Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
File: o52_aHirAKRS-LB_iQ06s0g3Yns.mft (raw, json)
Hash identifier: /OHl3+M5DKGH4OPwP47i+TJjRHONyFsZEprLgir7xOs=
Subject key identifier: 44:F9:73:8C:5C:02:85:30:2B:47:CC:FC:52:28:E9:BC:86:A4:4E:FF
Authority key identifier: A3:9D:BF:68:78:AB:00:A4:52:F8:B0:7F:89:0D:3A:B3:48:37:62:7B
Certificate issuer: /CN=a39dbf6878ab00a452f8b07f890d3ab34837627b
Certificate serial: 019D38D3758131C78E6B177FFC343799C1CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
Manifest number: 0753
Signing time: Sun 29 Mar 2026 09:01:15 +0000
Manifest this update: Sun 29 Mar 2026 09:01:15 +0000
Manifest next update: Mon 30 Mar 2026 09:01:15 +0000
Files and hashes: 1: irICw9k54gxIc6MwAFiIdqi5VAM.roa (hash: cVexCvCqPHrx0mmIhLbiS62tGFKhVl04e+CAM0DmAGQ=)
2: o52_aHirAKRS-LB_iQ06s0g3Yns.crl (hash: /q5wb6bxGqgLOo1mB6FbkgSKbMhLa5xkU6pks5o+XUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:75:81:31:c7:8e:6b:17:7f:fc:34:37:99:c1:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a39dbf6878ab00a452f8b07f890d3ab34837627b
Validity
Not Before: Mar 29 09:01:15 2026 GMT
Not After : Mar 30 09:01:15 2026 GMT
Subject: CN=44f9738c5c0285302b47ccfc5228e9bc86a44eff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7f:ea:a3:9f:75:73:01:d3:fd:2e:ba:12:b5:
7c:5b:d1:c6:4a:d3:91:4e:55:47:ca:8f:dd:c4:71:
5c:f5:77:5d:16:6c:05:70:7f:fa:6d:f3:50:2d:6f:
35:a3:bf:6e:99:97:91:5c:f6:a7:ef:2b:2d:b6:5b:
e3:71:b6:33:80:e4:47:3d:6d:2c:74:a9:01:55:86:
7a:52:86:b6:82:bc:84:02:07:fc:55:33:ff:c1:dc:
81:ec:e7:3b:59:93:4d:2a:ce:62:41:0c:f8:6f:56:
c5:41:70:26:41:90:5d:c1:ae:0f:11:c0:3e:39:fb:
29:6f:8d:ca:9e:f4:18:34:71:c2:cf:5c:c8:7b:76:
a8:af:48:5e:26:65:94:58:54:0d:37:89:9f:be:f8:
25:84:09:24:a2:a2:f6:db:bc:25:f5:d7:42:08:70:
30:16:f2:e5:95:93:70:3e:46:af:64:04:06:d5:b1:
a4:7a:08:c3:4a:96:dd:69:66:0f:a5:ae:08:81:88:
c4:c3:58:60:e1:4d:66:a9:99:07:f3:88:27:f0:6e:
0b:26:fa:75:3c:c3:a5:d3:70:cc:34:05:61:ee:a6:
90:7f:c0:25:e4:76:f1:99:13:3a:f7:91:6f:fa:e9:
c4:65:b7:ba:90:58:c8:2c:bd:6d:c0:51:26:49:58:
8f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F9:73:8C:5C:02:85:30:2B:47:CC:FC:52:28:E9:BC:86:A4:4E:FF
X509v3 Authority Key Identifier:
keyid:A3:9D:BF:68:78:AB:00:A4:52:F8:B0:7F:89:0D:3A:B3:48:37:62:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:7d:3d:25:59:2f:26:3a:44:bd:e4:1f:3c:83:e7:f8:54:39:
6f:aa:7d:66:e0:fe:4c:dd:85:e3:05:a2:c0:62:cb:76:79:ac:
7e:cf:52:7b:0d:74:20:5f:af:5e:85:13:40:7f:1c:f1:05:5a:
1b:72:78:de:5e:41:14:8e:8a:e9:6b:7e:1e:ae:a0:a8:7e:66:
5a:72:a2:66:3c:5f:74:2c:c6:75:48:22:09:fb:0a:a3:5f:be:
34:52:f3:23:cb:ba:a6:a9:de:b5:69:8c:50:72:03:ea:58:50:
c0:e0:73:90:4b:e6:ad:63:66:90:77:3c:ea:ec:3f:da:47:b1:
a1:e7:71:96:34:e6:fa:7a:15:43:b6:0c:98:e2:3e:4a:19:4d:
13:dd:ba:b6:80:44:ab:46:a6:05:0e:51:11:b7:ac:26:2f:38:
33:f6:d1:a7:32:2a:56:e5:f2:9f:e7:80:a5:8f:ef:d3:fd:6e:
17:43:23:7c:fe:12:dc:7e:33:5c:80:49:c5:60:23:3d:81:07:
35:96:79:49:6f:a9:d4:28:1f:03:39:4e:28:19:9c:15:23:67:
44:12:be:39:72:ff:f2:af:89:27:1c:6f:fe:0b:98:09:4d:3c:
68:ba:3b:a5:74:37:39:42:11:ce:c8:73:16:78:88:77:a1:c5:
4b:2a:53:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:43 2026 by rpki-client