Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
File: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft (raw, json)
Hash identifier: hqtD63riieYDwiGHxuwEQVD4iv1vwEke2e8DjJpQ0PU=
Subject key identifier: 33:01:E4:3F:F0:E4:D3:69:62:54:83:9B:08:0D:D9:5F:8B:81:5C:7D
Authority key identifier: 68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14
Certificate issuer: /CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314
Certificate serial: 01A0D4947B1D24ADB01A29F299563F4709F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
Manifest number: 1A6B
Signing time: Thu 24 Sep 2026 18:01:35 +0000
Manifest this update: Thu 24 Sep 2026 18:01:35 +0000
Manifest next update: Fri 25 Sep 2026 18:01:35 +0000
Files and hashes: 1: YUXKYpsFemsNDBecWX4MUwbfgXA.roa (hash: aALLuFrEzNbZ6xLI2lfoFLt5fV9m8J9Klkm3q6Pz7LI=)
2: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl (hash: EAVouiM3+zd7F+PPnDGlYw91GvOG3nigc986Wdi53rA=)
3: ce5lJ-hpH1wu-kVRML7xAZPt-gE.roa (hash: 8ViUaToRkyhjrSgTu0qhVkwYrKw/qmbuzYwV/hXV6/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:94:7b:1d:24:ad:b0:1a:29:f2:99:56:3f:47:09:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314
Validity
Not Before: Sep 24 18:01:35 2026 GMT
Not After : Sep 25 18:01:35 2026 GMT
Subject: CN=3301e43ff0e4d3696254839b080dd95f8b815c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:74:75:b7:dc:73:7e:a7:ab:56:01:ec:c2:37:
b6:6e:b8:ae:d9:40:86:fb:5d:b3:ef:f7:a0:4f:5d:
ac:2f:7e:b8:de:fd:b4:07:3f:c2:17:26:36:9a:22:
a9:f5:da:d2:9a:6d:ae:69:71:fa:fa:42:b4:8c:e1:
d7:a4:1c:98:db:87:2d:f8:21:8d:8b:2e:e1:5c:e1:
bc:cf:21:77:0a:c1:9b:8f:bd:29:4b:b0:98:67:4a:
43:b4:e2:e5:8a:7d:bb:bc:ea:43:39:3a:20:eb:5f:
c3:64:a4:64:5d:88:56:60:a5:f6:88:38:49:96:ff:
f6:fd:48:97:c7:37:f4:b7:14:f3:20:c4:8d:3d:93:
c4:00:34:87:a2:47:e2:4b:ee:99:7f:3b:95:24:0c:
9e:e5:59:a0:c6:74:c5:f7:c4:0b:8d:da:34:65:50:
bf:e2:e8:83:7b:93:bf:e8:65:27:95:64:c5:07:b8:
9a:e2:ba:f0:88:b6:9b:3b:42:0f:f8:f6:88:f6:0e:
bf:61:51:f9:c5:52:b9:69:20:85:f6:b5:08:b5:bd:
36:15:d5:2a:c9:e4:cf:cf:a0:20:ed:50:60:0a:32:
96:40:93:4e:a6:ac:ad:c9:eb:6e:59:6d:cc:e7:78:
af:5e:9b:1b:14:6e:a3:e4:b2:03:52:98:a5:2d:66:
10:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:01:E4:3F:F0:E4:D3:69:62:54:83:9B:08:0D:D9:5F:8B:81:5C:7D
X509v3 Authority Key Identifier:
keyid:68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:36:d7:e7:1c:bc:2d:76:b4:3a:6c:be:77:13:7e:ba:2c:2a:
