Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft
File: 0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft (raw, json)
Hash identifier: DH9/9rcY29Yf8BuiYfOcS65kYlzATJhknrieICOIeIk=
Subject key identifier: 51:D4:96:9D:EC:3F:F5:2C:23:78:EC:0C:B1:AF:C4:31:04:F3:B4:51
Authority key identifier: D0:04:07:65:E4:74:60:0E:1B:C7:62:2A:43:66:3D:D8:D9:FA:DC:87
Certificate issuer: /CN=d0040765e474600e1bc7622a43663dd8d9fadc87
Certificate serial: 019EBFFF52188EA86CDDE924B14490BAB835
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft
Manifest number: 0254
Signing time: Sat 13 Jun 2026 08:00:41 +0000
Manifest this update: Sat 13 Jun 2026 08:00:41 +0000
Manifest next update: Sun 14 Jun 2026 08:00:41 +0000
Files and hashes: 1: 0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.crl (hash: 9GH9cQnXPRmxqy+dLhvtOvGhwsNdPG07KfhmnFRdVVY=)
2: 1f3cl6fa8t-l-W7Ec_h4Hi3qeJo.roa (hash: aNyojc3jYn6lQHQNmAXrSGeiZeVM+znH218BSnC07+A=)
3: duEAUG-bxB2EvWz-YifRDzDM_48.roa (hash: Ah3/AgVili0L8xB1wP9XrE7QvUAGK2Wo6GmF16qZYm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:ff:52:18:8e:a8:6c:dd:e9:24:b1:44:90:ba:b8:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0040765e474600e1bc7622a43663dd8d9fadc87
Validity
Not Before: Jun 13 08:00:41 2026 GMT
Not After : Jun 14 08:00:41 2026 GMT
Subject: CN=51d4969dec3ff52c2378ec0cb1afc43104f3b451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4d:ba:2b:de:11:a2:4d:af:5d:ea:ff:15:f0:
92:9f:49:ff:20:e2:44:38:09:15:fa:7d:05:73:fb:
2b:75:8f:56:ed:b9:d4:a7:a7:9b:ea:ef:09:6a:82:
f3:c3:97:d7:48:7a:07:1a:f1:99:a8:a1:83:e0:77:
99:ad:cc:53:75:c3:ef:f5:75:b7:8b:b8:aa:48:f3:
fb:d4:0a:60:74:0b:93:46:d9:6d:b6:f5:d2:f1:6f:
13:c6:5b:ae:ff:9b:c0:b6:a0:19:bf:24:ba:78:e6:
c9:00:8d:ef:1b:d8:c0:f0:f3:00:57:5b:03:bc:3a:
e8:07:5a:7e:c8:10:f2:ac:29:ae:e1:64:a6:26:d7:
98:5d:16:5a:db:a1:03:56:d0:ff:1a:82:4c:f9:1b:
97:5e:d1:f9:b8:81:b5:da:dc:d4:fc:93:6e:63:c1:
3b:75:1f:42:4f:37:0f:a1:a2:f2:c7:6c:7f:57:ae:
c1:d3:dd:ce:00:9b:ef:85:32:77:48:49:fd:71:ba:
ff:0b:79:7d:7f:16:15:cb:5f:88:c8:a5:8a:51:a5:
af:65:6e:6c:4e:4d:d3:14:e6:6a:33:c7:4f:02:5e:
2f:b1:aa:bf:c5:64:12:d5:8a:1d:3a:cb:3e:70:00:
e4:fe:25:6c:1d:1c:e5:b5:90:d3:48:0a:4a:e9:f4:
5e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D4:96:9D:EC:3F:F5:2C:23:78:EC:0C:B1:AF:C4:31:04:F3:B4:51
X509v3 Authority Key Identifier:
keyid:D0:04:07:65:E4:74:60:0E:1B:C7:62:2A:43:66:3D:D8:D9:FA:DC:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:35:5e:be:1f:11:f5:95:fe:fd:ee:03:41:60:f0:e9:19:57:
a8:ce:24:08:dd:7b:5b:44:79:aa:ea:25:9b:e3:32:19:3f:d5:
cd:d9:58:f7:55:bd:39:d1:fa:e7:e4:7b:06:31:25:d8:bc:b7:
08:8c:00:88:5c:64:ec:e1:0f:4d:32:47:50:ad:50:70:3b:3c:
c9:c4:33:2f:6d:9f:a4:fd:66:ae:6d:d0:b5:79:cf:2a:1e:c6:
c4:bb:ab:43:91:a0:26:95:ca:54:6a:09:74:c2:24:f5:ff:a8:
a3:ec:aa:7d:85:b4:a4:dc:71:71:03:bd:9f:ae:83:49:ed:06:
04:84:55:44:89:98:f4:3b:79:f2:f9:95:8e:c1:08:24:9a:7b:
cf:72:be:64:0c:7b:a8:67:ce:bd:08:29:3c:7a:0d:3f:c5:a9:
3a:2b:24:54:7b:6d:2d:83:a9:64:4c:b2:2a:62:49:07:c9:0d:
9f:ac:b5:5a:03:f1:4a:7b:b0:67:8b:65:65:3b:55:1b:45:ef:
2c:6f:cc:9c:6e:68:05:8f:d3:55:59:79:69:2d:6f:1f:61:74:
71:d1:41:b6:c6:31:c8:07:f3:3b:dc:78:55:9c:16:61:82:30:
f9:1c:cd:c8:a5:d3:88:f2:79:28:52:dd:76:44:c5:fa:2b:87:
a7:f8:42:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:57:14 2026 by rpki-client