Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
File: aOi66pXUBANI8KiexOS9FSdfbDk.mft (raw, json)
Hash identifier: Mb9USsIn5M9Dl6obaKg8ta3b7bY9Fy6B+6O72hZBa80=
Subject key identifier: D6:BE:62:60:ED:48:EF:08:6B:E7:32:08:E4:3C:0A:88:4E:C5:0B:92
Authority key identifier: 68:E8:BA:EA:95:D4:04:03:48:F0:A8:9E:C4:E4:BD:15:27:5F:6C:39
Certificate issuer: /CN=68e8baea95d4040348f0a89ec4e4bd15275f6c39
Certificate serial: 01A1AA832A375FC36AC1DD966D84C2B89405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
Manifest number: 1ADC
Signing time: Thu 05 Nov 2026 07:01:24 +0000
Manifest this update: Thu 05 Nov 2026 07:01:24 +0000
Manifest next update: Fri 06 Nov 2026 07:01:24 +0000
Files and hashes: 1: F7uNYW_BAZq9rI9uR7hZmoD2t2c.roa (hash: 66sSkYjfMPB1iz46OvsCyBJxFuzzlDOw8irePRrhJqo=)
2: ZbRHE63NTowomZ--6hRN7-VQWd4.roa (hash: 9fZQ79ry0wcmms4XZEk0xvVuXwwePg4F6u4eylx66hY=)
3: aOi66pXUBANI8KiexOS9FSdfbDk.crl (hash: bE4naXUpqDipoSc0AleeKaQR0CrvpIgPvcZhFZSP0No=)
4: cAIe2NM_E7WCCYmd0eVZsMmImNA.roa (hash: sic7GmBZVp2aPzVp03gq0Hxyh3yCltc3C8dhZASVy34=)
5: iN8E5J8FWFCEMY65ALgZit2wZ5o.roa (hash: 3gIZ7quZRp5VH+343KfEOmSv0A/IFrhSpW84UgHzh6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 07:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:aa:83:2a:37:5f:c3:6a:c1:dd:96:6d:84:c2:b8:94:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e8baea95d4040348f0a89ec4e4bd15275f6c39
Validity
Not Before: Nov 5 07:01:24 2026 GMT
Not After : Nov 6 07:01:24 2026 GMT
Subject: CN=d6be6260ed48ef086be73208e43c0a884ec50b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:78:3e:0d:f8:d8:26:44:bf:16:58:66:8f:28:
4c:8d:b2:e3:fb:8e:d3:f3:59:36:47:df:b1:f1:71:
00:96:04:cb:fd:57:66:5a:c3:06:45:aa:17:d1:3d:
75:a0:dc:b8:2c:d3:64:fc:c6:30:d8:fd:84:e9:02:
d4:fc:06:7f:39:df:bb:6d:27:f6:bf:ad:fe:b9:e1:
1b:9d:c2:e7:55:a5:a1:71:9a:43:34:a4:e4:3c:38:
1e:eb:41:db:10:c5:a9:57:4d:e4:62:ac:26:c9:7b:
99:4b:83:d1:39:fd:be:57:45:b1:4f:92:01:7a:0a:
4c:fd:a8:ee:a9:0d:30:5a:24:38:c1:76:2e:4d:be:
a4:44:16:e8:5e:6b:fa:10:e4:9a:a8:f6:b2:62:6b:
f1:f5:2d:d0:f3:bd:d9:36:fd:f9:de:c3:8b:ef:a5:
76:4d:02:f0:9e:b5:92:af:19:0d:3e:5d:c3:56:de:
2f:5a:4f:bd:97:91:13:58:2f:36:72:26:4f:f3:40:
7d:42:0f:74:a7:de:ea:a2:17:7d:6e:23:f9:6c:9b:
19:71:6a:97:72:8b:07:6d:c7:05:2e:de:c6:9e:f8:
0c:60:b4:8f:fc:97:bb:5e:6f:36:a5:ee:3d:8d:e6:
d4:01:7b:1f:a6:ac:b4:49:87:86:d4:46:1b:53:7c:
6f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:BE:62:60:ED:48:EF:08:6B:E7:32:08:E4:3C:0A:88:4E:C5:0B:92
X509v3 Authority Key Identifier:
keyid:68:E8:BA:EA:95:D4:04:03:48:F0:A8:9E:C4:E4:BD:15:27:5F:6C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:48:40:4e:f2:57:51:1e:4c:b2:6a:97:90:aa:7a:66:ae:22:
0c:bd:b8:24:ad:d7:1e:6b:d7:f3:8f:86:cc:af:27:b9:37:8f:
12:7d:1a:e1:72:6d:cd:9b:90:78:00:ad:f5:6f:db:eb:b9:d7:
e9:26:0a:6b:4b:dd:9a:bf:40:2a:cf:4b:45:01:55:24:34:b7:
7f:a9:e9:b0:2f:69:01:9d:12:40:47:be:dd:be:88:73:80:99:
56:0c:e1:69:83:e0:be:a7:a9:dc:48:73:e1:ff:fd:16:be:a2:
d9:90:94:d6:b7:0e:6c:88:75:83:6b:fe:32:57:74:88:05:26:
26:18:87:c4:65:e7:4f:05:f8:4b:54:b0:e0:1e:43:91:60:c0:
97:75:03:88:1a:79:33:8a:a4:cf:c4:ec:9a:7c:07:0f:9c:8d:
e9:76:08:ad:11:7b:f9:2c:77:90:a6:70:61:7a:36:2c:13:1d:
a2:6d:57:35:a8:fa:30:00:d9:0d:58:33:96:28:b7:7a:2d:2e:
62:95:31:4a:d4:9e:45:21:43:27:61:b3:59:13:2a:ff:a0:c2:
1c:cf:7b:db:6d:40:00:ed:ad:a3:6f:e1:af:f5:42:22:12:47:
bb:d3:9c:2b:f9:f4:60:3c:68:da:76:3d:fe:38:16:de:87:91:
0e:23:f6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 13:59:28 2026 by rpki-client