Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
File: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft (raw, json)
Hash identifier: CpWGcapk4Tq3OhWhU938EzSLznkBr+YC6H1mpbMU7C0=
Subject key identifier: B9:6F:F8:DC:38:4B:76:38:40:40:11:0A:E0:56:48:98:8C:31:2A:2C
Authority key identifier: 68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14
Certificate issuer: /CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314
Certificate serial: 01A0E219338EE5F538AF4D73FCFD8BEDA1A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
Manifest number: 1A72
Signing time: Sun 27 Sep 2026 09:01:37 +0000
Manifest this update: Sun 27 Sep 2026 09:01:37 +0000
Manifest next update: Mon 28 Sep 2026 09:01:37 +0000
Files and hashes: 1: YUXKYpsFemsNDBecWX4MUwbfgXA.roa (hash: aALLuFrEzNbZ6xLI2lfoFLt5fV9m8J9Klkm3q6Pz7LI=)
2: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl (hash: E0UeH4Se4hTkdD3SZM50q0T85ahdYdXU9iOURV7jRiw=)
3: ce5lJ-hpH1wu-kVRML7xAZPt-gE.roa (hash: 8ViUaToRkyhjrSgTu0qhVkwYrKw/qmbuzYwV/hXV6/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 09:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:19:33:8e:e5:f5:38:af:4d:73:fc:fd:8b:ed:a1:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314
Validity
Not Before: Sep 27 09:01:37 2026 GMT
Not After : Sep 28 09:01:37 2026 GMT
Subject: CN=b96ff8dc384b76384040110ae05648988c312a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:da:52:5a:79:98:8f:d6:22:b5:47:b9:cd:55:
c1:d7:ae:1c:79:82:9b:f0:ca:f2:76:92:e7:6b:e2:
b9:a7:26:07:06:c1:19:08:f0:5f:8b:b6:78:eb:52:
9f:ac:60:3a:be:04:de:73:d3:38:27:71:58:76:47:
a0:56:23:2d:fc:50:4a:f8:f1:db:8e:9f:c9:18:92:
0d:c8:02:1d:fa:9d:55:4e:c8:f7:2e:89:cd:db:30:
ae:18:93:d4:50:54:81:25:bf:c9:78:cc:2d:9e:b1:
91:41:59:e9:65:25:18:78:55:73:d4:d2:9e:e0:84:
d6:a6:da:4f:74:20:43:60:3c:13:2c:46:47:2d:3f:
96:c8:63:09:6c:be:0b:e0:ef:2e:bf:19:44:b6:04:
e4:84:52:b3:e7:e7:82:57:40:85:dc:62:ae:71:5d:
93:cf:6b:7b:5d:cd:c0:b1:cd:9b:97:e1:8a:16:31:
80:4a:03:cf:c5:80:fb:d9:7a:eb:32:54:98:1c:9f:
51:ac:04:99:8e:ce:8b:f7:7e:3a:08:f2:b6:9d:50:
48:84:93:6d:73:11:37:89:fc:37:94:3a:89:ad:14:
48:3d:20:a9:a6:dc:96:83:59:6b:bb:32:b0:c8:64:
ff:f1:d7:d4:fc:c1:48:18:85:5b:26:ca:fd:41:d2:
60:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:6F:F8:DC:38:4B:76:38:40:40:11:0A:E0:56:48:98:8C:31:2A:2C
X509v3 Authority Key Identifier:
keyid:68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:bc:3c:f9:bd:d3:05:03:a5:c8:94:cf:f3:3b:b3:e6:3f:ee:
