Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
File: aOi66pXUBANI8KiexOS9FSdfbDk.mft (raw, json)
Hash identifier: UJfYUGIvSg2AcK55UMmwF8CKKwRXhvu/htwEpQHQ++Q=
Subject key identifier: 2F:6E:F1:B5:45:5F:4D:02:07:B6:64:AA:03:D0:26:EC:93:D0:F8:24
Authority key identifier: 68:E8:BA:EA:95:D4:04:03:48:F0:A8:9E:C4:E4:BD:15:27:5F:6C:39
Certificate issuer: /CN=68e8baea95d4040348f0a89ec4e4bd15275f6c39
Certificate serial: 01A0BEE7AC3A6520F9E5FEF137847306C232
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
Manifest number: 1A62
Signing time: Sun 20 Sep 2026 13:00:48 +0000
Manifest this update: Sun 20 Sep 2026 13:00:48 +0000
Manifest next update: Mon 21 Sep 2026 13:00:48 +0000
Files and hashes: 1: F7uNYW_BAZq9rI9uR7hZmoD2t2c.roa (hash: 66sSkYjfMPB1iz46OvsCyBJxFuzzlDOw8irePRrhJqo=)
2: ZbRHE63NTowomZ--6hRN7-VQWd4.roa (hash: 9fZQ79ry0wcmms4XZEk0xvVuXwwePg4F6u4eylx66hY=)
3: aOi66pXUBANI8KiexOS9FSdfbDk.crl (hash: yq78Ce/+of+oCiXBmyrMjHrhyktKVRwFPiRo86tQQRc=)
4: cAIe2NM_E7WCCYmd0eVZsMmImNA.roa (hash: sic7GmBZVp2aPzVp03gq0Hxyh3yCltc3C8dhZASVy34=)
5: iN8E5J8FWFCEMY65ALgZit2wZ5o.roa (hash: 3gIZ7quZRp5VH+343KfEOmSv0A/IFrhSpW84UgHzh6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:e7:ac:3a:65:20:f9:e5:fe:f1:37:84:73:06:c2:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e8baea95d4040348f0a89ec4e4bd15275f6c39
Validity
Not Before: Sep 20 13:00:48 2026 GMT
Not After : Sep 21 13:00:48 2026 GMT
Subject: CN=2f6ef1b5455f4d0207b664aa03d026ec93d0f824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:df:c9:4b:92:14:7d:ec:e9:bc:66:2b:af:8d:
04:59:4b:85:25:02:b7:d1:05:05:9e:7a:50:7c:dd:
f5:3e:2d:10:bc:fc:b3:5f:55:2e:ca:11:7f:5b:1d:
14:7f:77:5a:a8:db:ce:c1:c1:9e:db:d3:d2:27:36:
a7:81:5c:99:9f:88:6a:f6:54:72:58:4b:98:0a:2b:
43:8f:63:3d:bc:42:50:fd:a1:e1:91:e1:f3:86:e6:
59:54:24:19:a6:7e:df:a1:4a:d6:bf:e1:82:d0:8d:
07:29:a4:03:8e:8f:04:70:7f:00:64:3d:a8:ae:3f:
d7:2e:8d:b3:06:b9:fd:2c:64:43:f5:f1:38:1b:2b:
92:c5:c8:10:91:32:9e:82:d0:65:e4:f2:7d:e6:19:
40:6e:4b:26:84:5b:cb:55:92:de:77:59:b3:59:d4:
2f:6c:80:59:32:fc:88:d3:af:e2:89:ec:06:80:35:
f5:6a:74:48:74:04:d7:a1:ce:88:c0:fa:35:f8:bb:
be:d0:58:e6:73:3e:e3:aa:44:9c:c8:d9:b3:e0:6c:
ca:3c:92:b5:23:d6:c1:a4:ef:4f:e7:1f:aa:4a:b1:
8c:b5:7e:8d:75:c5:a2:8b:47:2f:64:ad:1d:54:d4:
17:c6:c7:cc:9d:95:ce:6f:bb:9f:0f:9c:40:ad:e2:
17:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:6E:F1:B5:45:5F:4D:02:07:B6:64:AA:03:D0:26:EC:93:D0:F8:24
X509v3 Authority Key Identifier:
keyid:68:E8:BA:EA:95:D4:04:03:48:F0:A8:9E:C4:E4:BD:15:27:5F:6C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:4e:49:7a:21:11:33:b9:7b:4c:1b:2f:6b:37:36:67:4d:c0:
15:2e:53:b7:31:9e:59:97:bd:e4:b2:bd:7d:c9:e7:78:4a:f2:
2f:de:83:7a:44:7b:8d:76:13:1f:62:19:2c:87:08:a5:17:e0:
d3:3a:04:7f:ef:0d:1d:cf:72:a6:f8:64:7d:c2:46:90:2c:ed:
bc:de:bf:ab:2a:1e:6a:0e:82:47:4a:fb:9c:50:53:74:7b:b6:
75:ee:45:3a:6d:1d:71:76:4f:cc:79:8f:81:23:68:a3:fb:17:
7e:f5:34:83:d5:ed:99:c4:dc:3d:e1:33:26:d4:04:3b:02:65:
53:86:ad:fa:6e:d4:b2:0c:de:b4:c5:6a:d1:4b:28:f9:06:63:
1b:e1:32:aa:2e:79:9c:cb:c4:df:19:4b:7a:0f:5c:c2:f2:37:
e6:27:4b:4d:51:b1:fc:70:62:3f:ad:9e:e9:99:34:0e:a5:3b:
31:f5:e9:9c:ac:c8:80:2f:5f:55:0a:11:18:3b:d1:c5:40:4b:
ac:9d:45:07:04:74:a5:27:62:19:fe:2b:bb:e0:10:4a:8f:d5:
49:3f:8a:a2:5b:13:aa:e7:e9:92:82:bc:f3:66:3e:4c:ee:e9:
99:ef:b1:b3:65:f2:33:ff:b7:90:d4:b9:e9:58:3e:5c:23:1b:
19:ff:c7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:08:07 2026 by rpki-client