:d5:d9:a8:51:57:99:3e:40:3a:
32:49:e7:21:2d:a7:1d:81:2f:60:12:ea:03:f1:6f:80:d7:f0:
48:57:8b:47:96:ec:02:6a:8d:83:13:90:98:23:9a:06:39:61:
fa:e1:78:53:38:37:13:0f:4b:d5:99:e2:06:0b:f5:54:54:03:
32:9e:a5:bb:50:60:92:37:c3:93:cb:48:49:76:43:40:3a:a5:
1b:de:3b:e2:5c:c3:6b:1f:74:90:9c:dd:05:bf:4d:d4:c7:a7:
9f:62:78:12:06:cc:13:11:eb:24:d4:ab:e7:02:54:25:c7:a5:
95:d7:ea:49:f1:da:7f:a6:80:3d:32:32:8f:b5:56:a4:4e:c7:
0f:d8:3d:e8:b8:3d:16:23:58:a6:26:e6:fd:58:e1:eb:88:55:
c9:cc:3f:f1:c5:ec:cc:92:0b:a3:6d:d8:40:bb:8e:b0:4b:f6:
4c:32:f6:83:00:0c:fb:cd:8b:04:67:38:ac:75:0f:88:0e:15:
d3:f6:ca:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 11:24:34 2026 by rpki-client