Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
File: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft (raw, json)
Hash identifier: GbAoIUeJJxqKSppHNgDUZTM3icSc94U9JEVBZxNY96E=
Subject key identifier: 3F:AC:EE:A0:34:C1:13:1F:70:2A:E5:8B:FA:8E:BB:5A:FE:EC:6C:DF
Authority key identifier: 68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14
Certificate issuer: /CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314
Certificate serial: 019F1A55CE5C4D5F06BBCE065892D362172F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
Manifest number: 1986
Signing time: Tue 30 Jun 2026 21:00:58 +0000
Manifest this update: Tue 30 Jun 2026 21:00:58 +0000
Manifest next update: Wed 01 Jul 2026 21:00:58 +0000
Files and hashes: 1: YUXKYpsFemsNDBecWX4MUwbfgXA.roa (hash: aALLuFrEzNbZ6xLI2lfoFLt5fV9m8J9Klkm3q6Pz7LI=)
2: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl (hash: H+yWGe6XWkOJcbzM4pzDSC/+nva10EUeFUwwalxaaZI=)
3: ce5lJ-hpH1wu-kVRML7xAZPt-gE.roa (hash: 8ViUaToRkyhjrSgTu0qhVkwYrKw/qmbuzYwV/hXV6/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:55:ce:5c:4d:5f:06:bb:ce:06:58:92:d3:62:17:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314
Validity
Not Before: Jun 30 21:00:58 2026 GMT
Not After : Jul 1 21:00:58 2026 GMT
Subject: CN=3faceea034c1131f702ae58bfa8ebb5afeec6cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7d:c6:93:c9:43:4e:f0:c5:6f:d0:ec:6c:c8:
d9:de:2b:84:28:03:e0:80:71:2c:21:4d:91:2d:a2:
12:1e:a8:b6:2d:90:51:7d:00:2a:55:e0:6c:53:74:
32:9a:a1:57:17:0b:ca:1c:ee:1f:07:37:7f:c1:6f:
51:d7:d9:9d:e1:1f:91:f3:2a:2d:1d:ff:5a:11:64:
1c:19:0c:e2:97:79:e9:13:14:9b:74:16:19:d0:db:
38:e3:90:2d:b1:fc:8c:aa:10:3d:78:14:c5:1c:3d:
2f:4c:42:d5:84:56:bb:d9:43:64:a1:5d:93:ae:0e:
d4:26:41:29:5b:da:43:ec:71:60:48:d0:4c:cc:41:
d8:56:d8:22:76:d2:f2:c5:90:e4:3e:1d:97:d1:3f:
e6:e0:0a:9a:70:60:ff:e8:0f:00:7c:8d:a6:cd:a8:
42:bc:db:62:24:67:2a:75:a4:e1:c8:bd:fd:28:b8:
72:94:df:39:34:b1:46:1d:2b:44:cf:8a:02:ce:a5:
a7:f1:da:33:3d:19:be:d2:0b:52:26:28:6d:8d:85:
7c:9c:89:55:e8:c9:49:d8:d9:a9:d9:de:e8:44:4a:
69:91:65:43:07:f0:12:18:8a:6f:03:a0:34:ff:04:
cb:23:32:cc:96:8e:b0:c1:e8:1f:f9:22:50:a7:06:
83:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:AC:EE:A0:34:C1:13:1F:70:2A:E5:8B:FA:8E:BB:5A:FE:EC:6C:DF
X509v3 Authority Key Identifier:
keyid:68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:a5:ad:03:1d:fd:94:c0:79:f1:a0:6b:39:e3:db:e1:3e:85:
78:fa:87:2c:27:d0:51:08:b1:6e:51:71:d1:51:8a:7a:3b:e6:
c3:b6:f7:91:96:78:97:b2:84:8e:e4:be:2c:06:2e:b9:de:f7:
d1:9d:bd:ff:f3:e5:f2:e4:fd:6d:21:eb:30:b0:1c:45:b3:14:
7d:f5:16:fd:77:9e:6f:02:a9:a1:ee:b9:0b:c5:e5:0f:bc:5c:
54:7f:aa:6b:c4:fc:0b:1f:c4:f9:98:57:2b:b3:db:4c:2d:21:
da:a6:18:93:f1:4e:6e:42:66:73:2c:27:01:b4:a4:ba:6f:a6:
32:bb:2a:3d:6d:2d:4a:d3:f9:b3:53:79:e5:35:e9:00:7c:f1:
93:b8:92:c5:e7:f4:2b:15:0a:1d:ce:f2:32:46:3b:f3:84:f2:
ff:a0:3b:c3:23:19:26:f9:02:4b:ad:dd:d3:9c:87:95:50:fb:
6a:be:2e:05:dd:8f:ab:c3:d8:64:71:87:33:82:d3:09:96:f4:
6b:73:df:67:1b:bb:91:97:ad:c4:c5:6f:cd:1e:53:ef:6a:b9:
21:0f:fb:90:4e:d0:3a:f7:c0:92:c7:53:24:48:f2:1d:98:ab:
3e:b7:e0:5e:8d:87:14:5a:1a:28:a9:c0:a7:38:27:7e:ca:e7:
bd:ef:b2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:36:38 2026 by rpki-client