Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft
File: 0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft (raw, json)
Hash identifier: AlGrfpbUY7ExJBcxB+NlELeL08fsSUELL3tu/SFW4zw=
Subject key identifier: A8:05:06:EB:37:66:3A:08:10:E9:BC:64:8A:48:81:84:51:43:B8:35
Authority key identifier: D0:04:07:65:E4:74:60:0E:1B:C7:62:2A:43:66:3D:D8:D9:FA:DC:87
Certificate issuer: /CN=d0040765e474600e1bc7622a43663dd8d9fadc87
Certificate serial: 019E51EC0DF081886DF1814EA0CC99D727D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft
Manifest number: 021B
Signing time: Fri 22 May 2026 23:01:24 +0000
Manifest this update: Fri 22 May 2026 23:01:24 +0000
Manifest next update: Sat 23 May 2026 23:01:24 +0000
Files and hashes: 1: 0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.crl (hash: ABUlUhJvzoxHfPgGmtH78As/TxzaBaPB4RAF0021A28=)
2: 1f3cl6fa8t-l-W7Ec_h4Hi3qeJo.roa (hash: aNyojc3jYn6lQHQNmAXrSGeiZeVM+znH218BSnC07+A=)
3: duEAUG-bxB2EvWz-YifRDzDM_48.roa (hash: Ah3/AgVili0L8xB1wP9XrE7QvUAGK2Wo6GmF16qZYm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:51:ec:0d:f0:81:88:6d:f1:81:4e:a0:cc:99:d7:27:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0040765e474600e1bc7622a43663dd8d9fadc87
Validity
Not Before: May 22 23:01:24 2026 GMT
Not After : May 23 23:01:24 2026 GMT
Subject: CN=a80506eb37663a0810e9bc648a4881845143b835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:06:17:c8:97:b5:2c:56:b7:33:63:b0:b2:09:
e1:f7:a6:a6:85:a3:1a:fd:4a:86:94:5b:61:ba:1a:
d6:e8:d1:4f:a1:ef:cd:3d:24:e9:92:37:c0:a4:04:
1a:38:b7:d1:8a:40:c5:0b:fa:d6:09:2d:32:ff:6a:
4c:47:89:46:81:4e:8a:3d:38:37:36:80:54:6a:1c:
c1:7c:60:70:9c:71:e0:f8:2e:af:f5:9a:0d:38:9b:
71:eb:3a:24:af:0b:7e:58:c9:8d:52:7f:ba:5b:dc:
57:73:c6:07:2c:05:d1:21:b0:46:2f:be:c8:37:85:
7e:af:89:c1:ee:d0:2a:fc:73:8e:1c:90:83:e0:61:
bd:eb:8f:b1:68:a5:b3:f8:b8:35:e5:7f:3e:c0:8b:
c6:40:ab:b3:85:74:30:6b:99:c0:3f:93:47:06:7d:
b1:68:db:d9:03:d5:80:89:e8:85:ba:cb:97:3f:d4:
01:80:d2:2a:c4:86:09:82:03:f4:b3:3c:75:5e:c3:
cc:43:d9:e1:78:3c:21:88:db:6b:ce:64:2d:e2:96:
30:4a:44:cd:45:f1:c0:c2:f2:f7:c2:64:ec:f7:a8:
3a:39:ba:6b:7a:92:80:26:04:43:84:7a:d2:ee:62:
60:43:a7:0b:8e:fa:d7:f5:6a:5f:fd:79:67:ec:07:
4d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:05:06:EB:37:66:3A:08:10:E9:BC:64:8A:48:81:84:51:43:B8:35
X509v3 Authority Key Identifier:
keyid:D0:04:07:65:E4:74:60:0E:1B:C7:62:2A:43:66:3D:D8:D9:FA:DC:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:19:3d:ea:22:bf:f0:22:fc:8d:98:11:7e:7d:c6:4d:d0:d0:
