Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
File: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft (raw, json)
Hash identifier: 6NkY1DB4+flBxZER9ceMSkGgBQt1WYgLeysgvrUttms=
Subject key identifier: 21:28:14:91:80:C7:05:22:00:55:EC:F7:2B:63:48:FC:DD:77:F6:6F
Authority key identifier: 68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14
Certificate issuer: /CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314
Certificate serial: 01A12D697D9881894FC98DEF1505CC80DE4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
Manifest number: 1A99
Signing time: Mon 12 Oct 2026 00:00:50 +0000
Manifest this update: Mon 12 Oct 2026 00:00:50 +0000
Manifest next update: Tue 13 Oct 2026 00:00:50 +0000
Files and hashes: 1: YUXKYpsFemsNDBecWX4MUwbfgXA.roa (hash: aALLuFrEzNbZ6xLI2lfoFLt5fV9m8J9Klkm3q6Pz7LI=)
2: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl (hash: 7EW34yvlzb0uZcK/s8gMEm7zbVzFggICNwSaZCx5pV0=)
3: ce5lJ-hpH1wu-kVRML7xAZPt-gE.roa (hash: 8ViUaToRkyhjrSgTu0qhVkwYrKw/qmbuzYwV/hXV6/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 22:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2d:69:7d:98:81:89:4f:c9:8d:ef:15:05:cc:80:de:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314
Validity
Not Before: Oct 12 00:00:50 2026 GMT
Not After : Oct 13 00:00:50 2026 GMT
Subject: CN=2128149180c705220055ecf72b6348fcdd77f66f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:84:ad:12:5e:00:3b:b9:f7:b9:3d:0e:60:ea:
e3:18:a5:91:53:5d:61:64:c8:cc:49:e4:5d:ee:6e:
b3:3c:39:c1:bf:1e:b7:6b:94:5a:40:d0:ca:a5:14:
c0:18:d2:ff:7d:aa:dd:cc:bb:25:25:bb:1a:65:2f:
3c:63:0d:9f:58:0f:f6:63:e5:af:be:80:d1:e2:ea:
f7:36:4f:6a:d3:df:e2:99:c1:66:ae:2f:e2:48:3c:
c3:ee:0e:68:8a:65:02:31:e3:42:b9:01:83:24:6d:
62:62:70:b8:e0:bf:45:41:45:3e:0f:cb:b7:2f:ca:
ad:7c:72:75:71:58:b9:d2:35:d1:82:b1:8b:d8:b9:
a1:2c:e3:7e:76:3d:de:40:e9:e0:f4:35:63:6b:bd:
5c:28:56:3b:3f:cf:25:6a:c2:cc:78:5c:21:45:9f:
12:a6:b4:01:20:44:e8:3e:a1:3b:16:b0:a2:ef:e9:
e0:e3:58:2a:fb:d2:c8:34:07:a9:ca:b6:01:40:7a:
ab:f6:1b:e3:da:10:68:c3:fd:8b:92:95:5c:29:12:
f0:ce:79:42:c1:67:ea:97:3c:98:50:db:76:ac:fe:
31:f2:30:77:20:d2:39:b6:7e:b8:cc:9a:34:db:5c:
78:92:1c:06:62:43:e2:25:a9:be:ef:f4:da:53:4a:
24:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:28:14:91:80:C7:05:22:00:55:EC:F7:2B:63:48:FC:DD:77:F6:6F
X509v3 Authority Key Identifier:
keyid:68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:38:3e:47:49:3a:9b:d8:ad:6b:14:cb:1a:b3:5e:02:03:f5:
36:08:d4:d7:4c:ea:03:57:6a:f8:b3:74:21:f5:a0:10:78:c0:
bf:3a:2f:54:a6:af:54:c9:89:3b:d2:73:27:7e:c7:a2:8f:e0:
af:e5:04:2f:b3:73:c0:8f:a9:44:7f:20:ca:1a:b5:2c:19:d2:
a8:fc:91:78:70:bd:80:5d:91:33:85:e9:ca:16:4b:66:58:2a:
33:bb:1b:de:02:af:16:fc:73:85:75:f6:17:98:21:51:a8:ef:
40:26:7c:09:a2:17:55:c6:ab:d2:6d:05:b1:cc:9d:1d:2d:3a:
e1:34:c6:4f:e1:d6:a8:ea:d5:d7:20:8c:12:69:c3:a5:aa:88:
be:9a:d4:8e:70:f4:37:e3:dc:a3:8d:ac:e8:ab:a4:b9:01:25:
29:7b:53:86:cb:25:37:d6:7e:5a:10:f9:d3:24:52:2e:15:c7:
a7:4a:8a:22:14:cd:26:52:ed:39:fc:ff:97:e1:86:9c:ca:4b:
2e:72:38:3f:7e:77:ac:58:89:46:90:a2:32:8c:e4:bd:88:a9:
a6:57:94:ea:b5:d4:25:5e:67:b1:e2:69:a2:82:54:1e:f4:2e:
e1:e9:45:4d:88:49:b0:8f:01:e7:a0:b2:59:19:fe:65:7a:19:
17:31:57:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:32:11 2026 by rpki-client