Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft
File: 0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft (raw, json)
Hash identifier: Nv/kCz4m5Zddb6+8UK+nBqEaPmIAYkLUkgQAkrNRgBo=
Subject key identifier: B1:5F:19:20:1C:3D:DD:97:F0:5F:EC:6F:3A:02:17:74:26:5D:31:3C
Authority key identifier: D0:04:07:65:E4:74:60:0E:1B:C7:62:2A:43:66:3D:D8:D9:FA:DC:87
Certificate issuer: /CN=d0040765e474600e1bc7622a43663dd8d9fadc87
Certificate serial: 019CAAFD8999A94F157473A614225A4AF4F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft
Manifest number: 0140
Signing time: Sun 01 Mar 2026 20:01:08 +0000
Manifest this update: Sun 01 Mar 2026 20:01:08 +0000
Manifest next update: Mon 02 Mar 2026 20:01:08 +0000
Files and hashes: 1: 0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.crl (hash: n82TqCFe7tVpk3+dOGzbfbqZovt1I50DM49Ro/teXR0=)
2: 1f3cl6fa8t-l-W7Ec_h4Hi3qeJo.roa (hash: aNyojc3jYn6lQHQNmAXrSGeiZeVM+znH218BSnC07+A=)
3: duEAUG-bxB2EvWz-YifRDzDM_48.roa (hash: Ah3/AgVili0L8xB1wP9XrE7QvUAGK2Wo6GmF16qZYm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:89:99:a9:4f:15:74:73:a6:14:22:5a:4a:f4:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0040765e474600e1bc7622a43663dd8d9fadc87
Validity
Not Before: Mar 1 20:01:08 2026 GMT
Not After : Mar 2 20:01:08 2026 GMT
Subject: CN=b15f19201c3ddd97f05fec6f3a021774265d313c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:24:48:d9:c2:b0:ac:e7:97:ce:56:87:97:b1:
de:64:b5:33:b6:b0:7b:a0:e1:4d:a6:ad:3c:9d:6e:
70:18:85:9c:b4:45:a1:c0:38:f8:9f:ac:68:d5:55:
b0:8e:97:37:e1:50:8b:07:92:87:0e:d5:1e:f2:a6:
d0:d1:7c:f8:7c:48:1c:87:2d:1d:79:5b:f7:0d:88:
2e:cc:72:ef:1e:7f:be:54:91:71:8d:19:6a:7d:f7:
1b:15:ae:e3:91:8e:c0:ea:4f:32:db:86:53:2a:a1:
a0:0d:0b:c1:e0:b2:c8:01:b1:78:91:bf:3a:16:1e:
99:0b:00:25:61:be:88:f9:8d:16:b9:65:0b:1a:d6:
8b:8b:e9:d6:e9:f4:88:23:96:cf:f3:1e:28:ac:e1:
35:88:48:df:44:07:3c:64:0c:4f:25:34:67:0e:6a:
ae:67:ae:1b:b8:28:42:76:4d:e4:4c:94:72:fc:72:
12:66:b3:ef:ec:c5:50:82:f0:8a:ae:8a:40:e2:e3:
d8:5b:43:b7:09:77:4f:6e:5b:4f:9e:61:c1:89:43:
92:ac:f3:3f:1c:14:3d:b7:d9:36:58:70:9e:64:b6:
84:f5:7e:07:f1:48:35:59:fd:db:e1:a4:c8:df:8d:
1b:4b:11:ba:6c:e5:cb:2b:4a:c2:8b:34:13:23:3c:
c4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:5F:19:20:1C:3D:DD:97:F0:5F:EC:6F:3A:02:17:74:26:5D:31:3C
X509v3 Authority Key Identifier:
keyid:D0:04:07:65:E4:74:60:0E:1B:C7:62:2A:43:66:3D:D8:D9:FA:DC:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:3d:51:0a:cb:16:3a:85:9f:69:11:3c:df:f7:81:a2:bb:46:
65:d8:7c:1d:c2:d4:7d:df:c8:2e:d6:48:6c:75:3f:dd:3f:89:
88:b1:f8:c6:f6:10:38:a1:3d:55:46:f8:4a:27:38:60:fd:6d:
24:05:39:a3:db:ea:c4:c6:c9:3a:45:86:8b:0a:e0:da:8b:bc:
1e:25:1c:e9:bd:5a:35:f1:8a:69:8d:fd:04:ca:82:58:cd:44:
8c:d3:8f:98:d5:1e:1a:ff:b6:11:0a:01:90:7a:f6:21:3a:65:
7a:57:77:a6:99:14:1b:b4:c4:0e:07:b2:2e:37:9d:ce:c9:79:
da:5b:3e:e2:4d:e8:82:9e:d8:0b:92:30:3c:e4:a4:7d:fc:18:
9c:da:82:67:a6:2f:3d:86:66:c2:7f:20:a7:b4:0b:f3:1c:7b:
0e:b2:41:19:ee:2c:c5:1d:6e:4c:e6:e5:4a:5d:66:8a:a4:c4:
d4:b6:48:0b:37:f2:f7:33:99:f6:20:44:de:1d:91:3f:92:d2:
da:a0:89:37:91:8d:e8:f8:2a:e2:e2:66:41:d6:83:da:79:18:
41:d1:5a:cc:b4:f1:b1:50:cb:03:5a:ad:15:59:37:a6:82:1e:
e8:d3:77:1e:4b:b6:26:90:a4:01:1c:58:b0:1e:74:59:c7:96:
f2:0f:76:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:39:43 2026 by rpki-client