5d:09:ee:f5:3b:c8:6f:b4:fa:15:69:a2:21:6b:c3:47:0e:f8:
74:54:0f:58:0d:bd:d3:0a:4e:d3:04:ef:29:8e:3c:0e:6b:cb:
d0:36:83:8a:04:87:c1:7b:b2:6e:9e:60:fc:26:fe:c1:bc:2d:
c7:55:0d:eb:c0:44:25:ce:17:91:03:bd:22:42:07:71:db:a8:
f0:04:b4:f8:38:05:e6:cf:8d:14:5b:7c:83:ba:97:c6:0a:2c:
75:00:ce:94:fd:b9:51:80:24:c4:0c:9f:58:4f:fc:6b:20:e5:
ee:27:19:a5:0f:6d:b0:0d:1e:08:01:43:b5:41:16:1c:ba:78:
ff:77:a4:b0:1f:d0:bb:ca:9d:af:6a:af:6a:98:b6:61:35:bf:
5d:87:0f:27:01:d8:73:51:8e:df:31:3f:bd:9f:a0:2e:5f:cb:
0b:ac:93:9b:75:14:40:16:09:8b:8b:b2:92:9c:24:38:ef:d0:
e5:31:08:80:18:f5:6b:cb:46:0a:b8:36:e7:0f:34:52:91:73:
89:23:89:42:fb:4a:42:fb:d6:9b:99:d9:ae:29:5a:df:bf:4b:
7f:ea:ed:d7:0f:78:82:39:c4:2d:fa:ff:d5:1d:5c:93:18:3e:
38:5c:ea:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ5R7A3wgYht8YFOoMyZ1yfVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMDQwNzY1ZTQ3NDYwMGUxYmM3NjIyYTQzNjYzZGQ4ZDlm
YWRjODcwHhcNMjYwNTIyMjMwMTI0WhcNMjYwNTIzMjMwMTI0WjAzMTEwLwYDVQQD
EyhhODA1MDZlYjM3NjYzYTA4MTBlOWJjNjQ4YTQ4ODE4NDUxNDNiODM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgYXyJe1LFa3M2Owsgnh96amhaMa
/UqGlFthuhrW6NFPoe/NPSTpkjfApAQaOLfRikDFC/rWCS0y/2pMR4lGgU6KPTg3
NoBUahzBfGBwnHHg+C6v9ZoNOJtx6zokrwt+WMmNUn+6W9xXc8YHLAXRIbBGL77I
N4V+r4nB7tAq/HOOHJCD4GG964+xaKWz+Lg15X8+wIvGQKuzhXQwa5nAP5NHBn2x
aNvZA9WAieiFusuXP9QBgNIqxIYJggP0szx1XsPMQ9nheDwhiNtrzmQt4pYwSkTN
RfHAwvL3wmTs96g6ObprepKAJgRDhHrS7mJgQ6cLjvrX9Wpf/Xln7AdNPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKgFBus3ZjoIEOm8ZIpIgYRRQ7g1MB8GA1UdIwQY
MBaAFNAEB2XkdGAOG8diKkNmPdjZ+tyHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEFRSFplUjBZQTRieDJJcVEyWTkyTm42M0ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8yMmZjZGUtNzIwYi00ZjYzLTljMDIt
NDdkMzA4NzEzN2Y0LzEvMEFRSFplUjBZQTRieDJJcVEyWTkyTm42M0ljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8yMmZjZGUtNzIwYi00ZjYzLTljMDItNDdkMzA4NzEzN2Y0
LzEvMEFRSFplUjBZQTRieDJJcVEyWTkyTm42M0ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPBk96iK/
8CL8jZgRfn3GTdDQXQnu9TvIb7T6FWmiIWvDRw74dFQPWA290wpO0wTvKY48DmvL
0DaDigSHwXuybp5g/Cb+wbwtx1UN68BEJc4XkQO9IkIHcduo8AS0+DgF5s+NFFt8
g7qXxgosdQDOlP25UYAkxAyfWE/8ayDl7icZpQ9tsA0eCAFDtUEWHLp4/3eksB/Q
u8qdr2qvapi2YTW/XYcPJwHYc1GO3zE/vZ+gLl/LC6yTm3UUQBYJi4uykpwkOO/Q
5TEIgBj1a8tGCrg25w80UpFziSOJQvtKQvvWm5nZrila379Lf+rt1w94gjnELfr/
1R1ckxg+OFzqdA==
-----END CERTIFICATE-----
Generated at Sat May 23 03:48:23 2026 by rpki-client