Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft
File: 0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft (raw, json)
Hash identifier: uDlAKyMUrLd5cci1/b6eL1P7flYob8tAdDG3SAp/aGQ=
Subject key identifier: C1:8D:41:2B:4C:4B:8A:8D:DA:1F:8B:EF:2C:C0:B0:18:61:7E:6E:C3
Authority key identifier: D0:04:07:65:E4:74:60:0E:1B:C7:62:2A:43:66:3D:D8:D9:FA:DC:87
Certificate issuer: /CN=d0040765e474600e1bc7622a43663dd8d9fadc87
Certificate serial: 019D26964A6F0DBB5C0D480CC5F3260491B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft
Manifest number: 0180
Signing time: Wed 25 Mar 2026 20:01:16 +0000
Manifest this update: Wed 25 Mar 2026 20:01:16 +0000
Manifest next update: Thu 26 Mar 2026 20:01:16 +0000
Files and hashes: 1: 0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.crl (hash: 55D1voFsreiuWKDJgAXeNoAUQvqYUZaeghsgQAPKwXQ=)
2: 1f3cl6fa8t-l-W7Ec_h4Hi3qeJo.roa (hash: aNyojc3jYn6lQHQNmAXrSGeiZeVM+znH218BSnC07+A=)
3: duEAUG-bxB2EvWz-YifRDzDM_48.roa (hash: Ah3/AgVili0L8xB1wP9XrE7QvUAGK2Wo6GmF16qZYm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:4a:6f:0d:bb:5c:0d:48:0c:c5:f3:26:04:91:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0040765e474600e1bc7622a43663dd8d9fadc87
Validity
Not Before: Mar 25 20:01:16 2026 GMT
Not After : Mar 26 20:01:16 2026 GMT
Subject: CN=c18d412b4c4b8a8dda1f8bef2cc0b018617e6ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6c:f9:75:6b:37:57:77:f0:83:e4:f0:28:13:
ae:ae:c6:3d:19:cc:ac:1b:7a:44:22:c7:e7:27:26:
51:d0:26:8c:8f:52:5a:cf:09:54:67:f0:b2:00:e5:
4a:30:17:67:52:5e:cd:3c:ff:2f:01:d9:6a:1e:70:
d5:0a:ff:51:c6:9b:5a:ec:31:45:7f:ce:7e:13:9f:
72:fa:9b:e6:f0:d7:31:b6:e6:0d:73:ac:ef:21:bf:
38:42:9f:ae:c5:47:91:6d:0a:cc:11:79:97:a3:d4:
e9:c2:8a:21:b0:8f:71:d2:46:e0:52:20:df:cf:99:
f1:b3:fe:af:5c:87:1a:4d:2a:a3:a6:a8:a2:ef:75:
57:d2:ae:ad:ae:41:7d:28:88:ac:eb:c9:f6:76:3f:
da:f6:ec:45:8a:c7:ee:9d:f8:55:6a:d5:dc:b8:c7:
0f:52:b6:51:e6:f8:86:7f:19:44:03:a4:38:61:0b:
16:29:f5:b4:5c:21:ba:f1:82:bd:3a:86:73:1e:fd:
f5:c2:05:e8:a1:29:ea:1f:06:9c:6a:4e:a1:cc:9e:
72:4e:33:b1:ab:96:c5:db:e7:8d:fa:2e:59:7a:06:
22:1a:86:20:37:1e:fb:71:43:3e:b5:5e:38:7b:cf:
f2:54:b2:5a:1a:3e:65:08:a6:ac:d2:1b:40:45:43:
c9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:8D:41:2B:4C:4B:8A:8D:DA:1F:8B:EF:2C:C0:B0:18:61:7E:6E:C3
X509v3 Authority Key Identifier:
keyid:D0:04:07:65:E4:74:60:0E:1B:C7:62:2A:43:66:3D:D8:D9:FA:DC:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:3f:a1:72:74:c2:5b:de:a1:11:dc:a6:84:5b:0d:c9:e0:b1:
02:3e:4d:b0:b9:3a:8a:8b:0d:3f:ed:8e:ab:83:3d:06:30:69:
d3:7d:6e:94:01:e1:01:0c:6b:ab:03:4b:70:5c:ca:7c:df:b4:
59:f6:43:3b:2d:9c:d9:58:70:de:1f:30:d4:87:34:c6:30:48:
82:bd:4d:bf:8d:65:4e:11:f6:00:53:19:76:3c:69:92:dc:85:
9d:93:d6:95:28:1b:7c:88:68:e5:29:05:35:39:89:98:98:f3:
22:f0:f6:ec:61:2c:3e:94:e7:99:db:14:ec:6c:4b:58:9f:ba:
0f:fe:67:63:c0:0d:bc:48:cd:94:55:56:8c:5b:58:da:1a:c6:
97:e4:d9:e6:a2:cb:b7:93:d3:79:c4:ff:11:2a:8e:57:65:f2:
05:c3:a7:8f:a1:17:ee:72:e6:b4:0b:fd:12:af:d5:d3:7f:69:
39:01:f9:e4:97:8e:7c:81:fc:67:f5:85:5c:b6:a5:66:24:9b:
29:b9:17:9e:81:56:94:e9:ff:f1:91:81:b2:38:3e:1a:27:ae:
21:c8:f4:b8:b3:5c:e7:b2:a7:02:2f:e2:17:98:a2:ef:d9:fc:
1e:23:39:07:a0:d4:8b:08:a4:f4:c8:3b:8a:03:e2:93:47:9d:
fb:62:de:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:42:56 2026 by rpki-client