Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
File: o52_aHirAKRS-LB_iQ06s0g3Yns.mft (raw, json)
Hash identifier: Cnjd5wccsIhva6Kl5GvBDRIlyFjoW16DJhBu7fUJARo=
Subject key identifier: 4A:B3:C9:6A:29:08:01:D6:54:2C:EA:AE:54:DA:7A:F4:3C:E0:29:C0
Authority key identifier: A3:9D:BF:68:78:AB:00:A4:52:F8:B0:7F:89:0D:3A:B3:48:37:62:7B
Certificate issuer: /CN=a39dbf6878ab00a452f8b07f890d3ab34837627b
Certificate serial: 019FAA8825D9393D18EB8CD23FE5DCE20256
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
Manifest number: 0897
Signing time: Tue 28 Jul 2026 21:01:17 +0000
Manifest this update: Tue 28 Jul 2026 21:01:17 +0000
Manifest next update: Wed 29 Jul 2026 21:01:17 +0000
Files and hashes: 1: irICw9k54gxIc6MwAFiIdqi5VAM.roa (hash: cVexCvCqPHrx0mmIhLbiS62tGFKhVl04e+CAM0DmAGQ=)
2: o52_aHirAKRS-LB_iQ06s0g3Yns.crl (hash: n841Rd0C3EJosN9MU64Lfk4dT0Gez6ngalAZB4J9D74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:25:d9:39:3d:18:eb:8c:d2:3f:e5:dc:e2:02:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a39dbf6878ab00a452f8b07f890d3ab34837627b
Validity
Not Before: Jul 28 21:01:17 2026 GMT
Not After : Jul 29 21:01:17 2026 GMT
Subject: CN=4ab3c96a290801d6542ceaae54da7af43ce029c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cd:11:98:ec:82:6c:41:b2:e5:07:8b:f0:2c:
6f:83:14:2d:05:68:5e:e3:12:e2:eb:dd:69:5c:24:
67:e9:cb:cd:ab:e1:38:13:c8:41:63:34:01:7d:9c:
35:e2:d7:69:20:a1:79:8e:ff:d1:fb:45:28:8e:62:
df:37:4e:75:90:45:96:6e:e3:74:7a:0f:63:a2:98:
86:88:44:e2:73:74:a9:c0:3a:0b:05:79:b4:a7:97:
c8:3d:c3:fa:7c:c6:e1:9e:b9:4d:4f:16:34:ef:a6:
b9:00:93:94:3b:b4:71:b0:a9:20:12:84:b2:6a:ba:
35:4c:16:7b:27:fd:f1:f5:5f:1a:0d:b5:95:40:d7:
37:6f:cd:1d:e7:6d:fd:cd:1e:b3:03:15:0e:6a:c5:
87:6c:d4:35:99:de:f4:8a:38:c4:0c:ff:a8:d3:27:
c3:40:a7:2d:3b:50:ea:be:02:63:fe:fb:b4:c5:72:
62:19:f4:49:61:a4:1f:75:60:62:58:f0:50:9c:6a:
a8:9f:6b:41:47:4d:c9:6e:52:a9:0a:99:68:88:a8:
20:30:45:7e:dc:d1:a3:55:d6:f8:28:19:01:7b:88:
76:ce:16:eb:37:e3:31:5e:06:04:e5:2b:3d:ad:74:
bd:bd:24:c5:97:aa:51:b2:40:dc:1f:44:17:44:21:
7a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B3:C9:6A:29:08:01:D6:54:2C:EA:AE:54:DA:7A:F4:3C:E0:29:C0
X509v3 Authority Key Identifier:
keyid:A3:9D:BF:68:78:AB:00:A4:52:F8:B0:7F:89:0D:3A:B3:48:37:62:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:87:6d:e2:0f:be:cb:d8:8f:27:bb:d2:e6:01:be:c3:ea:90:
