Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
File: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft (raw, json)
Hash identifier: mdoD1AvSgT1oTkrxFcCkK0mO2MBlcAfJM8mKLSheajo=
Subject key identifier: 5D:E2:E3:93:50:02:44:CA:C2:F8:12:F8:89:93:80:62:D4:A5:3B:14
Authority key identifier: 68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14
Certificate issuer: /CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314
Certificate serial: 019EC17FCA8CBAA55D1363802F76ED4B1B02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
Manifest number: 1958
Signing time: Sat 13 Jun 2026 15:00:38 +0000
Manifest this update: Sat 13 Jun 2026 15:00:38 +0000
Manifest next update: Sun 14 Jun 2026 15:00:38 +0000
Files and hashes: 1: YUXKYpsFemsNDBecWX4MUwbfgXA.roa (hash: aALLuFrEzNbZ6xLI2lfoFLt5fV9m8J9Klkm3q6Pz7LI=)
2: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl (hash: 8/A6wyTvPtxNmsCjnLYdqliv0qXclwi3ASmaI7WeA/8=)
3: ce5lJ-hpH1wu-kVRML7xAZPt-gE.roa (hash: 8ViUaToRkyhjrSgTu0qhVkwYrKw/qmbuzYwV/hXV6/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 15:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:7f:ca:8c:ba:a5:5d:13:63:80:2f:76:ed:4b:1b:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314
Validity
Not Before: Jun 13 15:00:38 2026 GMT
Not After : Jun 14 15:00:38 2026 GMT
Subject: CN=5de2e393500244cac2f812f889938062d4a53b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cd:3d:68:56:4d:4a:3a:0b:46:42:e0:4d:c9:
ef:51:ff:c1:e2:50:4e:13:75:e4:a4:b4:cc:b6:15:
1d:07:de:98:59:f4:c6:48:4e:dc:88:1b:3c:5c:c8:
42:1c:2e:e0:19:cc:a7:57:e3:da:55:23:02:0e:77:
01:74:25:03:be:16:2f:1c:1c:68:06:a0:ac:5a:3c:
f6:3d:32:1d:12:20:d8:43:4f:4d:40:53:30:2d:08:
77:00:76:61:60:e5:17:66:4f:28:2d:46:a1:4a:ab:
da:ff:9f:41:c5:07:7e:65:8b:c9:28:59:bb:5a:49:
d3:ea:2c:0f:1e:d8:91:0a:6c:71:d0:82:fa:ff:29:
30:32:7c:14:36:60:e7:cc:6d:2a:30:af:25:de:fe:
3c:cc:9a:6f:a2:4a:7f:ae:bc:89:7f:20:3f:26:9d:
c4:2a:bc:55:af:01:f1:89:ad:9e:b4:bb:88:a8:07:
bf:f8:72:8c:02:2d:05:b5:08:53:8f:5c:1b:02:18:
68:a6:00:8e:af:e9:74:bf:c6:e7:ec:9d:2b:75:cd:
31:44:db:a2:ec:43:e0:07:df:20:45:36:34:02:39:
f1:4c:a3:b0:67:7e:b0:32:0e:f1:0b:3c:6d:b8:30:
88:bc:ef:0c:b4:16:34:d7:df:28:cb:e9:00:c0:da:
e8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E2:E3:93:50:02:44:CA:C2:F8:12:F8:89:93:80:62:D4:A5:3B:14
X509v3 Authority Key Identifier:
keyid:68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:b5:9c:0e:73:79:72:37:74:59:a6:49:bb:c8:27:a9:5f:80:
a1:f8:e3:d9:9b:02:c3:68:d0:06:e8:bf:f4:32:ca:af:83:f1:
28:60:60:84:93:5a:48:da:4e:95:ff:fa:36:66:13:ae:36:d8:
aa:6f:a0:3a:42:75:d6:d4:2a:a4:18:eb:11:9f:e3:bd:c6:e3:
0a:34:c0:58:c7:fb:a2:8f:5b:c1:2e:69:68:c0:64:53:91:55:
cc:4b:de:3d:a6:0b:3a:10:c0:50:e0:60:e7:f1:0a:84:a8:16:
cf:24:9e:1e:4f:50:da:19:84:e3:c7:5f:3b:69:20:57:38:64:
2b:5c:0b:d1:f2:fb:03:84:19:0c:2c:c3:c0:ca:a9:a8:b0:e1:
45:ce:70:37:f8:15:d0:34:30:f5:50:79:41:69:bd:45:19:c0:
22:0c:30:77:c7:fd:4a:4a:19:76:28:a9:5e:3b:d8:89:31:73:
81:10:7d:61:0b:24:26:c2:27:3b:2d:25:93:8e:37:be:af:0d:
19:88:7b:cd:e6:a1:d6:41:d2:66:e8:52:f4:f3:54:8f:66:cb:
83:93:d9:55:b7:bd:e0:ec:a0:97:4e:f1:dc:fd:46:3b:c9:03:
26:c5:d7:d2:8c:f2:1a:b8:67:6d:13:e4:3c:24:97:02:45:3e:
68:66:3f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:10:58 2026 by rpki-client