Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
File: aOi66pXUBANI8KiexOS9FSdfbDk.mft (raw, json)
Hash identifier: 45HOoKUwqoJKElvDlE1YVgDdfzuJUL0Cf4LLBzVo+x8=
Subject key identifier: CE:20:81:61:DA:B2:1A:D0:44:DB:9A:9F:1E:68:B2:47:21:16:1A:B6
Authority key identifier: 68:E8:BA:EA:95:D4:04:03:48:F0:A8:9E:C4:E4:BD:15:27:5F:6C:39
Certificate issuer: /CN=68e8baea95d4040348f0a89ec4e4bd15275f6c39
Certificate serial: 019FF61044534E4206641EE7427158CA0C03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
Manifest number: 19FA
Signing time: Wed 12 Aug 2026 13:01:28 +0000
Manifest this update: Wed 12 Aug 2026 13:01:28 +0000
Manifest next update: Thu 13 Aug 2026 13:01:28 +0000
Files and hashes: 1: F7uNYW_BAZq9rI9uR7hZmoD2t2c.roa (hash: 66sSkYjfMPB1iz46OvsCyBJxFuzzlDOw8irePRrhJqo=)
2: ZbRHE63NTowomZ--6hRN7-VQWd4.roa (hash: 9fZQ79ry0wcmms4XZEk0xvVuXwwePg4F6u4eylx66hY=)
3: aOi66pXUBANI8KiexOS9FSdfbDk.crl (hash: nKg+138+wufrlwJ4sw+LycWWh63OOKaXdrcRhmUmu4A=)
4: cAIe2NM_E7WCCYmd0eVZsMmImNA.roa (hash: sic7GmBZVp2aPzVp03gq0Hxyh3yCltc3C8dhZASVy34=)
5: iN8E5J8FWFCEMY65ALgZit2wZ5o.roa (hash: 3gIZ7quZRp5VH+343KfEOmSv0A/IFrhSpW84UgHzh6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 13:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f6:10:44:53:4e:42:06:64:1e:e7:42:71:58:ca:0c:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e8baea95d4040348f0a89ec4e4bd15275f6c39
Validity
Not Before: Aug 12 13:01:28 2026 GMT
Not After : Aug 13 13:01:28 2026 GMT
Subject: CN=ce208161dab21ad044db9a9f1e68b24721161ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:69:0d:11:fa:88:02:ea:64:eb:bd:e9:61:49:
50:d5:d7:31:eb:42:04:c2:9c:d1:2b:c9:f6:d0:f0:
bd:9b:a8:aa:a6:20:0c:81:09:c5:17:48:60:35:89:
dc:c3:21:d7:d1:75:af:94:e0:7a:20:e1:6a:72:1e:
f0:eb:33:e6:4d:35:51:5e:fe:7a:87:2c:12:1e:33:
43:86:9c:a0:a7:50:a0:30:37:f6:2a:85:50:26:90:
47:9d:54:40:34:85:30:ef:d8:36:b5:cc:3a:55:18:
18:b9:24:7f:5b:04:c8:25:16:7d:86:f3:b0:d0:87:
49:7b:8b:97:a2:d2:e6:8a:8a:f9:c0:b6:1a:d7:4a:
1d:57:06:b7:c1:07:f6:4e:df:ba:5c:4e:d3:87:4d:
fd:88:77:41:4f:11:e1:60:fd:01:82:31:ac:12:4c:
60:38:09:dc:b7:80:5c:97:84:12:3c:82:29:c1:93:
59:2b:17:36:ad:b1:61:ef:fe:b2:a6:1d:9e:4d:bc:
f5:b8:ca:b4:4f:00:1a:83:97:d4:85:27:be:18:9b:
6e:f3:d1:32:26:f1:10:70:e7:34:5f:c9:6b:08:90:
0f:df:96:14:8c:aa:0f:22:3c:db:48:cc:c8:3c:26:
bb:0d:ec:c7:e0:8f:9b:d0:52:e5:f3:a5:b6:72:f4:
86:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:20:81:61:DA:B2:1A:D0:44:DB:9A:9F:1E:68:B2:47:21:16:1A:B6
X509v3 Authority Key Identifier:
keyid:68:E8:BA:EA:95:D4:04:03:48:F0:A8:9E:C4:E4:BD:15:27:5F:6C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:bc:cd:f9:49:22:ae:84:67:95:64:91:aa:34:aa:88:11:55:
c8:fb:e0:ff:e1:a1:c4:9b:fe:57:0f:f0:3e:30:a5:e7:1c:dd:
d4:ed:69:66:13:85:2e:78:4c:23:8f:c7:31:07:75:78:c0:0d:
9b:7b:0b:b3:4b:b2:25:01:79:20:cc:da:90:b3:50:39:bc:1b:
70:cb:8e:fe:f0:a3:11:8a:ca:5c:2d:0b:f2:51:88:f7:10:88:
ef:8a:61:b1:fc:50:aa:15:04:f2:91:2a:d2:78:57:e1:07:b6:
e0:73:7d:06:82:d9:59:80:b5:c7:ba:f3:75:0a:8d:3a:e1:83:
46:69:76:06:b9:59:30:a0:c1:46:f1:40:68:a8:40:eb:96:52:
4f:cb:f9:53:5b:1c:35:74:2d:d2:83:af:24:9f:56:54:22:24:
a8:af:c2:de:37:3c:f3:8c:db:15:46:8f:2d:c0:ec:2e:9e:2b:
5f:4a:f6:bd:a1:77:46:f1:20:a9:7c:28:fb:2b:86:6b:fc:56:
94:0c:06:d4:41:c1:04:20:7d:a4:e7:b8:69:b0:61:5b:28:3d:
5a:ac:b2:34:29:82:f1:6e:c4:0c:78:98:f8:fe:c6:0f:f3:a6:
01:35:e7:86:c3:7c:14:eb:2a:7b:de:fd:73:5f:38:be:dc:98:
b6:bc:fe:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 20:35:02 2026 by rpki-client