Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft
File: 0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft (raw, json)
Hash identifier: G42cvgxme2zUs8gQZrkdwQDjwXfptWs3r3gs2S03sqs=
Subject key identifier: 6E:DD:94:BD:94:E5:D7:1A:5B:75:98:1B:A6:B1:5F:42:75:43:4F:DA
Authority key identifier: D0:04:07:65:E4:74:60:0E:1B:C7:62:2A:43:66:3D:D8:D9:FA:DC:87
Certificate issuer: /CN=d0040765e474600e1bc7622a43663dd8d9fadc87
Certificate serial: 01A1163CCE56D03C70C1D2CABE6C92AB010B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft
Manifest number: 038A
Signing time: Wed 07 Oct 2026 12:00:45 +0000
Manifest this update: Wed 07 Oct 2026 12:00:45 +0000
Manifest next update: Thu 08 Oct 2026 12:00:45 +0000
Files and hashes: 1: 0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.crl (hash: p7uyXT6vG4tm1lye79sDMKc9tcvgqVE3S0Og+qJUjjs=)
2: 1BN5YxYU2FN0z0zIN5knPBNU-sE.roa (hash: /UMLJoDe51xs233AtpFCV7C5DNwQokBQAmX64DATeYg=)
3: 46RDuG1pvrqBc39KF8oYWIgp4lA.roa (hash: 4t7kIFajFCtpRi2rnb6EwxdMNFu5yPbw9zeuqi/S+VA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:16:3c:ce:56:d0:3c:70:c1:d2:ca:be:6c:92:ab:01:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0040765e474600e1bc7622a43663dd8d9fadc87
Validity
Not Before: Oct 7 12:00:45 2026 GMT
Not After : Oct 8 12:00:45 2026 GMT
Subject: CN=6edd94bd94e5d71a5b75981ba6b15f4275434fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:53:fc:94:cc:63:00:dd:2b:3f:d1:79:fc:89:
6f:32:d8:24:fd:b6:f5:92:e9:16:d8:8d:12:1b:00:
d2:2d:ff:0b:3d:96:59:04:42:1f:07:35:7c:4f:7d:
84:16:cc:23:43:c0:21:d3:f4:6d:bc:f9:7e:71:16:
4d:f7:35:03:fb:6f:43:56:b7:bb:7d:07:00:d7:e4:
e5:1f:33:88:9b:5e:77:13:59:4b:97:2c:d7:58:73:
01:05:9e:97:2e:d5:31:5e:dc:5d:72:e8:bf:b6:bb:
71:81:bf:86:90:62:97:29:c4:2d:c1:2d:00:2e:08:
6b:68:95:bc:d6:d9:32:e7:ef:dd:16:0a:5d:03:4e:
4e:fe:ac:e8:0d:c9:82:1e:ee:ac:da:46:3e:01:dc:
cf:17:34:bd:d1:b6:63:5a:50:67:2d:1d:51:d7:ce:
37:39:cc:09:85:3f:d1:0b:e3:30:01:69:11:9c:87:
64:b1:5a:37:19:de:81:c0:03:87:44:be:ec:cf:56:
84:ad:54:c0:d5:84:5f:10:37:03:85:9e:ec:62:ef:
09:cf:c7:d9:19:06:50:80:c9:20:61:13:0b:ff:13:
e5:aa:51:bd:6b:d3:40:1a:03:74:a9:ac:b5:b6:a9:
89:8f:fe:35:df:f0:bf:0b:f0:25:77:6b:bb:c6:a2:
25:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:DD:94:BD:94:E5:D7:1A:5B:75:98:1B:A6:B1:5F:42:75:43:4F:DA
X509v3 Authority Key Identifier:
keyid:D0:04:07:65:E4:74:60:0E:1B:C7:62:2A:43:66:3D:D8:D9:FA:DC:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:68:bc:a3:72:c2:8a:69:81:95:74:ab:8c:6e:8d:5c:c4:20:
18:79:20:eb:c1:51:e8:5a:14:17:5a:5c:45:24:6f:e5:bb:6b:
99:4e:97:a1:51:52:47:53:e9:d9:5d:f7:ef:87:6d:37:be:d7:
f5:5b:aa:45:38:a2:3b:91:ae:78:78:7d:17:ad:45:3d:29:1a:
9e:a6:f8:54:20:67:79:6f:3d:2e:8d:fd:ae:75:21:73:30:fb:
f4:ae:64:e4:28:c7:89:f9:f2:ab:4c:fb:4b:dc:89:f9:61:7b:
bd:ed:05:ca:fd:35:f9:4d:9f:8a:6f:f1:c3:d3:6f:d9:1d:3f:
2a:f1:a1:64:77:65:4a:4f:95:08:5f:3c:c0:91:ff:7e:aa:3e:
03:04:3c:19:c6:09:b9:94:52:0b:3c:db:a4:c1:29:42:57:c4:
1e:0b:92:49:15:c6:ce:38:cd:5e:13:56:22:f5:3b:22:53:a1:
6d:3c:9b:45:4d:19:2c:09:f2:10:b7:bc:0d:e6:2a:7f:ea:47:
82:b8:5d:c8:97:b3:c7:01:0c:57:82:6e:ad:e7:97:d2:48:ad:
06:9a:a3:ff:3f:d5:b4:88:1a:12:f3:26:85:1d:cb:d7:50:11:
26:af:79:38:0b:19:de:27:c9:45:35:4a:78:53:b9:d5:77:0f:
26:86:4a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 23:02:01 2026 by rpki-client