Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
File: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft (raw, json)
Hash identifier: zqLOMJVK0nTvV/BZVMoFXwy60wJA9JqbEJTv7PQrl8A=
Subject key identifier: 76:2E:81:BB:9F:BB:84:34:D4:EC:8E:77:E6:01:5F:B0:AD:F1:CB:22
Authority key identifier: 68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14
Certificate issuer: /CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314
Certificate serial: 019FAB2C641DDEFE967277253BBEE053552D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
Manifest number: 19D1
Signing time: Wed 29 Jul 2026 00:00:40 +0000
Manifest this update: Wed 29 Jul 2026 00:00:40 +0000
Manifest next update: Thu 30 Jul 2026 00:00:40 +0000
Files and hashes: 1: YUXKYpsFemsNDBecWX4MUwbfgXA.roa (hash: aALLuFrEzNbZ6xLI2lfoFLt5fV9m8J9Klkm3q6Pz7LI=)
2: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl (hash: oxb6+I5JBOCmIs7RxZO5zjFnMivpPGAyP2qRJRna6wc=)
3: ce5lJ-hpH1wu-kVRML7xAZPt-gE.roa (hash: 8ViUaToRkyhjrSgTu0qhVkwYrKw/qmbuzYwV/hXV6/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:64:1d:de:fe:96:72:77:25:3b:be:e0:53:55:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314
Validity
Not Before: Jul 29 00:00:40 2026 GMT
Not After : Jul 30 00:00:40 2026 GMT
Subject: CN=762e81bb9fbb8434d4ec8e77e6015fb0adf1cb22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:23:a9:27:e0:c1:be:ae:7a:ed:68:08:f0:24:
15:50:79:af:f7:d3:aa:10:3f:a9:6d:b1:0a:73:dc:
e2:da:cc:d9:fd:b8:89:17:7d:ed:e2:00:fd:89:be:
d1:bd:db:59:43:02:8e:3e:42:1d:aa:be:96:45:f8:
17:ae:c0:e2:c1:38:a3:37:1b:9d:bc:a9:12:95:cb:
44:3b:7e:8b:10:69:7f:ec:08:70:af:bb:a7:9b:e7:
b2:87:0c:75:cd:ac:33:f8:80:ed:05:ca:b0:7f:96:
36:fc:5d:8f:09:46:65:81:1a:d5:97:a0:51:85:c0:
77:fa:eb:3d:98:d3:4e:39:c7:e8:be:4c:2c:bc:fd:
e0:83:c6:0b:91:f9:40:68:5a:17:97:c1:31:d5:6c:
e6:f1:a2:4e:5d:90:6c:22:ee:15:56:8b:5c:ae:f4:
07:07:e2:65:a4:b3:52:22:c4:13:a8:6f:f2:8b:96:
68:73:df:db:3d:45:23:d5:0e:92:62:db:06:b7:c0:
3a:99:a3:67:7e:be:5c:11:41:40:37:78:fa:3b:b4:
bf:c2:37:88:16:3d:d1:be:46:a7:a8:a8:8e:40:95:
c4:ad:4a:05:ad:ba:6e:b2:1a:37:6c:c7:80:87:6c:
c8:f3:5d:b0:e2:3e:62:ab:5f:5f:5c:b0:6e:f4:ca:
e2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:2E:81:BB:9F:BB:84:34:D4:EC:8E:77:E6:01:5F:B0:AD:F1:CB:22
X509v3 Authority Key Identifier:
keyid:68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:63:89:e4:d1:5c:3f:d2:ef:c3:ec:6a:bd:08:ff:1b:9c:10:
06:ac:17:99:95:f3:26:51:33:6c:60:ca:d9:87:03:b9:12:0f:
07:2c:fd:82:00:af:d2:ca:73:55:57:e9:fe:17:8a:d6:dc:7f:
33:cf:90:76:d4:ed:da:85:54:9b:45:16:d9:4b:aa:51:92:cd:
1c:06:a5:3c:fb:59:20:d7:9e:e3:33:98:eb:b9:30:ae:ac:3f:
b4:b3:2c:01:d9:cd:dc:6c:51:a3:2b:e5:52:f9:1b:b4:72:19:
ca:2c:52:47:cb:05:92:4c:ed:d8:1a:5c:75:10:3d:4f:c3:b1:
81:22:30:60:e0:ca:64:cb:be:4b:3b:9d:b1:2a:bc:07:8f:34:
5d:a9:2f:be:fc:18:38:ca:8d:12:86:53:10:00:f0:42:4e:a2:
c1:69:66:88:65:12:80:09:47:c5:55:dc:ef:d6:f5:ad:35:86:
81:e6:0a:3e:0f:9b:5a:72:0e:8c:54:74:74:45:8e:5f:f0:0d:
12:88:97:73:31:c3:59:a2:69:a5:05:55:95:3b:99:de:9e:ec:
d5:53:76:22:95:d2:6e:f2:e5:09:7c:bb:81:e2:6f:40:16:e5:
4a:4e:46:43:18:43:68:f4:dd:7d:25:7d:94:8f:04:71:dc:ba:
f4:3c:c7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:10:24 2026 by rpki-client