Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/aoKFGhN-YFmlwZ4lJ_OepsrXxKo.mft
File: aoKFGhN-YFmlwZ4lJ_OepsrXxKo.mft (raw, json)
Hash identifier: N0NlGRD4u6MnlLr/42011sVpKPbq2vjoDKSEOaQXySg=
Subject key identifier: 02:98:23:E7:C1:F0:C2:C5:B4:CC:D1:7C:A5:37:84:13:A2:2A:E7:02
Authority key identifier: 6A:82:85:1A:13:7E:60:59:A5:C1:9E:25:27:F3:9E:A6:CA:D7:C4:AA
Certificate issuer: /CN=6a82851a137e6059a5c19e2527f39ea6cad7c4aa
Certificate serial: 019FA89A3C92CB36576DC87845253416C8C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aoKFGhN-YFmlwZ4lJ_OepsrXxKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/aoKFGhN-YFmlwZ4lJ_OepsrXxKo.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 12:01:48 +0000
Manifest this update: Tue 28 Jul 2026 12:01:48 +0000
Manifest next update: Wed 29 Jul 2026 12:01:48 +0000
Files and hashes: 1: 9FkvkvYKkpvtxRzhjS2Dl3OyIC8.roa (hash: ++BWUNm5eh2q9n/GsxysekfFrNVNQyGEMNFnVvfJnvw=)
2: GmPMqm-sExPGS5qeFQnTPPpdDUg.asa (hash: auZklUf5YgGzAAHvLeEe5ft8gS41CAy8rwwpS4z5H3A=)
3: aoKFGhN-YFmlwZ4lJ_OepsrXxKo.crl (hash: adoCZxKYPR5npDsBVd/OHU50fKcrk8I9ilmUTlifbFs=)
4: xDdkyYp6QT-6exThNJOY2QGkx2k.roa (hash: IFSLHxTz5eB1n+A0D/T5f1vKzmvjNloM94tpDCBISCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/aoKFGhN-YFmlwZ4lJ_OepsrXxKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/aoKFGhN-YFmlwZ4lJ_OepsrXxKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/aoKFGhN-YFmlwZ4lJ_OepsrXxKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:3c:92:cb:36:57:6d:c8:78:45:25:34:16:c8:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a82851a137e6059a5c19e2527f39ea6cad7c4aa
Validity
Not Before: Jul 28 12:01:48 2026 GMT
Not After : Jul 29 12:01:48 2026 GMT
Subject: CN=029823e7c1f0c2c5b4ccd17ca5378413a22ae702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7b:a5:a9:cf:14:9c:cf:c2:a4:c9:4e:62:55:
59:dc:df:65:ad:e0:4c:a5:20:ea:73:e4:23:38:9d:
06:7b:d8:14:76:39:ed:44:54:79:7f:64:57:da:df:
94:40:29:4f:9d:72:9f:55:62:35:2a:d3:e6:cc:00:
19:a2:28:73:e8:df:43:eb:cb:3c:f3:53:a5:60:9b:
46:aa:38:11:c2:94:17:f6:1e:a9:6b:43:0d:f0:c4:
18:eb:bb:77:3b:79:94:1f:5a:fc:99:53:8c:ba:5a:
04:5e:36:dd:6b:69:c4:35:2a:bd:f9:2b:08:ec:d8:
67:0e:d3:4a:49:4e:60:0c:94:91:88:5d:ae:35:a7:
2c:08:7e:47:f8:96:d0:02:3c:12:2b:5a:1b:5d:7c:
d8:19:03:a4:92:61:73:45:69:31:6a:8e:71:89:a3:
ee:dc:d4:a6:27:00:2e:86:70:26:1d:ec:2b:9a:2c:
ef:3e:82:71:df:26:6a:e6:90:f9:d4:3a:6c:76:14:
05:5f:b8:46:00:92:4f:97:34:73:e8:f7:1f:e6:50:
ec:c8:e0:0d:74:48:4a:d2:9f:0a:e5:c7:16:34:0c:
46:0e:bd:e1:77:8a:88:bd:1b:d1:18:56:5a:62:b6:
fa:9b:74:54:8a:52:86:43:a7:c4:33:3f:8e:a6:e1:
f7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:98:23:E7:C1:F0:C2:C5:B4:CC:D1:7C:A5:37:84:13:A2:2A:E7:02
X509v3 Authority Key Identifier:
keyid:6A:82:85:1A:13:7E:60:59:A5:C1:9E:25:27:F3:9E:A6:CA:D7:C4:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aoKFGhN-YFmlwZ4lJ_OepsrXxKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/aoKFGhN-YFmlwZ4lJ_OepsrXxKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/aoKFGhN-YFmlwZ4lJ_OepsrXxKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:3e:84:52:e8:ee:b2:0d:b3:0a:c5:7f:7a:47:be:9f:90:6d:
11:5f:67:26:72:52:b8:f1:41:93:5f:f5:0d:67:d0:5d:6d:1c:
da:45:9d:f1:ee:7d:14:14:88:7a:7c:9e:dc:d6:9b:9c:0d:c0:
52:de:00:db:6a:0d:12:5b:20:ef:bf:3a:72:ad:56:44:68:db:
9b:01:68:fc:89:dd:f4:3a:18:6d:d2:67:08:14:0c:e5:92:db:
af:e3:3c:77:3f:96:b7:a3:a6:88:99:2d:6e:91:74:eb:e1:db:
94:f3:c1:ba:59:39:87:ee:57:c9:5d:49:19:f0:f4:2d:f6:39:
8f:c4:72:f5:7e:f3:af:08:80:2e:4a:c6:bf:1d:88:9c:16:dc:
dd:4d:ff:97:4a:96:71:1b:b4:2a:98:59:04:1e:4a:de:72:55:
86:55:c7:b5:12:94:91:9f:0e:76:7f:b8:21:d3:55:ce:0d:6f:
9c:d4:e8:2a:f7:a9:81:32:ad:3c:61:e0:72:f5:5f:bb:a9:b4:
77:d0:80:6c:cf:db:ba:1c:34:15:73:d5:14:72:a5:13:02:ca:
6f:e7:5a:58:5d:6f:8a:40:d1:bc:a7:13:f1:4f:2e:ce:c0:48:
1c:39:67:bd:20:7d:20:23:8b:77:c6:23:0f:78:d1:61:38:6c:
05:e9:f0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:47:34 2026 by rpki-client