Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft
File: 0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft (raw, json)
Hash identifier: tT0aVk3RtfSN08CPhhJ79CkYEoAJiVq0EQDLdKcgKtM=
Subject key identifier: C3:39:DE:83:52:8E:83:40:B7:0C:63:64:D9:BE:64:B0:03:67:5D:1F
Authority key identifier: D0:04:07:65:E4:74:60:0E:1B:C7:62:2A:43:66:3D:D8:D9:FA:DC:87
Certificate issuer: /CN=d0040765e474600e1bc7622a43663dd8d9fadc87
Certificate serial: 019E1FB5800189765A894AF2E42CE29F9B8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft
Manifest number: 0201
Signing time: Wed 13 May 2026 05:00:48 +0000
Manifest this update: Wed 13 May 2026 05:00:48 +0000
Manifest next update: Thu 14 May 2026 05:00:48 +0000
Files and hashes: 1: 0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.crl (hash: BMUCztDmqHKIpthzWCf/zIHcCsdc3Z9KcJTWqmIilgs=)
2: 1f3cl6fa8t-l-W7Ec_h4Hi3qeJo.roa (hash: aNyojc3jYn6lQHQNmAXrSGeiZeVM+znH218BSnC07+A=)
3: duEAUG-bxB2EvWz-YifRDzDM_48.roa (hash: Ah3/AgVili0L8xB1wP9XrE7QvUAGK2Wo6GmF16qZYm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:80:01:89:76:5a:89:4a:f2:e4:2c:e2:9f:9b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0040765e474600e1bc7622a43663dd8d9fadc87
Validity
Not Before: May 13 05:00:48 2026 GMT
Not After : May 14 05:00:48 2026 GMT
Subject: CN=c339de83528e8340b70c6364d9be64b003675d1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:80:52:0b:40:45:97:0f:3d:55:08:27:70:70:
54:fc:d1:7c:e6:55:41:60:cd:7b:bb:60:ba:a4:03:
d4:4a:11:a8:7d:26:e7:38:eb:84:a6:87:83:23:c9:
06:95:6f:43:50:a8:1e:60:27:9b:66:85:41:2f:f4:
82:48:c5:be:1d:2a:8c:24:d2:2c:a5:68:9d:38:d5:
1b:79:0a:59:67:39:14:08:a6:05:b9:f4:ea:55:af:
3f:ca:5f:49:3f:26:c4:0d:58:47:0b:96:a7:63:43:
4f:f6:92:6b:c6:a7:4c:ba:bd:70:a1:e9:53:f8:b4:
fd:c6:fd:55:0c:e9:99:54:d3:61:5d:cd:2d:f3:6d:
27:b2:8b:97:02:0f:4e:76:66:0e:23:05:a5:7f:90:
cf:4b:3e:ab:e7:7c:20:38:d7:06:bc:2c:19:2a:fd:
d2:da:6f:81:76:46:71:f8:6b:1f:62:6c:69:28:8e:
b5:8c:18:ce:06:70:0e:f9:ad:62:e7:df:0e:4e:08:
8f:81:65:c8:8c:87:1c:9f:77:63:27:11:ab:18:ba:
dd:f4:1a:94:d1:04:f4:8e:f6:e5:8d:c0:fe:63:f1:
9f:d1:7f:4b:7b:df:4a:55:1a:9c:ff:0c:82:b2:b4:
b8:fc:18:e8:1d:b4:37:a3:e7:fd:2d:f2:d1:f8:f8:
05:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:39:DE:83:52:8E:83:40:B7:0C:63:64:D9:BE:64:B0:03:67:5D:1F
X509v3 Authority Key Identifier:
keyid:D0:04:07:65:E4:74:60:0E:1B:C7:62:2A:43:66:3D:D8:D9:FA:DC:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:4d:62:a2:22:d4:aa:7c:f1:48:fc:a3:3c:e1:a9:ec:d1:c4:
12:69:73:17:c1:a2:9b:fe:bf:fc:47:d8:db:cf:b9:c5:d8:fc:
e0:cd:6f:1c:f1:8b:68:64:bb:7c:2a:3b:2b:c3:3c:15:4f:a5:
e4:0b:f3:53:34:4b:fe:d6:e4:8e:59:35:ce:33:54:5b:d7:02:
cd:f7:82:77:1b:29:c6:5b:d1:ca:5d:59:42:69:40:83:59:8d:
b8:ec:67:6c:1b:87:89:8c:af:70:28:ee:72:d2:de:bf:31:e3:
3f:66:ee:cb:97:b8:17:1b:bb:82:86:42:d7:8f:db:a8:c1:99:
4b:34:28:17:30:3a:14:cb:c9:ca:5d:f6:ff:68:13:09:4c:6d:
67:2d:89:eb:0d:37:db:e0:52:37:ff:c1:51:cd:e8:91:e0:ff:
ee:61:45:82:1d:84:49:54:ba:bb:86:63:96:6a:01:db:8b:5e:
3c:cd:bb:69:81:9b:56:ab:fe:26:eb:9d:44:e8:52:70:f3:5d:
61:f5:6c:82:ee:9e:6d:ff:12:71:79:8b:db:7b:85:2b:93:58:
07:c1:b4:9f:a7:c3:29:1f:53:a2:e1:76:86:42:d7:fc:db:b7:
52:91:e4:8d:a4:3f:c6:6f:74:cd:b3:c1:2a:59:59:39:c9:3e:
e2:92:e5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:33:26 2026 by rpki-client