Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
File: aOi66pXUBANI8KiexOS9FSdfbDk.mft (raw, json)
Hash identifier: ib500cwuoViSsYQbDwHuBL1jo2jhRjxcelW+oYKoLFo=
Subject key identifier: 01:55:D4:88:C4:91:E6:42:F1:21:23:35:1B:F2:34:6C:36:16:54:D6
Authority key identifier: 68:E8:BA:EA:95:D4:04:03:48:F0:A8:9E:C4:E4:BD:15:27:5F:6C:39
Certificate issuer: /CN=68e8baea95d4040348f0a89ec4e4bd15275f6c39
Certificate serial: 019EFB01A8BE0C082A89FAD602E3CAEB2100
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
Manifest number: 1978
Signing time: Wed 24 Jun 2026 19:00:50 +0000
Manifest this update: Wed 24 Jun 2026 19:00:50 +0000
Manifest next update: Thu 25 Jun 2026 19:00:50 +0000
Files and hashes: 1: F7uNYW_BAZq9rI9uR7hZmoD2t2c.roa (hash: 66sSkYjfMPB1iz46OvsCyBJxFuzzlDOw8irePRrhJqo=)
2: ZbRHE63NTowomZ--6hRN7-VQWd4.roa (hash: 9fZQ79ry0wcmms4XZEk0xvVuXwwePg4F6u4eylx66hY=)
3: aOi66pXUBANI8KiexOS9FSdfbDk.crl (hash: BunOPwOHNtbTTvAY6nOONV/p2EscDoFxzpCBb7mcacg=)
4: cAIe2NM_E7WCCYmd0eVZsMmImNA.roa (hash: sic7GmBZVp2aPzVp03gq0Hxyh3yCltc3C8dhZASVy34=)
5: iN8E5J8FWFCEMY65ALgZit2wZ5o.roa (hash: 3gIZ7quZRp5VH+343KfEOmSv0A/IFrhSpW84UgHzh6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 14:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fb:01:a8:be:0c:08:2a:89:fa:d6:02:e3:ca:eb:21:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e8baea95d4040348f0a89ec4e4bd15275f6c39
Validity
Not Before: Jun 24 19:00:50 2026 GMT
Not After : Jun 25 19:00:50 2026 GMT
Subject: CN=0155d488c491e642f12123351bf2346c361654d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:11:26:16:ad:a6:00:2b:41:e8:14:c4:6a:f0:
39:5c:01:3d:ef:a5:c4:54:4b:58:f3:9f:6d:78:d2:
d2:c4:05:5c:0e:bc:68:fb:18:98:bd:49:ec:c5:4b:
37:be:79:5b:0e:09:5e:2e:f0:36:fb:15:1c:1a:b8:
78:c3:bb:e5:5a:e5:62:ab:5a:77:6e:0a:a6:ae:b2:
a0:e0:d5:58:bf:6b:92:62:18:83:41:b6:13:11:64:
ce:4f:e2:dd:9b:e2:9e:00:91:68:9b:18:5c:d1:d9:
89:8e:75:f6:5e:61:ec:0a:83:dd:57:d4:10:78:53:
44:cd:71:3d:a4:94:81:59:27:db:2e:8f:cb:b7:c3:
2d:37:74:52:f1:ef:4c:55:72:ce:c2:40:06:84:35:
35:fb:86:18:43:b2:36:45:03:b0:b2:80:9f:96:f5:
09:66:13:bb:0f:fa:5a:76:16:dc:3a:44:35:82:79:
5a:a6:b1:50:56:03:a7:cb:02:7d:24:43:0e:8c:7f:
fc:f9:8f:1e:8a:17:30:b8:7e:fa:ad:8a:0f:a8:8f:
38:6b:8f:61:98:bb:0c:d1:3a:4f:25:81:8e:5b:3a:
38:3e:74:df:5a:e6:a4:d6:6f:aa:4e:74:e6:64:04:
ff:f8:8c:19:02:b3:e3:dc:cf:30:e5:22:17:b4:2c:
3e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:55:D4:88:C4:91:E6:42:F1:21:23:35:1B:F2:34:6C:36:16:54:D6
X509v3 Authority Key Identifier:
keyid:68:E8:BA:EA:95:D4:04:03:48:F0:A8:9E:C4:E4:BD:15:27:5F:6C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:94:90:f8:3d:9d:15:a2:a2:38:9d:82:e4:dc:27:61:ef:22:
7d:2a:8a:fa:36:de:a1:f3:24:1f:d6:54:93:24:02:52:c4:11:
01:e2:4c:54:94:27:bc:9e:2a:ae:ca:e8:a6:a3:b2:50:e3:ee:
07:92:10:5b:61:49:3f:b2:83:c7:68:94:bf:0c:39:c1:0a:21:
0a:38:54:de:5f:fc:6e:eb:11:4e:a4:82:99:22:26:cc:3a:b1:
09:3d:0a:97:48:17:aa:51:9d:11:43:6a:59:3f:2f:ed:48:53:
82:5c:61:28:6a:73:72:12:0f:c6:e8:b3:29:72:ef:9e:18:29:
1d:0e:92:03:df:eb:80:8e:c5:29:ac:ee:99:e3:db:36:3d:1a:
1e:9f:30:e6:a5:84:ac:8f:ba:01:25:25:75:1a:1f:94:50:42:
df:12:74:51:2a:ae:0e:33:b4:79:07:7a:fe:01:03:01:48:e7:
bf:40:15:09:72:37:0f:de:ae:7e:16:18:bc:18:55:f3:76:78:
56:dd:f3:a4:72:a7:84:52:86:91:45:f7:e9:5c:c3:d8:6e:1e:
55:76:a4:53:3a:f7:98:45:b9:19:01:c0:02:2f:23:b2:16:99:
70:10:71:0e:d6:25:2d:eb:ec:6c:da:c9:ae:f9:64:7b:8e:70:
2e:c4:13:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 21:16:13 2026 by rpki-client