Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
File: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft (raw, json)
Hash identifier: SAm2jAoW2cNAaLRg2t5Oh88RoHK5SODMpO9RAxzpHYY=
Subject key identifier: 9C:70:A5:1E:59:16:27:C6:63:32:E7:A8:D7:85:0F:AE:F2:08:33:CB
Authority key identifier: 68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14
Certificate issuer: /CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314
Certificate serial: 019F18674A4A30BF13432E95B7D1763C7A8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
Manifest number: 1985
Signing time: Tue 30 Jun 2026 12:00:50 +0000
Manifest this update: Tue 30 Jun 2026 12:00:50 +0000
Manifest next update: Wed 01 Jul 2026 12:00:50 +0000
Files and hashes: 1: YUXKYpsFemsNDBecWX4MUwbfgXA.roa (hash: aALLuFrEzNbZ6xLI2lfoFLt5fV9m8J9Klkm3q6Pz7LI=)
2: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl (hash: STpNGWjxriG02kX18UZcFq9hCfLN4vV8q7kX2itYdQ8=)
3: ce5lJ-hpH1wu-kVRML7xAZPt-gE.roa (hash: 8ViUaToRkyhjrSgTu0qhVkwYrKw/qmbuzYwV/hXV6/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:67:4a:4a:30:bf:13:43:2e:95:b7:d1:76:3c:7a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314
Validity
Not Before: Jun 30 12:00:50 2026 GMT
Not After : Jul 1 12:00:50 2026 GMT
Subject: CN=9c70a51e591627c66332e7a8d7850faef20833cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f7:a9:eb:81:b1:d2:d9:c7:a5:15:91:3e:d7:
c7:4b:b7:c1:f2:b0:ad:9f:6a:fa:bf:4c:bb:96:b4:
fb:ec:43:03:d4:ec:cd:55:2a:3a:f1:6a:bb:ee:d0:
51:c2:d0:4c:2a:41:a8:21:49:84:f0:c2:cb:ec:63:
fd:a1:a5:0d:c5:6a:98:16:f7:33:c0:2b:3f:a2:62:
9f:b4:fe:e1:4e:5c:8e:d6:04:71:55:c8:96:49:99:
73:83:84:a2:e5:d8:83:cb:b7:56:b8:e4:50:fb:40:
75:03:21:2a:d0:5b:47:0c:05:2c:c6:e8:4e:37:6c:
7c:43:56:21:d8:e1:6d:84:3a:00:c1:15:42:56:01:
56:77:55:70:3e:ca:cc:55:50:1e:e9:6d:86:ff:31:
ba:90:02:73:03:a5:88:0b:a0:6e:39:e8:90:5e:00:
47:68:81:0f:a5:9a:44:56:0b:e3:a4:c7:69:66:db:
79:1f:ea:a6:66:06:80:50:87:37:58:70:9c:3f:c6:
4c:9d:2f:4a:9e:99:ea:89:a7:fb:6a:b4:c0:cf:31:
0d:39:47:ae:c6:92:cb:29:14:f0:6d:59:21:66:43:
76:c6:cb:e7:6b:5c:11:57:ba:e8:a7:13:21:22:2a:
03:53:a3:87:d5:67:c7:db:6f:ba:be:37:14:a4:81:
9b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:70:A5:1E:59:16:27:C6:63:32:E7:A8:D7:85:0F:AE:F2:08:33:CB
X509v3 Authority Key Identifier:
keyid:68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:35:a2:98:6b:a3:03:1f:aa:f9:9a:2c:33:ee:81:4b:f1:26:
c5:08:ed:52:c6:0a:01:cf:17:d0:e5:ed:d3:d8:77:d7:99:8f:
fb:a4:5d:07:43:1c:55:b1:f6:0d:44:4a:32:df:b9:17:3c:33:
45:86:c2:19:75:27:59:ce:d1:e8:87:ab:97:bf:4a:16:a5:fd:
12:e6:0e:fe:f9:48:d4:18:46:78:89:7a:99:69:61:ae:7b:e2:
7b:76:10:c5:9c:cf:fd:87:bf:8f:c8:39:8d:88:81:0d:91:06:
4c:a5:b3:a9:79:e5:0a:3a:02:96:38:e1:15:75:f8:9e:3e:39:
ea:d2:59:2c:f8:4b:71:e2:40:25:36:bf:58:8e:ea:b7:23:67:
44:c6:49:a0:4b:ed:bb:c9:8d:a7:9e:ec:21:3a:b7:cf:a5:aa:
52:be:f9:94:63:05:5b:b0:49:49:7d:bd:a9:f9:56:65:84:a5:
b3:40:f5:23:86:27:cb:eb:cc:96:bd:54:f4:0a:d1:15:bc:3a:
a0:e8:27:9c:62:ba:11:2d:50:c1:fd:a0:75:27:14:62:d5:3f:
54:98:65:15:01:37:db:38:c6:e4:cd:23:f8:0a:5a:8c:6c:36:
af:e4:d0:9f:bd:ec:ea:b8:2f:13:00:78:2b:e4:d7:3b:f8:44:
78:e6:59:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:42:39 2026 by rpki-client