32:10:e4:9c:b1:18:94:32:74:84:d2:9b:27:ae:6a:f1:c8:9c:
ae:8f:57:a7:ae:f8:dc:b4:9b:1c:ec:6e:18:a8:64:04:93:3a:
2f:20:f7:e3:c1:5e:85:96:0c:33:f7:1f:37:48:80:51:1c:35:
97:cb:ad:26:a0:e2:5e:db:98:bd:cb:4a:e5:c7:ff:f1:43:7f:
1c:73:4f:4b:13:34:19:68:19:12:6d:64:1b:24:81:34:a4:e3:
a0:3a:8a:4b:79:3d:a6:ea:f4:a5:97:7b:4c:22:01:b4:0d:32:
a8:86:da:09:c6:a0:bd:91:ca:77:9a:1b:e5:90:61:26:ad:af:
a8:8d:29:e9:a9:35:57:c3:51:38:f8:30:da:30:41:dd:be:30:
c9:4f:ba:76:4f:0a:bd:a1:39:21:c8:09:28:a8:8f:f9:91:95:
26:45:0b:0c:b9:90:1f:17:9e:0b:75:b1:8d:c1:72:ca:e8:de:
d4:7f:fd:47:27:49:9d:65:95:52:f6:ba:3d:fa:b5:0f:1e:b0:
ae:b6:d0:88:3a:a0:26:93:93:b5:86:ff:47:a7:23:71:d7:46:
7b:da:c3:ad:3c:fa:21:dd:21:5d:07:92:b1:2f:77:20:87:e2:
af:82:dc:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDUlHsdJK2wGinymVY/RwnwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZTNiYTg3ZTNhOTM0NjhjYzNiM2MzZjYwZmE2M2Q1ZTg1
M2MzMTQwHhcNMjYwOTI0MTgwMTM1WhcNMjYwOTI1MTgwMTM1WjAzMTEwLwYDVQQD
EygzMzAxZTQzZmYwZTRkMzY5NjI1NDgzOWIwODBkZDk1ZjhiODE1YzdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonR1t9xzfqerVgHswje2briu2UCG
+12z7/egT12sL3643v20Bz/CFyY2miKp9drSmm2uaXH6+kK0jOHXpByY24ct+CGN
iy7hXOG8zyF3CsGbj70pS7CYZ0pDtOLlin27vOpDOTog61/DZKRkXYhWYKX2iDhJ
lv/2/UiXxzf0txTzIMSNPZPEADSHokfiS+6ZfzuVJAye5VmgxnTF98QLjdo0ZVC/
4uiDe5O/6GUnlWTFB7ia4rrwiLabO0IP+PaI9g6/YVH5xVK5aSCF9rUItb02FdUq
yeTPz6Ag7VBgCjKWQJNOpqytyetuWW3M53ivXpsbFG6j5LIDUpilLWYQVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDMB5D/w5NNpYlSDmwgN2V+LgVx9MB8GA1UdIwQY
MBaAFGjjuofjqTRozDs8P2D6Y9XoU8MUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU9PNmgtT3BOR2pNT3p3X1lQcGoxZWhUd3hRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8xZWZmMTctNjVlYy00NWVhLWE3NWQt
OTZlYjA3Zjc4MjViLzEvYU9PNmgtT3BOR2pNT3p3X1lQcGoxZWhUd3hRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8xZWZmMTctNjVlYy00NWVhLWE3NWQtOTZlYjA3Zjc4MjVi
LzEvYU9PNmgtT3BOR2pNT3p3X1lQcGoxZWhUd3hRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgzbX5xy8
LXa0Omy+dxN+uiwqMhDknLEYlDJ0hNKbJ65q8cicro9Xp6743LSbHOxuGKhkBJM6
LyD348FehZYMM/cfN0iAURw1l8utJqDiXtuYvctK5cf/8UN/HHNPSxM0GWgZEm1k
GySBNKTjoDqKS3k9pur0pZd7TCIBtA0yqIbaCcagvZHKd5ob5ZBhJq2vqI0p6ak1
V8NROPgw2jBB3b4wyU+6dk8KvaE5IcgJKKiP+ZGVJkULDLmQHxeeC3WxjcFyyuje
1H/9RydJnWWVUva6Pfq1Dx6wrrbQiDqgJpOTtYb/R6cjcddGe9rDrTz6Id0hXQeS
sS93IIfir4LcWQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 00:52:56 2026 by rpki-client