Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft
File: 0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft (raw, json)
Hash identifier: KxXxjqrrqfOYEGolFwdR31p7WrCrQqIFPxRdjtYNw4w=
Subject key identifier: B7:9D:20:A5:EC:E5:52:09:97:4C:59:FF:48:81:38:A0:0A:FA:AC:EC
Authority key identifier: D0:04:07:65:E4:74:60:0E:1B:C7:62:2A:43:66:3D:D8:D9:FA:DC:87
Certificate issuer: /CN=d0040765e474600e1bc7622a43663dd8d9fadc87
Certificate serial: 019D37F765B91F3C74AAD357AB8E2E721285
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft
Manifest number: 0189
Signing time: Sun 29 Mar 2026 05:00:53 +0000
Manifest this update: Sun 29 Mar 2026 05:00:53 +0000
Manifest next update: Mon 30 Mar 2026 05:00:53 +0000
Files and hashes: 1: 0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.crl (hash: OxFNQ3geOXsLQ7JUiNww9B2OPGKMMGeHRjo65nJN2Zc=)
2: 1f3cl6fa8t-l-W7Ec_h4Hi3qeJo.roa (hash: aNyojc3jYn6lQHQNmAXrSGeiZeVM+znH218BSnC07+A=)
3: duEAUG-bxB2EvWz-YifRDzDM_48.roa (hash: Ah3/AgVili0L8xB1wP9XrE7QvUAGK2Wo6GmF16qZYm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:65:b9:1f:3c:74:aa:d3:57:ab:8e:2e:72:12:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0040765e474600e1bc7622a43663dd8d9fadc87
Validity
Not Before: Mar 29 05:00:53 2026 GMT
Not After : Mar 30 05:00:53 2026 GMT
Subject: CN=b79d20a5ece55209974c59ff488138a00afaacec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:17:d0:06:5a:70:5e:a0:fd:db:46:b3:13:cf:
8e:ab:32:be:71:f6:1d:10:9b:84:90:da:0f:94:56:
be:3c:eb:da:b7:02:94:89:f6:5f:ca:fd:e9:01:37:
8d:b2:f6:6a:fe:9f:24:70:a1:83:d9:a2:b3:00:a6:
59:9c:e7:4c:ac:f9:e5:a3:d9:4e:a0:18:40:25:1c:
7f:2f:f4:20:ed:92:30:50:fe:8e:48:54:1c:88:3d:
e8:94:a6:ae:eb:a6:50:fe:3f:3f:db:56:ec:d3:49:
1d:bd:fd:cc:c9:d5:98:62:c9:6e:fb:e6:eb:8e:bb:
8b:8e:7b:49:37:64:84:7b:b2:38:55:4b:f7:54:e9:
07:5a:f3:7c:0b:08:e1:80:d7:3d:57:d9:20:4e:62:
b6:8e:65:f6:77:a3:52:a5:c9:8c:d0:49:52:b4:5a:
6e:07:90:36:f9:b8:d2:64:c9:51:5e:db:8f:fd:61:
c5:c6:84:ef:28:4b:19:12:7c:84:4a:be:55:7b:45:
41:ee:ca:c3:98:58:99:92:9f:34:3e:9b:1d:57:e2:
a5:03:d5:a3:b7:27:22:ca:2b:92:eb:3b:e0:26:5f:
58:6a:ef:33:2c:c4:3e:66:24:c1:8d:6e:e8:77:9d:
ce:7b:49:31:51:02:6a:7c:73:dd:2c:33:3e:30:51:
28:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:9D:20:A5:EC:E5:52:09:97:4C:59:FF:48:81:38:A0:0A:FA:AC:EC
X509v3 Authority Key Identifier:
keyid:D0:04:07:65:E4:74:60:0E:1B:C7:62:2A:43:66:3D:D8:D9:FA:DC:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:20:a1:f8:14:fb:56:d6:00:c3:fb:96:86:ed:f9:c7:78:5b:
