Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
File: o52_aHirAKRS-LB_iQ06s0g3Yns.mft (raw, json)
Hash identifier: rJHR4BEAvDgKjnku0riEzYQS45hMW6/gv3l97pEqc6g=
Subject key identifier: A5:70:71:2E:59:85:64:D3:EF:B7:FF:E9:D2:C5:E1:6E:79:FB:A7:F2
Authority key identifier: A3:9D:BF:68:78:AB:00:A4:52:F8:B0:7F:89:0D:3A:B3:48:37:62:7B
Certificate issuer: /CN=a39dbf6878ab00a452f8b07f890d3ab34837627b
Certificate serial: 01A0D5DD9B86F73A8451BF6055E35E803AAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
Manifest number: 0932
Signing time: Fri 25 Sep 2026 00:01:05 +0000
Manifest this update: Fri 25 Sep 2026 00:01:05 +0000
Manifest next update: Sat 26 Sep 2026 00:01:05 +0000
Files and hashes: 1: irICw9k54gxIc6MwAFiIdqi5VAM.roa (hash: cVexCvCqPHrx0mmIhLbiS62tGFKhVl04e+CAM0DmAGQ=)
2: o52_aHirAKRS-LB_iQ06s0g3Yns.crl (hash: zueCnU6rQO5mmw5mGJ+yZ/hQArDuMoynOObdJGV8W6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:dd:9b:86:f7:3a:84:51:bf:60:55:e3:5e:80:3a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a39dbf6878ab00a452f8b07f890d3ab34837627b
Validity
Not Before: Sep 25 00:01:05 2026 GMT
Not After : Sep 26 00:01:05 2026 GMT
Subject: CN=a570712e598564d3efb7ffe9d2c5e16e79fba7f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7a:3f:36:5b:3d:07:5e:c6:81:97:21:63:be:
ab:5a:21:35:37:f5:02:62:7e:51:23:91:51:d0:e7:
1f:85:27:48:c2:24:0b:da:bf:4d:9d:63:3a:c9:7f:
bc:a3:c1:38:d5:bb:f7:7a:dd:39:f2:f0:79:f1:59:
4b:d9:ee:7b:34:e8:a5:ef:32:c2:3f:8c:29:b7:59:
2f:31:96:0c:0b:43:58:8a:1d:7a:83:8d:c5:fd:4a:
b8:cd:d9:cb:9d:af:b5:37:d1:b9:b7:29:14:70:82:
3d:05:fc:ea:81:b8:e1:b1:56:93:fc:c3:7d:b1:5b:
26:de:e4:70:3e:b0:0a:21:2f:f4:ec:27:a2:06:70:
d0:84:cb:f8:a4:1b:71:67:0e:76:8d:88:6f:fb:c4:
77:99:18:fc:ae:bd:49:a2:b4:33:92:26:a1:32:ea:
d1:00:74:32:85:26:ec:35:0d:c2:c5:ef:b1:7d:01:
c6:f5:f7:97:5d:6f:fc:76:03:56:77:0c:fc:5b:25:
f9:b7:4b:dd:6a:c6:e7:b8:63:4f:15:e0:d5:97:0a:
08:f9:7d:9f:e5:66:6d:86:ad:c7:41:1c:d6:44:ef:
d3:6b:6e:7c:f4:9c:88:fb:57:55:3f:4e:bc:00:bb:
4e:90:f1:b0:ca:eb:16:c5:b4:b5:9b:e8:16:22:cd:
e5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:70:71:2E:59:85:64:D3:EF:B7:FF:E9:D2:C5:E1:6E:79:FB:A7:F2
X509v3 Authority Key Identifier:
keyid:A3:9D:BF:68:78:AB:00:A4:52:F8:B0:7F:89:0D:3A:B3:48:37:62:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:e1:02:c3:e0:a3:05:16:ea:51:b4:e8:88:57:85:1a:0f:cc:
7d:bb:24:fa:d2:4f:a3:3f:79:8b:7d:34:23:db:e2:eb:bb:81:
ca:04:92:d3:35:1c:27:a3:81:cb:35:98:3b:43:ad:95:be:ac:
00:df:32:45:ff:46:a1:96:d9:2c:2e:ad:df:53:9c:90:d7:43:
74:a8:29:25:7c:ed:83:4b:6a:b3:46:4f:68:06:7f:62:60:3b:
01:22:7d:ae:ea:28:9e:e8:ce:eb:a7:a2:42:33:61:9d:82:77:
e0:ef:05:23:d7:38:d7:af:f6:54:37:8c:c0:b7:cd:62:c0:ef:
2d:18:ae:2a:3e:c3:28:30:41:c6:83:32:62:39:de:d8:35:3c:
b1:11:f5:0b:23:72:9c:2e:d1:c0:1a:e7:b3:2c:8d:ae:1e:d5:
72:f9:11:dc:c1:87:b3:b2:89:ac:17:89:92:19:4d:be:43:90:
62:39:b9:07:91:fc:f3:93:0d:de:4c:f1:6c:be:8f:13:1a:47:
9f:7b:da:7c:bd:7f:2c:8e:b1:6c:8d:a9:3e:29:62:ca:47:22:
03:a3:1e:46:03:cd:28:8c:5d:0b:4f:52:b3:d2:af:e5:27:07:
7a:ea:e5:6a:46:d0:54:74:25:ea:b2:4d:a3:d4:fb:7b:8b:97:
15:1c:4b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:01:13 2026 by rpki-client