Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
File: o52_aHirAKRS-LB_iQ06s0g3Yns.mft (raw, json)
Hash identifier: XKG4WSABdtg9pTXivy8snyT6xFOCsbGewI7dDS1t7qU=
Subject key identifier: DB:E9:2E:91:2A:B2:8B:30:D1:1A:2D:D0:DC:1A:F1:27:BD:8A:3E:A5
Authority key identifier: A3:9D:BF:68:78:AB:00:A4:52:F8:B0:7F:89:0D:3A:B3:48:37:62:7B
Certificate issuer: /CN=a39dbf6878ab00a452f8b07f890d3ab34837627b
Certificate serial: 019E1EA36AA168F04FEEC34B0C475CC91858
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
Manifest number: 07CA
Signing time: Wed 13 May 2026 00:01:26 +0000
Manifest this update: Wed 13 May 2026 00:01:26 +0000
Manifest next update: Thu 14 May 2026 00:01:26 +0000
Files and hashes: 1: irICw9k54gxIc6MwAFiIdqi5VAM.roa (hash: cVexCvCqPHrx0mmIhLbiS62tGFKhVl04e+CAM0DmAGQ=)
2: o52_aHirAKRS-LB_iQ06s0g3Yns.crl (hash: VvIcbcwyGzqS03PMbO1uj8BT+9iRPatkxVcGE3bgdQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:6a:a1:68:f0:4f:ee:c3:4b:0c:47:5c:c9:18:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a39dbf6878ab00a452f8b07f890d3ab34837627b
Validity
Not Before: May 13 00:01:26 2026 GMT
Not After : May 14 00:01:26 2026 GMT
Subject: CN=dbe92e912ab28b30d11a2dd0dc1af127bd8a3ea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c2:fd:52:4f:21:a4:5c:c3:e0:f2:28:56:7b:
86:5b:d0:f0:5b:63:33:28:93:2e:22:c2:de:41:ef:
f2:5f:f2:1f:65:ec:a6:5e:59:79:c4:15:fb:7d:4e:
5a:0d:25:e3:5c:19:4d:b7:2b:c0:d3:d0:70:49:d5:
55:54:b2:2b:4a:c6:42:37:5e:8f:30:dc:1d:38:db:
2a:d3:32:b6:a6:56:b2:a0:5e:e3:06:35:76:83:6c:
f4:2c:51:7e:af:f3:49:c8:05:5d:2a:40:43:47:ea:
7b:89:a3:85:79:b8:a0:42:03:aa:57:ac:64:0d:3c:
4c:11:ff:80:93:f2:09:a2:2c:a3:33:0c:66:e8:ee:
32:ee:7c:a1:e3:b6:b2:29:a1:4a:f2:7c:47:27:ec:
9b:20:44:af:97:9f:e3:84:90:ec:3b:6b:76:26:f5:
91:af:11:35:63:6d:df:64:1d:3e:09:45:a5:6b:2c:
07:a6:41:42:35:66:de:ff:f7:f1:03:03:33:4e:f2:
9c:1e:68:ec:6f:7f:05:d0:86:6f:fc:cf:ab:7a:72:
d0:4b:18:87:22:b6:e6:1f:6f:d9:c1:4d:57:68:61:
53:55:aa:fa:97:64:17:4a:eb:dc:8c:de:9a:cb:e4:
21:82:6f:9e:39:0f:ce:8b:27:c6:cc:94:eb:c1:d7:
15:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E9:2E:91:2A:B2:8B:30:D1:1A:2D:D0:DC:1A:F1:27:BD:8A:3E:A5
X509v3 Authority Key Identifier:
keyid:A3:9D:BF:68:78:AB:00:A4:52:F8:B0:7F:89:0D:3A:B3:48:37:62:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:63:5e:b6:8a:c9:63:64:89:48:b0:a5:1c:0e:ba:55:d5:32:
