Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft
File: aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft (raw, json)
Hash identifier: pDqxJVLQGq3M2CyOVU34TwSVPC0iOOc7yv6mf4UT4Eo=
Subject key identifier: D6:D1:6F:8B:88:82:80:68:AD:14:3F:0C:10:1D:3F:5D:8D:65:54:E3
Authority key identifier: 68:E0:78:B5:18:1B:E5:FB:E9:14:B4:12:A4:12:09:6B:C8:D7:15:49
Certificate issuer: /CN=68e078b5181be5fbe914b412a412096bc8d71549
Certificate serial: 019F11528ADC9A38EC4C0AAB55ACB33DE5A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOB4tRgb5fvpFLQSpBIJa8jXFUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft
Manifest number: 1987
Signing time: Mon 29 Jun 2026 03:00:49 +0000
Manifest this update: Mon 29 Jun 2026 03:00:49 +0000
Manifest next update: Tue 30 Jun 2026 03:00:49 +0000
Files and hashes: 1: 6nS7ChSMwS0NiVMZWHlnkhrttP8.asa (hash: iXhlJdpfjIUYJ5YZ/S4lqTUks7mtZzgak62hVEHY6bM=)
2: aOB4tRgb5fvpFLQSpBIJa8jXFUk.crl (hash: PY2HnKinI7MuKtrp9RxlkO6QQahNPfgcLjcpj56WxAo=)
3: kh97mCRCb1gM-n6T2L16tRWt1No.roa (hash: Uv7w0anQc7bmfRwWtut6B/CD6qt0gTfBsNdk/bWiZ00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aOB4tRgb5fvpFLQSpBIJa8jXFUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:52:8a:dc:9a:38:ec:4c:0a:ab:55:ac:b3:3d:e5:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e078b5181be5fbe914b412a412096bc8d71549
Validity
Not Before: Jun 29 03:00:49 2026 GMT
Not After : Jun 30 03:00:49 2026 GMT
Subject: CN=d6d16f8b88828068ad143f0c101d3f5d8d6554e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6f:1f:ed:19:ac:fe:2a:21:38:4f:d5:79:c7:
90:38:28:d2:15:c3:9f:45:37:7b:81:50:d9:16:0e:
d2:77:88:dc:56:04:ef:03:b8:5c:d3:e5:09:9c:c7:
29:01:47:a2:22:a2:8d:9a:11:51:90:fc:9d:c5:43:
7a:57:7e:d2:85:71:1d:cb:08:d9:42:51:56:37:71:
38:d1:43:65:dc:6e:0c:38:f8:7b:75:e1:7f:4c:bc:
89:3e:e9:13:73:dd:d4:f4:19:b9:18:15:ba:11:16:
63:34:3f:ca:c0:ef:1f:c2:6c:23:2c:be:9c:38:c1:
33:d2:17:84:4b:a9:07:b7:cf:1c:82:70:1a:e7:a5:
87:63:fa:22:60:df:e4:63:bf:0a:7e:34:cc:a6:fa:
aa:06:62:0b:f8:a9:4a:81:bc:87:25:45:99:4d:8d:
19:bf:76:96:eb:cb:02:42:f0:ad:9a:4c:f9:e2:06:
8e:bc:c8:67:61:03:26:ae:81:7a:c2:cc:59:4d:8b:
db:5e:0c:96:97:2d:45:98:8a:66:70:fe:32:fe:00:
c2:61:a5:65:98:54:3d:dc:ba:b3:8d:28:da:68:c2:
1a:c1:1b:d8:27:20:e7:c9:5e:17:52:c0:fc:d0:10:
8c:38:7f:ad:b2:d6:48:27:08:66:e8:6c:ff:37:24:
0b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D1:6F:8B:88:82:80:68:AD:14:3F:0C:10:1D:3F:5D:8D:65:54:E3
X509v3 Authority Key Identifier:
keyid:68:E0:78:B5:18:1B:E5:FB:E9:14:B4:12:A4:12:09:6B:C8:D7:15:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOB4tRgb5fvpFLQSpBIJa8jXFUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:1b:04:2b:4f:8c:3f:71:3d:68:78:5d:fa:75:c5:63:9e:c7:
c7:e5:84:d7:35:76:89:96:ff:e3:17:21:b4:e1:a8:74:96:79:
7d:0f:7f:ab:f3:6b:2d:0b:ed:ae:eb:3d:dc:2f:0b:fa:ba:dc:
22:73:bc:9c:bc:91:43:b9:fb:d2:53:90:2d:4d:47:7c:f4:6a:
c7:4b:18:cb:ec:c3:d2:4c:ef:38:72:40:d9:41:01:47:11:7c:
e4:d9:22:fb:4a:9e:5e:46:00:fa:0c:de:49:bd:2f:b4:be:4e:
d3:9f:ab:4e:ba:b8:53:d1:7a:b5:32:69:f9:d0:84:f4:96:bc:
0c:32:fa:9d:c4:1f:86:27:5a:08:ca:43:4c:cb:d1:f9:c9:7b:
3f:ce:5d:29:8b:24:30:aa:b1:36:80:df:9a:ba:ea:4d:34:c0:
a6:28:24:b6:16:88:b4:08:87:03:53:1f:f0:ec:8b:25:d4:dd:
8f:d4:d8:4f:a0:0f:43:42:9d:0c:3c:87:c4:4d:bc:63:64:a8:
84:9d:f9:50:af:e3:75:d8:8c:d4:81:23:7a:c6:dd:fd:48:35:
4b:ae:a3:6f:20:af:cf:62:b0:93:2b:3d:b5:8d:51:4a:6c:52:
75:cd:49:fd:98:0c:9d:a0:fc:b2:8f:81:78:9e:1a:96:93:50:
bb:a7:e6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:40:31 2026 by rpki-client