Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
File: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft (raw, json)
Hash identifier: eE2Pq3RlHNB328FO7KfWIjqi2S1JNLeGPy3Q5xBLLLg=
Subject key identifier: 83:63:33:F7:7D:A2:99:BD:91:27:B3:AB:84:4E:59:8F:4F:51:F3:06
Authority key identifier: 68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14
Certificate issuer: /CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314
Certificate serial: 01A1279E5A819DA1C6FB3758CABEA21C2D02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
Manifest number: 1A96
Signing time: Sat 10 Oct 2026 21:00:51 +0000
Manifest this update: Sat 10 Oct 2026 21:00:51 +0000
Manifest next update: Sun 11 Oct 2026 21:00:51 +0000
Files and hashes: 1: YUXKYpsFemsNDBecWX4MUwbfgXA.roa (hash: aALLuFrEzNbZ6xLI2lfoFLt5fV9m8J9Klkm3q6Pz7LI=)
2: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl (hash: BPIGi8CbTYaI7L5gxRXEJby828QBkiyYzwAfyHkukU8=)
3: ce5lJ-hpH1wu-kVRML7xAZPt-gE.roa (hash: 8ViUaToRkyhjrSgTu0qhVkwYrKw/qmbuzYwV/hXV6/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:27:9e:5a:81:9d:a1:c6:fb:37:58:ca:be:a2:1c:2d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314
Validity
Not Before: Oct 10 21:00:51 2026 GMT
Not After : Oct 11 21:00:51 2026 GMT
Subject: CN=836333f77da299bd9127b3ab844e598f4f51f306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e8:94:8b:41:ce:63:13:5d:29:1d:4b:e1:c5:
6d:a7:da:b5:1b:f9:37:83:50:19:94:18:1b:67:3e:
8f:4f:18:8b:89:fe:6b:b2:8c:02:e2:db:7e:39:ba:
1f:bf:be:24:0c:0e:53:02:c4:26:90:af:e2:90:0f:
49:6a:90:c6:27:33:32:48:20:b4:fd:c4:37:80:da:
c7:5d:6c:51:07:81:9e:0d:b1:2a:92:d4:59:16:15:
2f:e3:eb:4a:cd:1c:69:ef:72:e3:20:fd:38:8d:30:
19:0e:e3:69:17:fd:6a:12:e7:8c:dc:c6:05:c2:01:
24:57:f7:61:12:2c:1a:15:ed:ea:20:e0:86:55:5c:
e7:76:fb:6f:89:53:11:19:58:3f:ac:80:63:dc:a8:
56:96:07:ad:bd:f2:13:28:d6:a2:b7:ae:a6:eb:62:
3a:75:39:ef:7a:b3:07:6c:17:0d:e7:7e:4e:a2:c3:
89:00:da:c5:e4:7f:d1:1a:58:5a:69:f1:8c:10:6b:
a6:19:a6:4a:49:17:38:af:0e:79:3c:5f:1b:d0:ac:
e6:db:cc:b0:fd:6e:18:1f:18:ba:eb:95:51:77:ef:
b9:5d:13:75:64:53:92:82:e2:11:12:f6:42:0a:20:
4b:94:a3:79:b5:02:de:6e:bd:2d:0c:82:a2:b2:e6:
63:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:63:33:F7:7D:A2:99:BD:91:27:B3:AB:84:4E:59:8F:4F:51:F3:06
X509v3 Authority Key Identifier:
keyid:68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:cc:57:29:a1:c0:82:50:04:1f:43:25:d0:51:0c:23:ff:c9:
26:43:d3:da:52:28:4e:55:10:90:7f:f0:84:b6:0f:78:90:9d:
ed:c5:26:57:7b:8c:84:5a:36:e4:fb:65:a2:41:7e:f2:f3:21:
a3:c5:4e:de:a0:98:29:d1:f8:f7:6e:64:34:29:46:63:4d:c7:
e1:ed:5b:5b:e9:b8:09:03:a2:b1:8a:16:e5:d7:1b:c5:c8:dc:
46:8e:65:8f:6b:a5:5d:84:58:73:29:25:2d:2d:da:77:ae:fb:
44:b4:84:01:23:c2:85:dd:a4:bf:07:f7:5d:48:a1:e6:05:1a:
e0:2b:de:ba:7f:7b:ae:c5:52:23:76:8b:4f:12:83:0d:c1:73:
3b:4c:fa:24:b1:27:75:27:29:82:5c:d0:83:95:34:a1:58:72:
aa:36:7f:36:5a:ac:23:32:43:98:3d:06:ed:df:8c:21:44:03:
ec:0b:a4:ab:d5:cf:61:b5:7d:c2:7a:6c:5b:87:28:76:0b:e9:
6e:02:ea:b9:a4:15:b5:73:cc:8c:6f:a1:7f:4e:23:7d:fb:61:
be:64:a4:0e:7a:ed:b7:9d:1f:5d:48:f4:27:de:8e:72:07:84:
4c:9d:36:19:f6:2e:52:17:0f:72:ec:65:ef:59:71:51:51:83:
3f:44:9b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:14:03 2026 by rpki-client