fb:c6:6a:1a:c3:de:21:c4:bf:7f:50:bf:74:78:2a:02:6f:2f:
6f:09:e2:fb:70:f9:9e:fd:85:aa:ef:c9:a3:6f:93:91:f6:c7:
90:27:df:34:0e:c8:29:71:e1:a1:b6:47:c8:b8:81:1b:d4:78:
09:85:51:c5:ab:1d:04:61:a6:fd:83:9c:3a:0c:b3:e5:cb:9d:
58:97:2d:a4:38:01:5e:00:b6:0a:3b:fb:5e:bf:88:92:04:bf:
7c:a5:65:07:1f:4c:a8:c6:73:a5:8c:07:d3:9b:eb:ff:17:b1:
75:e3:c5:47:e2:34:ff:24:3c:a4:9b:dc:29:89:8c:d7:b1:66:
42:63:66:70:ee:15:09:09:16:96:cc:ff:75:fd:f0:fb:23:4f:
3e:f0:49:40:e6:5e:dd:6e:68:2d:98:28:41:2c:97:e8:98:dc:
e8:b5:8d:d5:1c:00:67:b0:32:02:7a:93:a6:18:fc:6e:03:e8:
c2:d0:96:59:a0:02:6f:11:4c:32:cb:75:18:8d:98:bc:5f:97:
b0:aa:fc:52:46:62:f2:5f:65:e1:ed:0a:f6:78:91:1c:a7:3b:
bb:0f:ee:56:45:f8:4a:fc:c9:c0:5c:96:c9:41:76:29:15:14:
39:67:3e:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDiGTOO5fU4r01z/P2L7aGhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZTNiYTg3ZTNhOTM0NjhjYzNiM2MzZjYwZmE2M2Q1ZTg1
M2MzMTQwHhcNMjYwOTI3MDkwMTM3WhcNMjYwOTI4MDkwMTM3WjAzMTEwLwYDVQQD
EyhiOTZmZjhkYzM4NGI3NjM4NDA0MDExMGFlMDU2NDg5ODhjMzEyYTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtpSWnmYj9YitUe5zVXB164ceYKb
8MrydpLna+K5pyYHBsEZCPBfi7Z461KfrGA6vgTec9M4J3FYdkegViMt/FBK+PHb
jp/JGJINyAId+p1VTsj3LonN2zCuGJPUUFSBJb/JeMwtnrGRQVnpZSUYeFVz1NKe
4ITWptpPdCBDYDwTLEZHLT+WyGMJbL4L4O8uvxlEtgTkhFKz5+eCV0CF3GKucV2T
z2t7Xc3Asc2bl+GKFjGASgPPxYD72XrrMlSYHJ9RrASZjs6L9346CPK2nVBIhJNt
cxE3ifw3lDqJrRRIPSCpptyWg1lruzKwyGT/8dfU/MFIGIVbJsr9QdJghQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLlv+Nw4S3Y4QEARCuBWSJiMMSosMB8GA1UdIwQY
MBaAFGjjuofjqTRozDs8P2D6Y9XoU8MUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU9PNmgtT3BOR2pNT3p3X1lQcGoxZWhUd3hRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8xZWZmMTctNjVlYy00NWVhLWE3NWQt
OTZlYjA3Zjc4MjViLzEvYU9PNmgtT3BOR2pNT3p3X1lQcGoxZWhUd3hRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8xZWZmMTctNjVlYy00NWVhLWE3NWQtOTZlYjA3Zjc4MjVi
LzEvYU9PNmgtT3BOR2pNT3p3X1lQcGoxZWhUd3hRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABbw8+b3T
BQOlyJTP8zuz5j/u+8ZqGsPeIcS/f1C/dHgqAm8vbwni+3D5nv2Fqu/Jo2+TkfbH
kCffNA7IKXHhobZHyLiBG9R4CYVRxasdBGGm/YOcOgyz5cudWJctpDgBXgC2Cjv7
Xr+IkgS/fKVlBx9MqMZzpYwH05vr/xexdePFR+I0/yQ8pJvcKYmM17FmQmNmcO4V
CQkWlsz/df3w+yNPPvBJQOZe3W5oLZgoQSyX6Jjc6LWN1RwAZ7AyAnqTphj8bgPo
wtCWWaACbxFMMst1GI2YvF+XsKr8UkZi8l9l4e0K9niRHKc7uw/uVkX4SvzJwFyW
yUF2KRUUOWc+Ow==
-----END CERTIFICATE-----
Generated at Sun Sep 27 16:58:42 2026 by rpki-client