Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft
File: 0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft (raw, json)
Hash identifier: 3P2Z1ZqQsz5WGUyg/0DNk+TPKjMVcv+uw/pHn9KRqDg=
Subject key identifier: 21:60:3A:00:76:20:66:2C:6A:E6:3C:D5:3D:D0:15:1A:71:7E:08:2C
Authority key identifier: D0:04:07:65:E4:74:60:0E:1B:C7:62:2A:43:66:3D:D8:D9:FA:DC:87
Certificate issuer: /CN=d0040765e474600e1bc7622a43663dd8d9fadc87
Certificate serial: 019F90910533BADACE13C9756E7C78BC2CD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft
Manifest number: 02C0
Signing time: Thu 23 Jul 2026 20:00:50 +0000
Manifest this update: Thu 23 Jul 2026 20:00:50 +0000
Manifest next update: Fri 24 Jul 2026 20:00:50 +0000
Files and hashes: 1: 0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.crl (hash: Z9ty19Ure0EUzk+QpxBOx2yF4G/CkqgEgsaORlFESEE=)
2: 1f3cl6fa8t-l-W7Ec_h4Hi3qeJo.roa (hash: aNyojc3jYn6lQHQNmAXrSGeiZeVM+znH218BSnC07+A=)
3: duEAUG-bxB2EvWz-YifRDzDM_48.roa (hash: Ah3/AgVili0L8xB1wP9XrE7QvUAGK2Wo6GmF16qZYm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:05:33:ba:da:ce:13:c9:75:6e:7c:78:bc:2c:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0040765e474600e1bc7622a43663dd8d9fadc87
Validity
Not Before: Jul 23 20:00:50 2026 GMT
Not After : Jul 24 20:00:50 2026 GMT
Subject: CN=21603a007620662c6ae63cd53dd0151a717e082c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d5:bf:35:5b:cf:6e:84:f2:ca:96:1b:90:0d:
53:3e:1a:8a:23:34:e9:71:2a:23:7e:bf:00:a2:94:
a8:34:d5:29:ac:b3:3a:5e:5f:98:57:d4:d2:2f:6d:
4a:0b:e3:9e:ea:a8:09:54:d6:98:2e:ef:21:e0:4d:
23:42:bb:be:9b:64:20:4b:ab:ec:a8:38:c6:5d:9f:
91:d0:34:f2:76:87:0e:54:0e:54:3f:fc:19:fd:be:
6c:07:ae:c9:42:b1:d9:73:b9:80:cd:40:f9:ea:60:
94:58:3a:4d:37:11:64:5c:57:50:c2:17:dd:b8:06:
cb:90:ab:51:c5:c5:cf:d1:4c:ca:0e:fc:14:3e:10:
c1:8b:27:90:d4:a2:aa:d0:3b:58:30:70:0c:7b:d3:
bd:5b:0b:a0:41:79:60:54:3f:61:84:5e:0d:5a:91:
ea:71:93:fa:7e:a8:7a:8d:f8:37:6a:bd:16:6a:3d:
57:44:73:69:25:e8:63:45:d0:0c:60:a3:8e:b4:5c:
6c:a6:2c:61:62:0d:2b:e8:ad:c5:41:bb:13:c5:b2:
5a:0f:5e:e9:d1:67:45:eb:5d:b3:78:94:82:a9:7b:
94:0d:2e:c0:91:2c:c4:36:db:1a:b9:08:c6:5b:c2:
e9:4e:3d:89:7e:60:59:d9:6c:70:63:5f:f5:4f:77:
41:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:60:3A:00:76:20:66:2C:6A:E6:3C:D5:3D:D0:15:1A:71:7E:08:2C
X509v3 Authority Key Identifier:
keyid:D0:04:07:65:E4:74:60:0E:1B:C7:62:2A:43:66:3D:D8:D9:FA:DC:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:b2:77:98:54:c2:84:fa:59:7d:4f:2e:11:42:35:4c:2d:2c:
e3:74:92:5a:b8:3e:84:06:15:98:45:c5:ef:67:a3:2f:ed:3d:
d9:dc:7e:3a:5d:78:b1:75:3b:d0:8b:c2:0f:f9:d9:4e:65:04:
c3:5b:cb:a5:ba:34:0e:de:36:a6:10:59:98:2f:cd:a5:ba:a1:
cf:e2:c7:94:b5:2a:0f:03:65:4c:17:a7:55:98:f1:3d:68:27:
72:3d:5f:d4:31:80:e0:2f:8d:d1:1f:bb:6c:c8:4d:a2:27:8c:
80:d2:7c:76:f8:46:13:b5:c9:6f:f4:44:64:61:7f:3c:f3:11:
33:6e:18:97:0c:40:bc:c1:cf:c0:59:ac:19:54:56:39:a5:47:
17:d4:b6:b1:37:17:81:ca:20:ff:07:eb:5e:25:37:19:cb:f7:
23:0c:b0:a0:0e:38:b6:9b:f5:03:e1:0e:d9:52:ee:d1:74:aa:
8d:46:6f:7c:4f:8c:1f:c3:25:3b:a2:da:48:4d:f5:81:00:b6:
58:70:1f:4f:76:04:ba:08:0b:dd:2b:c7:f6:c0:ec:dc:08:60:
f4:86:59:19:17:f7:b1:88:65:d4:41:9c:a5:ca:8d:17:3b:b9:
5c:c6:ec:da:76:4a:b9:3f:95:f9:3c:03:0f:ad:f3:df:f2:6b:
60:52:47:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:38:41 2026 by rpki-client