Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
File: o52_aHirAKRS-LB_iQ06s0g3Yns.mft (raw, json)
Hash identifier: V6dEr+wcedhk/eGrwycYqT/KOfgApHRrZariLaNG41I=
Subject key identifier: 80:24:D9:D6:B2:5C:BB:C6:D7:89:F5:F3:E6:8F:2D:02:53:10:F6:6C
Authority key identifier: A3:9D:BF:68:78:AB:00:A4:52:F8:B0:7F:89:0D:3A:B3:48:37:62:7B
Certificate issuer: /CN=a39dbf6878ab00a452f8b07f890d3ab34837627b
Certificate serial: 019D2772C3D87CE5D7FAD6FF823CC8C5EA0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
Manifest number: 074A
Signing time: Thu 26 Mar 2026 00:02:05 +0000
Manifest this update: Thu 26 Mar 2026 00:02:05 +0000
Manifest next update: Fri 27 Mar 2026 00:02:05 +0000
Files and hashes: 1: irICw9k54gxIc6MwAFiIdqi5VAM.roa (hash: cVexCvCqPHrx0mmIhLbiS62tGFKhVl04e+CAM0DmAGQ=)
2: o52_aHirAKRS-LB_iQ06s0g3Yns.crl (hash: 2JYQFPNrIOn+0xAPDhrdh3WmEfa/i/hLdRTEFLk5qZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:c3:d8:7c:e5:d7:fa:d6:ff:82:3c:c8:c5:ea:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a39dbf6878ab00a452f8b07f890d3ab34837627b
Validity
Not Before: Mar 26 00:02:05 2026 GMT
Not After : Mar 27 00:02:05 2026 GMT
Subject: CN=8024d9d6b25cbbc6d789f5f3e68f2d025310f66c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:76:df:5e:f6:7c:b7:c8:b0:82:b3:90:69:9e:
22:42:57:98:d3:ea:5a:a1:82:b0:ab:60:46:3b:7a:
8d:83:0f:fc:c0:87:fe:2c:44:e2:74:81:a2:59:38:
67:63:c2:fd:f8:f7:72:8d:c7:bd:fb:a4:3f:da:c4:
e8:2c:4b:41:5b:5e:67:91:ac:8e:18:13:60:84:df:
4f:8f:03:3c:1f:fc:b4:0c:fb:f2:8a:ce:81:f9:fc:
6e:a8:c9:13:6f:54:22:a9:00:3b:96:4f:f0:16:0b:
c2:24:7c:02:00:5e:bb:5b:50:d7:f4:a5:52:fb:92:
8d:96:bc:04:59:13:49:80:61:58:95:71:f1:29:e5:
cd:c9:8b:ae:21:a2:23:af:00:65:67:b8:bb:70:69:
1d:14:90:99:38:9c:1e:32:38:cc:e0:ed:c5:25:52:
d0:11:8f:fc:e3:24:7c:fa:b4:8f:23:da:08:61:e6:
7a:8e:ee:8c:87:e8:1d:a2:f4:db:dc:d6:26:91:4c:
14:7c:bc:45:ae:99:5c:ad:6d:ce:0c:13:9f:0c:9b:
46:6a:b2:7f:0f:0e:4f:ce:c5:c3:cc:27:3c:50:dd:
b1:01:1e:b3:80:2d:1e:10:be:eb:b9:10:80:31:49:
37:89:8e:06:77:23:07:42:2a:33:01:eb:0e:12:85:
d1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:24:D9:D6:B2:5C:BB:C6:D7:89:F5:F3:E6:8F:2D:02:53:10:F6:6C
X509v3 Authority Key Identifier:
keyid:A3:9D:BF:68:78:AB:00:A4:52:F8:B0:7F:89:0D:3A:B3:48:37:62:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:c6:32:50:e4:52:28:a5:6a:c6:bc:55:7d:d8:9b:f3:33:55:
a3:3c:9f:cb:3d:b9:41:43:d0:f1:64:66:07:38:89:7c:49:7f:
f2:2f:01:bc:2b:5b:15:d3:50:a9:0b:ff:e6:2d:ff:c1:54:f3:
7f:d5:63:1d:f7:35:ea:23:89:33:9c:14:95:71:d6:ce:2a:f8:
9c:6e:65:6d:ba:67:b2:42:31:10:0c:a0:bd:42:47:57:93:20:
97:8d:65:66:9d:0c:86:66:af:51:80:ac:7e:89:3b:65:b2:33:
b6:2d:17:f2:84:a1:cc:fc:ae:56:8a:8b:18:c0:1a:8c:df:05:
f7:96:36:d6:e8:87:6b:40:ed:2a:eb:7f:02:fc:85:9e:0a:b2:
87:7b:73:29:7b:e4:6b:42:0d:60:78:d7:17:3e:49:a2:17:5f:
a0:d0:bd:17:a1:73:3c:b7:9f:5e:ab:b5:8a:80:16:de:31:af:
78:2b:e4:1f:3e:94:2f:2f:ff:23:44:5f:3c:ef:46:42:68:fd:
ad:48:2c:87:b5:e4:29:bf:14:f8:86:4e:db:f8:a2:d1:9e:14:
29:79:9c:47:0e:d3:3d:fe:ca:ba:1c:ae:b5:c7:b5:39:ae:28:
c1:ae:bd:d2:d7:1a:db:5e:81:93:c9:95:cc:06:99:5e:db:dd:
b9:5c:75:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:56:27 2026 by rpki-client