c4:75:ac:cb:86:62:d1:9e:d9:1e:32:2c:f0:82:73:4b:e6:a2:
27:cb:b0:cb:0c:c6:71:2c:97:22:e1:ac:03:90:f9:20:b4:e9:
4b:34:ea:f2:23:5c:23:c7:c6:90:24:14:54:51:4e:0c:83:d3:
7f:ec:26:a6:e7:38:92:20:a8:27:53:ff:96:07:c8:2d:c9:0b:
7d:d5:b5:7e:12:ec:4b:1d:8d:c1:d0:f7:48:16:99:e2:b9:9a:
e5:7a:8d:98:e2:aa:4c:ea:c3:97:ee:17:a2:1a:74:4b:12:23:
fc:e1:8f:4d:80:3b:40:08:fc:f7:06:50:1f:05:a2:4e:9d:de:
56:37:60:c0:6b:a2:86:34:55:48:14:8d:ef:23:cc:4c:ee:42:
83:28:24:28:69:8d:80:82:ab:17:d6:fd:b7:52:2b:3f:5d:83:
1a:2e:ba:4a:01:f1:01:39:6b:69:47:c5:a8:67:39:04:f4:88:
12:10:41:58:b7:58:66:ae:4e:8d:b6:c0:22:af:b6:62:09:24:
c8:d6:55:55:70:12:de:3a:70:c1:0d:d1:0c:5f:df:38:1f:93:
ac:e7:36:3d:01:5b:54:33:3a:36:50:81:c4:aa:49:67:5e:cf:
a6:c0:7c:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eo2qhaPBP7sNLDEdcyRhYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzOWRiZjY4NzhhYjAwYTQ1MmY4YjA3Zjg5MGQzYWIzNDgz
NzYyN2IwHhcNMjYwNTEzMDAwMTI2WhcNMjYwNTE0MDAwMTI2WjAzMTEwLwYDVQQD
EyhkYmU5MmU5MTJhYjI4YjMwZDExYTJkZDBkYzFhZjEyN2JkOGEzZWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8L9Uk8hpFzD4PIoVnuGW9DwW2Mz
KJMuIsLeQe/yX/IfZeymXll5xBX7fU5aDSXjXBlNtyvA09BwSdVVVLIrSsZCN16P
MNwdONsq0zK2playoF7jBjV2g2z0LFF+r/NJyAVdKkBDR+p7iaOFebigQgOqV6xk
DTxMEf+Ak/IJoiyjMwxm6O4y7nyh47ayKaFK8nxHJ+ybIESvl5/jhJDsO2t2JvWR
rxE1Y23fZB0+CUWlaywHpkFCNWbe//fxAwMzTvKcHmjsb38F0IZv/M+renLQSxiH
IrbmH2/ZwU1XaGFTVar6l2QXSuvcjN6ay+Qhgm+eOQ/OiyfGzJTrwdcV0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNvpLpEqsosw0Rot0Nwa8Se9ij6lMB8GA1UdIwQY
MBaAFKOdv2h4qwCkUviwf4kNOrNIN2J7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzUyX2FIaXJBS1JTLUxCX2lRMDZzMGczWW5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yMjY5NmQtZTcyZi00Y2ZkLWJhZTAt
YWQ0NDIzNzY1ODkyLzEvbzUyX2FIaXJBS1JTLUxCX2lRMDZzMGczWW5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8yMjY5NmQtZTcyZi00Y2ZkLWJhZTAtYWQ0NDIzNzY1ODky
LzEvbzUyX2FIaXJBS1JTLUxCX2lRMDZzMGczWW5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALmNetorJ
Y2SJSLClHA66VdUyxHWsy4Zi0Z7ZHjIs8IJzS+aiJ8uwywzGcSyXIuGsA5D5ILTp
SzTq8iNcI8fGkCQUVFFODIPTf+wmpuc4kiCoJ1P/lgfILckLfdW1fhLsSx2NwdD3
SBaZ4rma5XqNmOKqTOrDl+4Xohp0SxIj/OGPTYA7QAj89wZQHwWiTp3eVjdgwGui
hjRVSBSN7yPMTO5CgygkKGmNgIKrF9b9t1IrP12DGi66SgHxATlraUfFqGc5BPSI
EhBBWLdYZq5OjbbAIq+2YgkkyNZVVXAS3jpwwQ3RDF/fOB+TrOc2PQFbVDM6NlCB
xKpJZ17PpsB81g==
-----END CERTIFICATE-----
Generated at Wed May 13 03:25:26 2026 by rpki-client