Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
File: o52_aHirAKRS-LB_iQ06s0g3Yns.mft (raw, json)
Hash identifier: CRSLxyu+yvI7vcDGu7O/UNETNxEapSRSJWGUVDv6Org=
Subject key identifier: 39:3A:AD:C7:7E:EF:AD:3E:0A:1E:79:46:0F:CD:70:88:C2:86:4A:A6
Authority key identifier: A3:9D:BF:68:78:AB:00:A4:52:F8:B0:7F:89:0D:3A:B3:48:37:62:7B
Certificate issuer: /CN=a39dbf6878ab00a452f8b07f890d3ab34837627b
Certificate serial: 019F916DC5A23CE8C1B2AEBFAAF9237970F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
Manifest number: 088A
Signing time: Fri 24 Jul 2026 00:01:58 +0000
Manifest this update: Fri 24 Jul 2026 00:01:58 +0000
Manifest next update: Sat 25 Jul 2026 00:01:58 +0000
Files and hashes: 1: irICw9k54gxIc6MwAFiIdqi5VAM.roa (hash: cVexCvCqPHrx0mmIhLbiS62tGFKhVl04e+CAM0DmAGQ=)
2: o52_aHirAKRS-LB_iQ06s0g3Yns.crl (hash: 4Zg5WxD4xf3SJHRXLeFGae9438yIfYjlHxpFIwPCUwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:c5:a2:3c:e8:c1:b2:ae:bf:aa:f9:23:79:70:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a39dbf6878ab00a452f8b07f890d3ab34837627b
Validity
Not Before: Jul 24 00:01:58 2026 GMT
Not After : Jul 25 00:01:58 2026 GMT
Subject: CN=393aadc77eefad3e0a1e79460fcd7088c2864aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:be:24:b5:27:e1:83:51:ec:e7:e9:bc:b0:1b:
70:0e:ae:ca:26:f6:f9:0f:7e:43:fc:72:f1:5f:3b:
34:af:1d:b8:82:d2:4f:1d:4c:33:d5:b6:91:56:c1:
66:8a:7b:76:c5:c9:dd:0f:62:64:1c:02:44:13:34:
3e:04:79:3b:7f:5b:eb:46:ae:d0:ce:f9:82:88:9e:
1c:03:e2:81:e9:ce:ca:eb:57:40:1c:a5:f7:a8:23:
a4:70:0d:3b:cd:2d:01:90:53:a8:7e:aa:23:07:25:
bb:ab:e8:d3:70:97:5d:92:db:52:64:4b:ac:65:57:
3d:df:4e:54:e7:c6:63:4a:a1:49:33:39:16:9d:a5:
bd:8f:27:c8:bf:05:d9:21:1d:8f:9f:4f:78:10:61:
00:f4:e9:41:6f:b8:ec:5f:f0:d4:f2:d7:a0:9b:89:
96:b1:e1:44:93:3c:02:fa:d8:54:f1:be:2c:24:c4:
47:d8:50:24:bd:1b:b5:c7:93:14:7c:d2:9c:3e:3b:
3e:5a:2f:cb:1d:12:4f:8f:15:f7:aa:fc:3d:ea:fd:
d3:b2:10:38:94:25:57:b8:3a:03:2d:83:f1:3c:f7:
de:16:7e:8e:1a:ab:b3:5f:0a:e9:d6:ac:69:50:41:
56:de:fe:47:a8:ae:cb:2f:83:7e:14:60:04:42:f8:
f5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:3A:AD:C7:7E:EF:AD:3E:0A:1E:79:46:0F:CD:70:88:C2:86:4A:A6
X509v3 Authority Key Identifier:
keyid:A3:9D:BF:68:78:AB:00:A4:52:F8:B0:7F:89:0D:3A:B3:48:37:62:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:da:0f:98:0f:25:b1:9e:bc:a9:82:8c:75:eb:41:ed:e3:03:
6f:af:37:50:f2:a3:45:35:21:37:ff:07:37:f9:76:4a:4c:82:
59:6d:f2:98:c9:bc:21:94:a7:6c:d1:f3:9e:64:92:e6:65:b2:
1c:9b:b8:5b:79:c3:fa:0d:ce:c4:cd:e9:a6:8f:2b:b4:ab:95:
60:04:51:f8:88:1e:27:fe:5f:b1:2b:87:8f:38:aa:18:d1:69:
f6:86:56:8e:47:6f:ff:40:a3:ee:67:98:27:e1:81:12:88:15:
d5:41:30:e9:f5:22:d5:05:44:cf:3e:68:b7:e3:ac:af:13:87:
be:37:04:09:77:06:f6:9e:d0:9c:b8:ea:88:7c:d0:e2:5d:35:
1b:74:8e:45:fa:f0:9d:b1:e7:06:a5:c9:d7:39:1d:f8:4a:40:
93:e0:17:96:62:16:38:de:62:a4:d9:04:6c:38:5a:ab:d2:1e:
ce:47:79:1a:2f:cc:b2:27:a3:19:8c:3d:23:83:48:2a:7e:85:
97:65:ab:4e:e5:d2:8f:84:d4:b0:17:cd:a4:fb:b2:05:be:7e:
c9:9c:df:00:67:2c:61:a5:af:2a:bc:eb:6c:4a:ea:94:f8:c7:
7d:76:50:40:06:78:20:64:6f:72:7f:48:c3:f4:56:d8:07:f2:
3a:47:80:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:34:57 2026 by rpki-client