Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
File: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft (raw, json)
Hash identifier: XAxifkl6G3Hs3R5XLw9OMlr+xqeuwt52PEtkdNUquuY=
Subject key identifier: 76:36:E0:8F:10:F8:D9:DC:E2:B4:E5:D2:E6:64:F3:D3:B2:F1:E3:AB
Authority key identifier: 68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14
Certificate issuer: /CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314
Certificate serial: 019E2CCCD32CC5CED772FDB9C7582554E214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
Manifest number: 190B
Signing time: Fri 15 May 2026 18:01:21 +0000
Manifest this update: Fri 15 May 2026 18:01:21 +0000
Manifest next update: Sat 16 May 2026 18:01:21 +0000
Files and hashes: 1: YUXKYpsFemsNDBecWX4MUwbfgXA.roa (hash: aALLuFrEzNbZ6xLI2lfoFLt5fV9m8J9Klkm3q6Pz7LI=)
2: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl (hash: SzKUdJognsntDb4Cbpja6cv0KLz2q55Wzy6K9v4wB1w=)
3: ce5lJ-hpH1wu-kVRML7xAZPt-gE.roa (hash: 8ViUaToRkyhjrSgTu0qhVkwYrKw/qmbuzYwV/hXV6/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2c:cc:d3:2c:c5:ce:d7:72:fd:b9:c7:58:25:54:e2:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314
Validity
Not Before: May 15 18:01:21 2026 GMT
Not After : May 16 18:01:21 2026 GMT
Subject: CN=7636e08f10f8d9dce2b4e5d2e664f3d3b2f1e3ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7c:e7:46:14:e9:61:45:71:a7:8c:22:a6:00:
61:a1:4d:88:9b:4a:3b:7b:a8:7e:95:d0:c7:f7:df:
bc:70:90:0c:75:34:7e:f1:bf:77:6b:e0:39:60:6a:
2e:4f:db:ee:a6:fe:34:1c:eb:14:34:c4:f2:e5:3a:
d9:4d:2d:ef:7c:da:fd:e5:68:87:f2:c6:6f:8b:1a:
ae:09:18:44:f2:75:b8:0b:fb:fa:bc:b1:0f:64:5e:
d6:5a:9c:0c:f6:30:ad:28:bd:ae:cd:ac:82:8b:b1:
20:02:c0:7b:7e:46:0d:b0:17:c3:23:47:e4:68:0a:
9a:94:5e:eb:b2:e2:6f:ca:13:2e:88:4f:d0:7e:fc:
42:42:cf:a4:0e:6a:3f:91:58:40:a6:46:f1:40:33:
00:f0:f4:8f:d8:d6:e3:e5:fd:59:98:47:ec:3c:f5:
11:4f:61:36:d8:bf:10:d2:57:1e:93:67:c1:b2:c0:
73:c9:3f:fa:a1:84:c0:77:d8:c5:4c:dd:f3:b0:64:
6d:3b:9e:9e:d1:59:15:92:81:44:0b:f8:9e:c3:5f:
7e:b3:50:a0:08:4e:f6:c4:e7:c8:35:71:7a:c6:27:
67:fb:b4:7f:b6:94:95:52:19:e4:f2:a9:22:a2:d1:
eb:24:e3:d2:0c:25:d8:bd:4e:42:7f:20:db:7e:4d:
75:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:36:E0:8F:10:F8:D9:DC:E2:B4:E5:D2:E6:64:F3:D3:B2:F1:E3:AB
X509v3 Authority Key Identifier:
keyid:68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:1b:10:1c:71:46:3b:1e:b2:1c:82:33:5e:a1:0e:62:55:53:
92:03:26:90:83:0e:ae:94:bb:8c:84:c1:02:c3:a1:f9:34:13:
a8:45:3a:e3:98:d8:b7:14:57:55:ce:f6:06:32:7d:99:7e:b6:
2c:9d:4d:99:2a:a5:a5:93:79:6e:ea:77:1d:c2:ee:7f:7b:37:
d7:ae:9c:27:82:94:de:ef:2f:f3:a8:ab:24:af:53:cc:8e:11:
11:46:03:2f:7c:f8:d5:8f:e9:c8:67:51:8c:bd:3a:97:ec:28:
e5:e7:37:6d:59:4d:f5:c7:8f:23:61:20:09:50:48:6c:b9:e0:
3e:81:bf:a1:28:24:72:f2:a6:05:4f:1b:8d:d5:65:e3:68:af:
3b:fb:13:a0:ad:a7:84:85:26:07:b4:15:9d:0e:52:98:94:22:
4e:a2:16:7a:49:f4:27:6e:1c:5a:ac:18:7d:5d:ae:92:5c:78:
a5:9b:1e:40:35:72:0f:54:ac:08:5d:72:50:23:73:43:b2:d2:
82:45:30:0b:f5:44:ef:6e:05:c4:67:ea:04:96:20:86:13:b8:
a0:08:ec:77:65:7b:bf:5e:15:94:11:70:f2:29:61:91:95:ac:
1f:ac:27:49:6f:74:76:99:71:00:a1:42:c5:5e:44:e6:1f:aa:
a6:90:94:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 20:47:22 2026 by rpki-client