Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
File: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft (raw, json)
Hash identifier: LfLnr7vvqjNPJIhGdSp2sAY8EZqoE4z4UYAuzz9godA=
Subject key identifier: 99:BA:47:23:65:75:D7:76:D3:A6:79:FB:32:D3:DF:94:93:73:97:5A
Authority key identifier: 68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14
Certificate issuer: /CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314
Certificate serial: 019CAC7DFFF878E82407ADA1ACF3FFB9D82A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
Manifest number: 1844
Signing time: Mon 02 Mar 2026 03:01:04 +0000
Manifest this update: Mon 02 Mar 2026 03:01:04 +0000
Manifest next update: Tue 03 Mar 2026 03:01:04 +0000
Files and hashes: 1: YUXKYpsFemsNDBecWX4MUwbfgXA.roa (hash: aALLuFrEzNbZ6xLI2lfoFLt5fV9m8J9Klkm3q6Pz7LI=)
2: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl (hash: TR0ZESU/IgdOVx67GTLFQ/9gKaFMhyywyXrLt0gltqg=)
3: ce5lJ-hpH1wu-kVRML7xAZPt-gE.roa (hash: 8ViUaToRkyhjrSgTu0qhVkwYrKw/qmbuzYwV/hXV6/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 03:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:ff:f8:78:e8:24:07:ad:a1:ac:f3:ff:b9:d8:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314
Validity
Not Before: Mar 2 03:01:04 2026 GMT
Not After : Mar 3 03:01:04 2026 GMT
Subject: CN=99ba47236575d776d3a679fb32d3df949373975a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:54:31:f3:f8:af:dd:24:69:80:1a:88:78:8d:
b5:68:d4:0a:d7:e8:37:6a:de:e1:fc:d2:90:3d:cb:
c7:63:82:d2:60:b4:26:ed:0e:d5:2a:b4:5d:4e:71:
97:ab:35:bf:cc:92:6d:65:0e:ad:61:51:11:ac:b6:
5f:5d:64:c7:5b:88:db:d6:16:05:59:75:3b:57:45:
6c:2c:2b:0f:8b:e1:58:f3:71:48:20:a9:4a:4d:e7:
53:b1:66:b6:78:19:1f:78:68:ea:4f:29:db:ad:f7:
16:ee:d9:cc:6f:f6:e8:fd:e3:67:c3:ea:dd:75:00:
52:3f:e1:bc:9e:19:66:82:43:e2:66:dd:75:b5:00:
66:90:e6:55:9d:a2:ec:6f:91:e5:4b:9b:a7:01:fb:
d9:45:92:5b:e1:b9:ed:89:23:4a:ce:e1:d5:25:26:
7a:a6:8c:96:03:98:95:b6:77:35:77:31:b5:b8:58:
7c:6a:85:92:42:96:4e:a0:25:d0:ad:48:d4:4c:04:
e9:08:1d:84:20:3c:56:5b:2d:04:3f:46:cd:fe:cb:
ce:a1:3b:e3:35:a7:e0:6d:04:22:6e:67:d2:f8:e9:
1d:c9:f5:b4:d0:40:e5:3b:d7:36:dd:1e:18:42:e6:
95:8d:47:fb:8b:ce:9f:1b:ae:7b:62:dd:ac:2b:dd:
82:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BA:47:23:65:75:D7:76:D3:A6:79:FB:32:D3:DF:94:93:73:97:5A
X509v3 Authority Key Identifier:
keyid:68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:22:ee:e4:2c:7d:a4:a8:b3:18:69:64:ad:d9:93:77:b3:4d:
ee:6c:bd:57:5d:ac:53:01:99:ef:2a:e6:ec:ac:dc:c4:d0:87:
62:b2:89:04:1f:7f:60:70:94:5f:a1:d9:6e:b0:39:a9:ff:d2:
f4:c0:8b:02:a8:54:e2:42:0a:fa:b9:6e:29:bf:1a:6f:d2:e8:
51:3f:26:f0:56:6d:86:31:ed:aa:15:b0:f0:af:02:1f:59:8f:
78:6a:c5:6f:96:23:7a:8f:ab:d6:01:4f:08:8e:3d:32:5d:16:
bb:14:2c:43:d6:31:63:69:a4:5e:1c:20:79:ec:96:fb:5a:95:
92:59:03:81:19:7d:23:c3:13:17:b2:82:96:1d:91:66:b2:29:
9f:34:8f:74:4a:31:29:17:2b:04:15:be:e3:11:2e:9d:bb:13:
b5:88:83:e7:c1:c6:ed:96:ca:0c:34:e7:bc:40:21:02:d8:cd:
42:46:5c:6e:b7:ce:09:2a:4c:8f:c0:57:2b:f8:da:a8:1f:e4:
3b:71:85:e2:a2:5c:c1:21:05:bc:d0:38:b8:e4:d8:92:ce:53:
c4:90:3e:e1:a9:7f:3f:19:b3:6a:9e:70:97:e8:12:8f:3b:59:
98:ab:9c:87:8d:ae:ab:ca:31:28:48:d9:a1:1c:f5:82:df:a7:
83:23:fc:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:00:35 2026 by rpki-client