0c:16:e3:23:19:28:c9:47:c9:54:c9:ba:26:cb:f6:62:84:ac:
47:53:e5:38:e5:56:2e:fb:7a:71:5e:83:77:1a:0e:47:95:2d:
f0:7b:9f:19:98:3e:d9:95:f9:34:bf:e7:7b:a1:1b:db:10:5f:
e6:bd:40:01:b2:64:55:a1:97:29:b4:b6:76:8e:ba:60:80:1f:
d1:38:e5:0e:99:8d:09:59:61:2b:85:a3:fd:d8:b0:2c:7b:19:
3c:c9:d4:13:0e:b2:9a:86:a1:f5:52:a1:79:2e:1a:90:c9:bd:
34:24:aa:78:98:ee:38:eb:91:0a:ca:9a:0d:15:36:8a:82:27:
f5:cc:60:f9:b5:12:d5:cf:59:08:5f:48:53:27:c8:1b:92:35:
78:9e:cd:99:c5:a4:19:f8:1a:fd:6e:ba:f5:89:aa:2d:2e:c2:
86:1c:7e:56:90:78:a4:4c:47:d8:ee:a5:db:c0:28:21:20:4d:
08:7e:8e:0a:73:c0:8b:16:df:3f:de:ec:22:2b:28:14:62:6d:
5f:51:bb:0d:6a:d9:32:05:69:d9:c0:00:3c:78:2d:d3:77:7a:
90:d5:db:77:4e:34:6b:a2:c2:cb:f4:f2:07:ba:3a:4c:fc:b3:
3a:75:63:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qiCXZOT0Y64zSP+Xc4gJWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzOWRiZjY4NzhhYjAwYTQ1MmY4YjA3Zjg5MGQzYWIzNDgz
NzYyN2IwHhcNMjYwNzI4MjEwMTE3WhcNMjYwNzI5MjEwMTE3WjAzMTEwLwYDVQQD
Eyg0YWIzYzk2YTI5MDgwMWQ2NTQyY2VhYWU1NGRhN2FmNDNjZTAyOWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo80RmOyCbEGy5QeL8CxvgxQtBWhe
4xLi691pXCRn6cvNq+E4E8hBYzQBfZw14tdpIKF5jv/R+0UojmLfN051kEWWbuN0
eg9jopiGiETic3SpwDoLBXm0p5fIPcP6fMbhnrlNTxY076a5AJOUO7RxsKkgEoSy
aro1TBZ7J/3x9V8aDbWVQNc3b80d5239zR6zAxUOasWHbNQ1md70ijjEDP+o0yfD
QKctO1DqvgJj/vu0xXJiGfRJYaQfdWBiWPBQnGqon2tBR03JblKpCploiKggMEV+
3NGjVdb4KBkBe4h2zhbrN+MxXgYE5Ss9rXS9vSTFl6pRskDcH0QXRCF6fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqzyWopCAHWVCzqrlTaevQ84CnAMB8GA1UdIwQY
MBaAFKOdv2h4qwCkUviwf4kNOrNIN2J7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzUyX2FIaXJBS1JTLUxCX2lRMDZzMGczWW5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yMjY5NmQtZTcyZi00Y2ZkLWJhZTAt
YWQ0NDIzNzY1ODkyLzEvbzUyX2FIaXJBS1JTLUxCX2lRMDZzMGczWW5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8yMjY5NmQtZTcyZi00Y2ZkLWJhZTAtYWQ0NDIzNzY1ODky
LzEvbzUyX2FIaXJBS1JTLUxCX2lRMDZzMGczWW5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHIdt4g++
y9iPJ7vS5gG+w+qQDBbjIxkoyUfJVMm6Jsv2YoSsR1PlOOVWLvt6cV6DdxoOR5Ut
8HufGZg+2ZX5NL/ne6Eb2xBf5r1AAbJkVaGXKbS2do66YIAf0TjlDpmNCVlhK4Wj
/diwLHsZPMnUEw6ymoah9VKheS4akMm9NCSqeJjuOOuRCsqaDRU2ioIn9cxg+bUS
1c9ZCF9IUyfIG5I1eJ7NmcWkGfga/W669YmqLS7Chhx+VpB4pExH2O6l28AoISBN
CH6OCnPAixbfP97sIisoFGJtX1G7DWrZMgVp2cAAPHgt03d6kNXbd040a6LCy/Ty
B7o6TPyzOnVj5A==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:01:17 2026 by rpki-client