Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft
File: 0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft (raw, json)
Hash identifier: 0gaHDdNfnTTFtZfooQrdR5trZPCiLbHPAYrFARDpTH8=
Subject key identifier: 41:FC:46:4F:74:5F:1D:31:24:68:5A:B8:D2:E3:9A:F5:6E:4A:46:66
Authority key identifier: D0:04:07:65:E4:74:60:0E:1B:C7:62:2A:43:66:3D:D8:D9:FA:DC:87
Certificate issuer: /CN=d0040765e474600e1bc7622a43663dd8d9fadc87
Certificate serial: 01A025453B8FE2E7214216030990201F0BB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft
Manifest number: 030D
Signing time: Fri 21 Aug 2026 17:01:29 +0000
Manifest this update: Fri 21 Aug 2026 17:01:29 +0000
Manifest next update: Sat 22 Aug 2026 17:01:29 +0000
Files and hashes: 1: 0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.crl (hash: aPpy8Rha9pef/iAP2rYjKo9AOfkgUSeyw4byVCOpF2I=)
2: 1f3cl6fa8t-l-W7Ec_h4Hi3qeJo.roa (hash: aNyojc3jYn6lQHQNmAXrSGeiZeVM+znH218BSnC07+A=)
3: duEAUG-bxB2EvWz-YifRDzDM_48.roa (hash: Ah3/AgVili0L8xB1wP9XrE7QvUAGK2Wo6GmF16qZYm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:25:45:3b:8f:e2:e7:21:42:16:03:09:90:20:1f:0b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0040765e474600e1bc7622a43663dd8d9fadc87
Validity
Not Before: Aug 21 17:01:29 2026 GMT
Not After : Aug 22 17:01:29 2026 GMT
Subject: CN=41fc464f745f1d3124685ab8d2e39af56e4a4666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:43:78:89:ee:ef:55:30:5d:e8:2f:04:ae:00:
77:af:62:aa:0a:72:c2:6d:3d:d5:d2:5f:bb:a5:bb:
ce:3d:4a:5a:e1:6c:ca:d3:65:ab:2b:ca:7d:29:8b:
eb:c5:ef:14:71:73:67:18:f4:bc:49:bd:5a:fb:9c:
cf:f4:63:b9:22:40:3d:a2:9f:65:78:13:38:68:3f:
cd:6e:0b:84:ca:3a:d8:3d:47:54:1a:09:84:83:71:
ca:c5:d7:5a:3d:4b:ad:cb:80:a4:43:a5:1a:9a:b6:
92:4d:5e:d9:7d:c1:c5:35:d2:8c:2e:9f:d7:31:69:
d6:4b:76:04:b7:c8:90:7d:45:74:74:5d:c8:c0:ff:
f0:2c:e6:1d:f3:a4:1a:89:72:91:17:46:b9:9c:b7:
33:23:8a:09:a3:f9:a6:93:03:e4:81:e9:08:0a:61:
2d:6d:ef:70:54:47:ba:ed:f9:19:15:74:56:45:1b:
f0:e2:e7:6b:56:91:7c:84:5b:dc:8e:a9:88:00:e6:
bc:14:e6:ad:aa:03:7c:7d:5d:f6:47:f1:c0:ea:d8:
73:02:12:4a:35:07:74:1d:16:3b:38:af:bf:6b:8b:
0c:c9:ab:7b:3d:fc:5d:58:db:c4:39:48:7e:b6:51:
3f:6f:a3:70:45:85:ee:94:a5:32:08:c2:5d:a5:e3:
d6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:FC:46:4F:74:5F:1D:31:24:68:5A:B8:D2:E3:9A:F5:6E:4A:46:66
X509v3 Authority Key Identifier:
keyid:D0:04:07:65:E4:74:60:0E:1B:C7:62:2A:43:66:3D:D8:D9:FA:DC:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:44:c7:93:19:96:0a:c9:2b:a9:f2:73:81:4a:f5:ad:db:6b:
12:b4:67:59:62:35:c4:56:9a:5b:82:66:0c:e5:3a:33:e8:de:
2a:2d:e4:26:9e:ed:e9:91:9f:07:10:ca:86:65:a7:91:29:97:
a1:03:6a:9e:27:df:27:f4:f4:78:67:2e:f8:d8:f6:20:b3:46:
b7:97:30:6e:29:de:e2:97:76:a3:6a:7c:5c:9f:9b:85:3e:d6:
68:73:38:61:51:48:6b:1f:20:97:08:e0:68:df:d8:77:f9:97:
78:38:cc:87:f9:10:69:a5:cb:d1:77:23:78:99:27:2e:2a:e2:
7c:58:c3:f5:b1:f3:d8:b1:1a:44:14:91:bb:33:0a:cb:a8:54:
e3:0a:1f:7e:df:00:4a:07:4c:01:bd:aa:28:7d:84:58:bf:ed:
4a:7c:e2:95:8d:d5:5b:70:f7:ad:95:82:a0:9b:ec:d7:bf:fb:
bb:40:13:2a:b7:5c:10:32:55:f1:c0:a1:57:12:cc:cc:dd:37:
a0:9f:b5:19:5f:16:b9:6c:8b:8c:7a:97:b4:1b:59:21:54:09:
42:24:ca:f1:21:16:82:e7:5f:30:89:79:3a:78:75:1f:ca:40:
58:ad:8a:0c:fd:b5:ed:d3:aa:5f:d6:57:d4:ee:d9:e6:18:dd:
ee:e5:96:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 22:34:17 2026 by rpki-client