6b:9a:c5:2a:19:3e:8b:14:2a:52:e2:3a:3e:6d:a0:ef:eb:26:
40:46:02:1d:eb:42:59:e3:d4:2b:f9:63:c0:ad:2f:c5:f1:08:
c0:86:0a:62:64:0c:a1:b3:af:bb:80:bd:c1:7f:2a:ea:1e:a0:
a0:40:3b:c8:26:51:f1:53:18:41:bf:a1:4c:5b:cc:8a:4e:9c:
a1:26:78:e2:bf:2c:df:73:c4:16:7b:44:b9:a0:97:2c:7c:8a:
3b:56:5e:e6:2b:55:db:b5:58:3b:fd:f2:06:49:a0:34:ad:ae:
29:96:01:e6:79:c3:47:8d:83:25:dd:5c:fb:df:62:50:33:85:
80:45:4a:d6:55:76:1b:cd:1e:af:44:50:1b:ca:48:70:02:bf:
3c:89:2e:51:00:34:4f:4a:e4:66:db:4d:25:64:3e:8d:47:f7:
55:5c:d8:ca:fe:f7:41:8c:e2:06:91:78:f0:47:22:a8:4f:8f:
fe:29:73:b0:54:b2:e0:88:2d:80:b4:2f:39:e4:9c:fb:35:05:
8b:a0:b7:e9:30:3d:fc:d4:89:1d:5a:ef:b3:55:6a:65:0a:e7:
db:32:cd:f5:a8:74:9b:d2:d2:5f:e6:33:11:a2:62:73:b6:81:
ef:33:a2:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0392W5Hzx0qtNXq44uchKFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMDQwNzY1ZTQ3NDYwMGUxYmM3NjIyYTQzNjYzZGQ4ZDlm
YWRjODcwHhcNMjYwMzI5MDUwMDUzWhcNMjYwMzMwMDUwMDUzWjAzMTEwLwYDVQQD
EyhiNzlkMjBhNWVjZTU1MjA5OTc0YzU5ZmY0ODgxMzhhMDBhZmFhY2VjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6RfQBlpwXqD920azE8+OqzK+cfYd
EJuEkNoPlFa+POvatwKUifZfyv3pATeNsvZq/p8kcKGD2aKzAKZZnOdMrPnlo9lO
oBhAJRx/L/Qg7ZIwUP6OSFQciD3olKau66ZQ/j8/21bs00kdvf3MydWYYslu++br
jruLjntJN2SEe7I4VUv3VOkHWvN8CwjhgNc9V9kgTmK2jmX2d6NSpcmM0ElStFpu
B5A2+bjSZMlRXtuP/WHFxoTvKEsZEnyESr5Ve0VB7srDmFiZkp80PpsdV+KlA9Wj
tyciyiuS6zvgJl9Yau8zLMQ+ZiTBjW7od53Oe0kxUQJqfHPdLDM+MFEo2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLedIKXs5VIJl0xZ/0iBOKAK+qzsMB8GA1UdIwQY
MBaAFNAEB2XkdGAOG8diKkNmPdjZ+tyHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEFRSFplUjBZQTRieDJJcVEyWTkyTm42M0ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8yMmZjZGUtNzIwYi00ZjYzLTljMDIt
NDdkMzA4NzEzN2Y0LzEvMEFRSFplUjBZQTRieDJJcVEyWTkyTm42M0ljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8yMmZjZGUtNzIwYi00ZjYzLTljMDItNDdkMzA4NzEzN2Y0
LzEvMEFRSFplUjBZQTRieDJJcVEyWTkyTm42M0ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAriCh+BT7
VtYAw/uWhu35x3hba5rFKhk+ixQqUuI6Pm2g7+smQEYCHetCWePUK/ljwK0vxfEI
wIYKYmQMobOvu4C9wX8q6h6goEA7yCZR8VMYQb+hTFvMik6coSZ44r8s33PEFntE
uaCXLHyKO1Ze5itV27VYO/3yBkmgNK2uKZYB5nnDR42DJd1c+99iUDOFgEVK1lV2
G80er0RQG8pIcAK/PIkuUQA0T0rkZttNJWQ+jUf3VVzYyv73QYziBpF48EciqE+P
/ilzsFSy4IgtgLQvOeSc+zUFi6C36TA9/NSJHVrvs1VqZQrn2zLN9ah0m9LSX+Yz
EaJic7aB7zOijg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:34 2026 by rpki-client