Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
File: o52_aHirAKRS-LB_iQ06s0g3Yns.mft (raw, json)
Hash identifier: REC6kBpuyijJcMfRFF1YXP3rBxLnHFeMPnYSUNgYT8k=
Subject key identifier: 37:8F:9C:F0:DB:E8:0C:59:9F:A0:61:4F:FF:BD:07:40:23:7E:63:11
Authority key identifier: A3:9D:BF:68:78:AB:00:A4:52:F8:B0:7F:89:0D:3A:B3:48:37:62:7B
Certificate issuer: /CN=a39dbf6878ab00a452f8b07f890d3ab34837627b
Certificate serial: 01A1DC8231EFD64295847A9FE455A083AFE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
Manifest number: 09BA
Signing time: Sun 15 Nov 2026 00:01:22 +0000
Manifest this update: Sun 15 Nov 2026 00:01:22 +0000
Manifest next update: Mon 16 Nov 2026 00:01:22 +0000
Files and hashes: 1: irICw9k54gxIc6MwAFiIdqi5VAM.roa (hash: cVexCvCqPHrx0mmIhLbiS62tGFKhVl04e+CAM0DmAGQ=)
2: o52_aHirAKRS-LB_iQ06s0g3Yns.crl (hash: olJSOS4wpnKC9tDAtP+aOfSYT09SCbQUjc1tBX5vkxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 00:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:82:31:ef:d6:42:95:84:7a:9f:e4:55:a0:83:af:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a39dbf6878ab00a452f8b07f890d3ab34837627b
Validity
Not Before: Nov 15 00:01:22 2026 GMT
Not After : Nov 16 00:01:22 2026 GMT
Subject: CN=378f9cf0dbe80c599fa0614fffbd0740237e6311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3f:09:5a:bc:74:86:3e:da:2d:c1:fb:76:de:
39:dc:04:45:e0:4f:9d:e3:4f:ad:d4:7a:b2:1a:65:
aa:8b:69:79:1f:20:d1:b1:fe:a8:bd:8b:9e:eb:40:
a5:a6:8f:d6:e4:7e:65:6b:c5:34:70:8d:6f:1f:fa:
90:ce:fe:3f:2d:b7:45:d7:de:d8:f1:a3:69:49:fd:
bb:0e:22:56:ae:c6:46:4a:03:05:90:0e:c4:73:98:
48:ca:37:d4:08:52:15:8b:2e:64:db:f4:51:81:1b:
af:88:30:1d:dd:e5:28:bd:52:86:09:a5:4d:d2:ef:
02:39:30:31:d4:a1:fc:d1:51:1e:ee:ef:b9:e2:9b:
20:37:60:75:ce:47:22:60:95:25:19:36:92:18:5f:
2f:7e:e9:7f:47:ba:39:b6:6c:39:f8:00:93:2a:76:
42:4f:96:0c:95:0f:08:21:c6:ca:2e:7c:a4:1d:4d:
10:3d:c2:ae:77:e0:07:a4:49:3b:26:c5:b1:e0:0c:
c6:2a:83:48:27:73:ec:de:bc:3f:68:99:9a:06:85:
66:e6:9d:7b:66:ff:28:d6:5c:8a:a8:18:8b:f2:4b:
a5:6a:6b:6f:fa:da:e6:9d:2e:af:89:91:75:c6:b6:
07:63:81:12:b3:c8:3e:1c:7d:03:ca:9d:3d:3d:de:
c9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:8F:9C:F0:DB:E8:0C:59:9F:A0:61:4F:FF:BD:07:40:23:7E:63:11
X509v3 Authority Key Identifier:
keyid:A3:9D:BF:68:78:AB:00:A4:52:F8:B0:7F:89:0D:3A:B3:48:37:62:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:7e:bc:78:d8:a3:14:31:0b:f1:9d:0a:69:54:3e:44:e4:ea:
