Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
File: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft (raw, json)
Hash identifier: AcIikQ3mwcb5+/wkNJ5ex7cpFs+U1hdZbBtLZAO6Eh0=
Subject key identifier: C4:BD:A7:DF:66:D6:DD:CD:64:89:4A:FF:3B:D4:A1:18:20:5D:19:D5
Authority key identifier: 68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14
Certificate issuer: /CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314
Certificate serial: 019D9A06C3CC0A2FFBF8B6150EB69AAEBF7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 06:00:27 +0000
Manifest this update: Fri 17 Apr 2026 06:00:27 +0000
Manifest next update: Sat 18 Apr 2026 06:00:27 +0000
Files and hashes: 1: YUXKYpsFemsNDBecWX4MUwbfgXA.roa (hash: aALLuFrEzNbZ6xLI2lfoFLt5fV9m8J9Klkm3q6Pz7LI=)
2: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl (hash: 3ykgVopDC0QXIvHfhFXi42RjnfjwjS9PBsF5NOyKTaM=)
3: ce5lJ-hpH1wu-kVRML7xAZPt-gE.roa (hash: 8ViUaToRkyhjrSgTu0qhVkwYrKw/qmbuzYwV/hXV6/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:c3:cc:0a:2f:fb:f8:b6:15:0e:b6:9a:ae:bf:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314
Validity
Not Before: Apr 17 06:00:27 2026 GMT
Not After : Apr 18 06:00:27 2026 GMT
Subject: CN=c4bda7df66d6ddcd64894aff3bd4a118205d19d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f8:e1:11:8e:ae:db:54:23:c5:ee:ce:0c:07:
bd:07:53:05:57:3b:bf:74:77:b0:d2:d9:05:4a:fc:
f5:4d:a5:75:e0:b3:88:dc:43:8b:2e:e7:69:a1:58:
c5:bc:b3:e4:4e:8b:57:dd:93:34:e5:3d:c2:62:68:
24:e1:ae:e8:d0:f4:c2:d1:b4:0c:12:8d:cb:64:aa:
22:5a:d5:33:f7:a6:5a:5e:d2:2d:e6:21:63:32:ae:
e7:b9:7e:62:3f:26:18:1f:83:3c:a1:3f:8b:d4:83:
f0:84:a4:cc:3d:4d:be:a7:19:25:7b:9a:02:2a:ed:
e7:f0:fa:65:06:5f:94:a0:87:b4:4f:b2:cb:1a:14:
b8:44:c5:7d:99:5b:54:ea:18:8f:87:0e:36:bb:96:
47:36:ca:9f:9f:41:d2:46:46:1d:53:fd:f6:29:57:
d5:ff:87:02:b0:95:b4:d6:d9:a8:bc:99:35:07:33:
e0:a2:11:1b:8f:18:0d:24:02:a7:28:b8:62:0c:80:
1c:d7:b4:e2:92:f9:2d:06:eb:1d:99:ef:db:61:cd:
d7:be:c1:dd:4e:9d:6f:41:61:c8:0b:0d:66:be:57:
02:73:2d:85:86:52:02:51:67:c2:89:b7:6e:4c:60:
3d:60:6e:8b:be:8d:f0:56:d8:9e:c1:d5:32:89:73:
c3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:BD:A7:DF:66:D6:DD:CD:64:89:4A:FF:3B:D4:A1:18:20:5D:19:D5
X509v3 Authority Key Identifier:
keyid:68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:80:4d:07:da:b8:98:45:b0:1e:c6:1b:d6:18:51:95:87:e5:
3e:9c:1e:93:e4:f9:1a:de:16:97:69:3b:3a:0a:1d:e7:40:3f:
c1:5c:69:4c:0f:a9:5d:75:8b:3b:47:b3:f5:fb:f4:4a:32:e0:
e5:4e:85:3a:71:d3:46:12:98:32:2a:d2:7a:e0:b5:26:6b:bc:
f2:20:d5:aa:93:a9:39:ff:8c:cc:f0:25:61:bc:32:72:ef:d0:
11:dd:1f:4c:1a:25:68:ee:b6:bd:52:53:28:04:77:46:6b:83:
54:22:50:fc:ea:aa:98:4c:51:72:60:39:5d:a4:02:a1:1a:d5:
7b:d2:e9:ff:3e:ed:70:91:01:22:86:13:53:6e:7a:90:1e:29:
ef:bb:fc:b0:5b:cb:4c:c5:fb:70:e0:dc:02:0e:3f:44:8c:4c:
97:cc:9f:52:36:4c:ca:85:3c:33:0d:df:45:6b:b8:7c:b9:91:
4d:3c:88:60:f2:64:3f:ba:c9:30:91:5e:2c:35:90:e1:51:2b:
72:f6:e6:a1:25:ce:0f:73:88:74:d1:2b:ed:6d:99:f3:2c:38:
d1:6e:20:b8:6f:ad:81:e4:b5:6c:d0:46:24:4b:2b:07:db:3c:
a2:5c:7b:ce:4c:1a:47:22:2b:2e:07:79:09:7b:93:57:29:6b:
c2:1a:a4:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:06:23 2026 by rpki-client