Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
File: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft (raw, json)
Hash identifier: S1Ag9gisHd2xHyiHi7Nvi1OnzyaXc6XG6I8pfhVNtRs=
Subject key identifier: D1:AC:0D:A6:E9:08:37:76:28:E5:8E:69:26:9E:79:24:26:E4:E3:2B
Authority key identifier: 68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14
Certificate issuer: /CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314
Certificate serial: 019D3977F74C2B422ECF2EE2E6198728614E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 12:00:56 +0000
Manifest this update: Sun 29 Mar 2026 12:00:56 +0000
Manifest next update: Mon 30 Mar 2026 12:00:56 +0000
Files and hashes: 1: YUXKYpsFemsNDBecWX4MUwbfgXA.roa (hash: aALLuFrEzNbZ6xLI2lfoFLt5fV9m8J9Klkm3q6Pz7LI=)
2: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl (hash: BPb41MkFvHAhgtjvkUwz3Zdkm+fHx4BDZ33sGlpfP9c=)
3: ce5lJ-hpH1wu-kVRML7xAZPt-gE.roa (hash: 8ViUaToRkyhjrSgTu0qhVkwYrKw/qmbuzYwV/hXV6/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:f7:4c:2b:42:2e:cf:2e:e2:e6:19:87:28:61:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314
Validity
Not Before: Mar 29 12:00:56 2026 GMT
Not After : Mar 30 12:00:56 2026 GMT
Subject: CN=d1ac0da6e908377628e58e69269e792426e4e32b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6f:33:9b:be:b5:b9:5f:5d:a6:b1:eb:1e:77:
ef:e7:3b:2d:c2:0b:2a:75:38:2c:62:69:2d:a3:6d:
09:e6:d2:e3:39:99:96:7b:a5:6d:ac:a3:a6:52:c3:
26:6a:2b:de:5b:7f:83:72:c2:41:8f:fd:5c:fc:51:
c7:d7:70:fe:c7:6a:8b:fe:94:a5:df:fc:f8:2f:c8:
42:94:65:13:cd:ee:cf:f1:fd:41:a3:b2:24:8d:90:
08:37:67:3e:09:71:46:c7:b5:9f:a4:69:6b:1c:0a:
6c:2b:f6:7f:e1:96:91:6f:46:c3:a2:b4:c8:a9:a9:
c1:26:4a:8e:f3:7b:45:89:88:d1:41:0a:62:49:53:
40:9d:ca:f0:1f:dc:6e:64:64:21:5c:d4:1f:64:1b:
5f:37:e1:28:d2:3a:be:ee:0d:17:aa:50:48:28:d7:
83:95:b0:43:7d:05:25:20:42:da:b6:d6:1e:78:c7:
96:ef:f2:56:ac:16:6b:e7:9d:96:73:7f:03:09:1f:
5a:c8:8a:81:29:69:aa:81:36:b5:08:d8:4d:43:f2:
3d:0f:7b:2e:90:01:bc:8d:20:03:6f:34:41:16:21:
9f:82:8a:4b:cd:b8:c9:6c:f1:df:b9:9a:5d:49:8c:
37:ec:31:3c:b8:34:bb:8c:5f:df:90:f6:35:40:73:
6c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:AC:0D:A6:E9:08:37:76:28:E5:8E:69:26:9E:79:24:26:E4:E3:2B
X509v3 Authority Key Identifier:
keyid:68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:12:7a:0e:a7:a5:22:7e:19:ae:1c:53:93:8a:4a:a1:81:ed:
73:2e:59:fd:1c:44:17:23:52:d6:ea:74:57:98:3c:f6:98:de:
cd:45:c3:2a:f0:75:2c:04:cf:3a:3c:4a:3c:89:07:ec:83:5a:
d9:0d:cc:22:80:ac:50:df:f0:df:70:4a:b3:02:73:81:1e:57:
a0:8c:29:65:d8:c7:49:c1:c9:cc:cf:d9:22:5e:d7:bb:a2:6a:
7e:ac:69:ad:7c:0a:11:ec:57:dc:4e:ca:73:59:7f:b7:71:58:
86:74:5e:46:3c:ba:96:43:5c:6d:9b:24:1f:aa:ec:92:c7:f2:
81:f7:74:38:9f:3c:e6:1f:f9:1c:97:7e:1a:84:10:8d:0c:16:
4b:93:d4:c2:cd:d1:7a:99:fa:0b:ba:ff:d6:93:fa:94:ef:8a:
91:1f:7a:c7:5c:52:cc:97:6c:3d:65:40:eb:d8:c1:16:5d:68:
04:22:df:07:0e:40:d8:ed:ae:79:97:dc:b3:c3:c8:ea:d1:0e:
65:58:46:91:ed:3f:7b:0a:82:7a:5d:de:05:99:4f:5b:80:6d:
ed:dc:33:c5:10:da:89:83:de:2a:2b:8d:b5:b5:4c:0a:67:43:
1c:e6:d3:8e:1a:09:14:db:59:76:7b:b4:98:f3:de:51:f0:3b:
34:6e:90:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:22:24 2026 by rpki-client