c7:a6:74:0a:66:d6:22:f0:ea:a6:cb:82:e6:5c:ee:97:98:dc:
c0:8d:3e:fa:53:ab:fd:b9:60:f6:01:16:0c:cb:e2:1e:84:88:
c0:2b:f6:6c:e0:c8:13:c8:4e:f9:9c:29:22:6a:b1:8f:99:e0:
e9:ae:2e:9b:e9:07:e1:8c:39:e7:91:84:72:39:a7:81:3d:cd:
78:18:93:bc:3a:5d:e5:55:7e:90:7a:e1:d0:e3:5e:7c:a0:f8:
8c:44:09:96:46:fb:72:2c:65:cd:7d:7c:bd:fa:bc:8a:fd:20:
7b:47:7f:e6:f4:dd:92:51:7a:fb:5a:33:a6:6b:5c:ae:7a:b2:
48:08:b1:d3:bc:71:f6:e6:34:b7:4b:02:d0:42:e9:88:7e:e1:
a6:73:a0:bb:26:e9:3f:2e:e5:e6:a7:b7:7f:06:b0:77:31:de:
09:f1:58:48:21:bc:99:31:6e:ab:96:cd:72:4c:93:4d:47:33:
e2:f1:f6:97:d3:0c:7a:23:1d:55:8d:98:c4:3e:ee:57:34:55:
97:bc:2d:ba:cd:cd:62:8e:de:24:b2:6c:63:35:75:f5:46:e0:
a1:49:96:45:6b:fd:4c:32:a9:63:41:72:36:d7:02:6f:26:f6:
4e:40:cc:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHcgjHv1kKVhHqf5FWgg6/kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzOWRiZjY4NzhhYjAwYTQ1MmY4YjA3Zjg5MGQzYWIzNDgz
NzYyN2IwHhcNMjYxMTE1MDAwMTIyWhcNMjYxMTE2MDAwMTIyWjAzMTEwLwYDVQQD
EygzNzhmOWNmMGRiZTgwYzU5OWZhMDYxNGZmZmJkMDc0MDIzN2U2MzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyz8JWrx0hj7aLcH7dt453ARF4E+d
40+t1HqyGmWqi2l5HyDRsf6ovYue60Clpo/W5H5la8U0cI1vH/qQzv4/LbdF197Y
8aNpSf27DiJWrsZGSgMFkA7Ec5hIyjfUCFIViy5k2/RRgRuviDAd3eUovVKGCaVN
0u8COTAx1KH80VEe7u+54psgN2B1zkciYJUlGTaSGF8vful/R7o5tmw5+ACTKnZC
T5YMlQ8IIcbKLnykHU0QPcKud+AHpEk7JsWx4AzGKoNIJ3Ps3rw/aJmaBoVm5p17
Zv8o1lyKqBiL8kulamtv+trmnS6viZF1xrYHY4ESs8g+HH0Dyp09Pd7JFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDePnPDb6AxZn6BhT/+9B0AjfmMRMB8GA1UdIwQY
MBaAFKOdv2h4qwCkUviwf4kNOrNIN2J7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzUyX2FIaXJBS1JTLUxCX2lRMDZzMGczWW5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yMjY5NmQtZTcyZi00Y2ZkLWJhZTAt
YWQ0NDIzNzY1ODkyLzEvbzUyX2FIaXJBS1JTLUxCX2lRMDZzMGczWW5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8yMjY5NmQtZTcyZi00Y2ZkLWJhZTAtYWQ0NDIzNzY1ODky
LzEvbzUyX2FIaXJBS1JTLUxCX2lRMDZzMGczWW5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPn68eNij
FDEL8Z0KaVQ+ROTqx6Z0CmbWIvDqpsuC5lzul5jcwI0++lOr/blg9gEWDMviHoSI
wCv2bODIE8hO+ZwpImqxj5ng6a4um+kH4Yw555GEcjmngT3NeBiTvDpd5VV+kHrh
0ONefKD4jEQJlkb7cixlzX18vfq8iv0ge0d/5vTdklF6+1ozpmtcrnqySAix07xx
9uY0t0sC0ELpiH7hpnOguybpPy7l5qe3fwawdzHeCfFYSCG8mTFuq5bNckyTTUcz
4vH2l9MMeiMdVY2YxD7uVzRVl7wtus3NYo7eJLJsYzV19UbgoUmWRWv9TDKpY0Fy
NtcCbyb2TkDM3w==
-----END CERTIFICATE-----
Generated at Sun Nov 15 09:51:12 2026 by rpki-client