Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft
File: 0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft (raw, json)
Hash identifier: TweqiB8iT2On2zhGjIlnxlb44RwSRQRDyVIxFsRLFls=
Subject key identifier: F6:60:9B:E8:A4:10:EF:CF:78:74:74:D2:BC:B3:76:BC:41:8D:ED:06
Authority key identifier: D0:04:07:65:E4:74:60:0E:1B:C7:62:2A:43:66:3D:D8:D9:FA:DC:87
Certificate issuer: /CN=d0040765e474600e1bc7622a43663dd8d9fadc87
Certificate serial: 019D9698574B600C89DCC80D17CD1E4880D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft
Manifest number: 01BA
Signing time: Thu 16 Apr 2026 14:00:59 +0000
Manifest this update: Thu 16 Apr 2026 14:00:59 +0000
Manifest next update: Fri 17 Apr 2026 14:00:59 +0000
Files and hashes: 1: 0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.crl (hash: swH4NkK6T9iNWiWp9VMiooUwztJAL2l3cDcMs7xSqKo=)
2: 1f3cl6fa8t-l-W7Ec_h4Hi3qeJo.roa (hash: aNyojc3jYn6lQHQNmAXrSGeiZeVM+znH218BSnC07+A=)
3: duEAUG-bxB2EvWz-YifRDzDM_48.roa (hash: Ah3/AgVili0L8xB1wP9XrE7QvUAGK2Wo6GmF16qZYm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:96:98:57:4b:60:0c:89:dc:c8:0d:17:cd:1e:48:80:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0040765e474600e1bc7622a43663dd8d9fadc87
Validity
Not Before: Apr 16 14:00:59 2026 GMT
Not After : Apr 17 14:00:59 2026 GMT
Subject: CN=f6609be8a410efcf787474d2bcb376bc418ded06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0b:77:57:0e:cd:36:cf:ae:1c:a7:c5:74:00:
0e:ad:c4:dc:fa:87:de:20:dd:c3:fd:fc:a2:b1:54:
d8:ad:3b:6f:7e:02:f3:23:90:08:1b:1c:7d:d6:34:
be:9d:d6:cb:e0:8f:44:77:61:fe:df:53:3f:23:45:
e0:32:8e:4f:b6:a0:ff:99:b5:c1:27:e0:42:56:98:
c6:97:f0:97:e5:3b:a4:fc:18:2e:1c:4a:66:8b:17:
c2:86:74:55:0f:c8:28:3c:3f:17:f2:cf:2c:e9:3e:
1a:68:81:57:ea:4f:db:3f:53:45:39:14:71:f1:ab:
aa:5e:db:31:53:1b:22:59:4c:b2:18:cd:24:45:40:
00:8b:d3:47:a8:88:84:b1:95:47:d1:b7:cc:71:a0:
0e:d0:7d:82:85:e4:49:63:4e:8d:fe:e7:fc:26:f8:
58:5c:37:ce:0d:b9:83:9f:0f:a9:50:16:12:f1:cc:
ef:c5:f0:79:88:f2:b6:af:70:57:db:c1:04:74:9b:
92:fb:f8:ad:eb:e1:43:19:21:47:de:10:31:8c:54:
39:92:e4:39:d8:e0:cf:fe:0a:b8:68:9d:5d:9a:78:
1e:ec:31:b5:b9:d3:1a:81:4e:c5:58:0a:9f:49:9c:
81:41:cb:7a:66:45:10:e7:ff:cc:96:59:a7:83:7c:
28:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:60:9B:E8:A4:10:EF:CF:78:74:74:D2:BC:B3:76:BC:41:8D:ED:06
X509v3 Authority Key Identifier:
keyid:D0:04:07:65:E4:74:60:0E:1B:C7:62:2A:43:66:3D:D8:D9:FA:DC:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:38:5c:fe:b8:d7:25:62:2d:b6:06:50:e2:9f:3f:8c:86:3f:
50:48:b9:76:97:58:dc:45:bf:17:2a:85:fc:50:e1:1d:43:4a:
35:b3:03:a6:44:52:27:05:16:24:46:77:de:21:36:3c:83:b4:
6f:12:1b:a8:32:73:32:22:ed:d1:b9:29:2a:69:1b:a7:fc:d6:
ec:46:2a:5e:71:6f:86:b3:e0:ba:51:f7:65:d8:15:ee:d7:12:
cc:7e:27:c3:fa:02:06:6f:4c:bf:db:ed:75:4d:fb:05:25:08:
0f:1e:28:ec:f0:99:74:b9:46:0d:82:60:c8:45:7a:a6:88:b0:
46:7f:c0:06:53:e6:52:4d:d6:1b:71:fc:73:96:fd:4d:9f:b2:
8a:58:53:32:ab:28:6e:0c:7f:87:b1:b9:fc:56:e3:e2:7c:28:
cc:ad:d0:96:76:96:79:d9:30:fb:d6:58:f5:d8:1e:ba:6a:ea:
3f:3f:1e:94:69:e3:28:a6:4b:e7:80:8a:4c:59:d7:81:25:00:
37:cf:d0:6c:29:1e:83:a2:bd:f0:80:f9:36:5f:4d:8e:c8:ed:
d9:ea:d5:67:1e:5a:c7:f3:26:da:45:58:54:74:ca:3b:6d:be:
51:d9:38:0a:96:be:3b:d6:69:3d:e7:78:a8:96:19:0a:7b:3e:
14:d0:b7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 00:03:23 2026 by rpki-client