Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft
File: 0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft (raw, json)
Hash identifier: Lopp6PQmf3V0NtvhwgExb3m2XYDxVS5Y6N8ew+XtiLQ=
Subject key identifier: 31:D7:97:02:A4:CE:A7:6A:84:27:3D:F6:EC:23:B1:D3:F5:78:32:0D
Authority key identifier: D0:04:07:65:E4:74:60:0E:1B:C7:62:2A:43:66:3D:D8:D9:FA:DC:87
Certificate issuer: /CN=d0040765e474600e1bc7622a43663dd8d9fadc87
Certificate serial: 019FA9AC06F2706B785114E535963BAABD59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft
Manifest number: 02CD
Signing time: Tue 28 Jul 2026 17:00:51 +0000
Manifest this update: Tue 28 Jul 2026 17:00:51 +0000
Manifest next update: Wed 29 Jul 2026 17:00:51 +0000
Files and hashes: 1: 0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.crl (hash: EmmESbDbGy4VYdxcfMXr7H3Do/DDO3n0zkaIvcg2xvk=)
2: 1f3cl6fa8t-l-W7Ec_h4Hi3qeJo.roa (hash: aNyojc3jYn6lQHQNmAXrSGeiZeVM+znH218BSnC07+A=)
3: duEAUG-bxB2EvWz-YifRDzDM_48.roa (hash: Ah3/AgVili0L8xB1wP9XrE7QvUAGK2Wo6GmF16qZYm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:06:f2:70:6b:78:51:14:e5:35:96:3b:aa:bd:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0040765e474600e1bc7622a43663dd8d9fadc87
Validity
Not Before: Jul 28 17:00:51 2026 GMT
Not After : Jul 29 17:00:51 2026 GMT
Subject: CN=31d79702a4cea76a84273df6ec23b1d3f578320d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cf:72:e4:7a:25:0d:20:1a:dd:b0:39:17:a6:
e4:1d:0f:14:a9:57:09:90:17:76:a1:f4:ff:9d:8f:
db:40:ed:79:91:1e:55:6c:3b:23:f2:f6:0a:ce:13:
34:cd:fc:b6:9f:29:f0:d1:f8:fa:47:82:17:07:cf:
e6:0a:c2:92:7d:1a:ef:39:b2:2f:30:8b:ee:62:b9:
dd:c1:28:bb:41:b9:34:a8:a3:e9:b2:13:71:dd:0a:
a9:dc:4d:ac:9d:bf:b7:6e:eb:4f:90:b5:67:49:14:
53:e0:2d:e8:39:80:69:03:c1:cb:e8:30:eb:58:42:
53:43:d1:1b:0b:f1:46:c9:e7:8a:f3:62:81:b9:f7:
f8:53:a9:95:2e:f3:ae:7d:71:23:0b:66:ea:f3:cf:
61:49:42:9c:29:1d:c9:e7:c4:8e:58:69:57:49:ed:
34:0d:3b:fe:9c:ea:2f:07:56:e9:7b:bb:17:2f:7f:
f0:ae:ea:7b:5a:b7:8c:22:fb:57:7e:c4:6f:c5:09:
6f:5d:c2:7a:d9:a5:a2:26:58:4f:48:8f:7e:7d:4a:
0c:6b:8a:f5:8b:95:32:a6:8e:4d:07:7f:a3:36:3f:
93:63:e3:2a:cb:9a:33:5f:e1:46:87:c9:28:e6:82:
c9:f2:bd:86:f1:57:01:97:5f:0d:4f:80:bc:6d:8f:
9c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D7:97:02:A4:CE:A7:6A:84:27:3D:F6:EC:23:B1:D3:F5:78:32:0D
X509v3 Authority Key Identifier:
keyid:D0:04:07:65:E4:74:60:0E:1B:C7:62:2A:43:66:3D:D8:D9:FA:DC:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:0b:b3:7c:8f:dd:84:b4:11:bd:e8:d8:be:b2:66:63:84:19:
cb:1f:f6:0a:24:d0:04:2f:22:fa:78:68:3b:0c:03:46:77:7e:
7f:75:51:fd:f6:74:63:b9:83:ff:64:bb:25:69:7a:c4:5c:f3:
6d:86:8d:54:e0:df:bb:5b:b4:c3:44:56:04:23:b2:47:db:76:
6b:d3:2c:26:2a:9a:29:f2:19:0f:94:50:6a:6a:e2:5f:14:85:
8c:a1:82:19:bf:21:a9:ce:00:e9:92:37:06:ff:74:e8:7f:7a:
62:c0:fb:b6:98:7c:17:e1:8a:fc:72:bc:b3:aa:4f:a0:ca:92:
b7:aa:a9:30:1b:d9:3e:af:50:34:1e:60:c8:34:c3:52:d8:dc:
89:5a:82:03:6e:f9:f8:12:8d:99:55:b0:4d:12:09:dd:3a:20:
b5:16:e7:d1:a4:eb:af:f0:7b:c4:02:13:e4:d7:b2:e7:89:ab:
7c:73:46:47:6f:9f:54:d5:dd:7b:c9:ac:9e:ff:c6:5f:87:0d:
4e:67:c0:8f:70:d0:e3:04:c5:1b:11:a7:5f:b7:eb:50:04:ed:
a4:fc:8d:af:0e:85:99:77:08:3d:52:f2:99:bc:87:57:80:6c:
49:6d:00:2c:4e:0c:da:5b:aa:c7:a3:14:7f:36:52:d5:f3:09:
ce:4d:e3:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:44:50 2026 by rpki-client