Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
File: o52_aHirAKRS-LB_iQ06s0g3Yns.mft (raw, json)
Hash identifier: BeE8/gisvc3PwtiNfifMoVQzMVeMveUihjKKTCiqkII=
Subject key identifier: 1B:AE:F3:43:FD:BB:07:15:B9:9A:CC:10:27:61:CE:B7:C7:D3:69:82
Authority key identifier: A3:9D:BF:68:78:AB:00:A4:52:F8:B0:7F:89:0D:3A:B3:48:37:62:7B
Certificate issuer: /CN=a39dbf6878ab00a452f8b07f890d3ab34837627b
Certificate serial: 019FA0DFFFA90AB26487DDCC1F9D30D5576E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
Manifest number: 0892
Signing time: Mon 27 Jul 2026 00:01:02 +0000
Manifest this update: Mon 27 Jul 2026 00:01:02 +0000
Manifest next update: Tue 28 Jul 2026 00:01:02 +0000
Files and hashes: 1: irICw9k54gxIc6MwAFiIdqi5VAM.roa (hash: cVexCvCqPHrx0mmIhLbiS62tGFKhVl04e+CAM0DmAGQ=)
2: o52_aHirAKRS-LB_iQ06s0g3Yns.crl (hash: aX1pL2lRSPb9PIO1hd9CmnHU4i/ddfXEft+2rbpgE0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:df:ff:a9:0a:b2:64:87:dd:cc:1f:9d:30:d5:57:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a39dbf6878ab00a452f8b07f890d3ab34837627b
Validity
Not Before: Jul 27 00:01:02 2026 GMT
Not After : Jul 28 00:01:02 2026 GMT
Subject: CN=1baef343fdbb0715b99acc102761ceb7c7d36982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:76:d1:f3:70:52:61:e3:e8:82:d1:f1:12:3a:
77:76:90:9b:4b:42:40:9d:29:05:ea:c7:7f:bd:bb:
02:48:1b:90:ca:7c:c4:81:1c:bb:7e:56:22:e7:2c:
57:3b:5d:8a:b4:6b:34:5a:ff:f2:82:11:35:4a:b7:
ad:98:b4:78:61:56:04:5b:d6:00:32:1f:2e:6b:64:
09:65:1d:a7:7d:83:18:12:b6:80:6f:32:3f:76:03:
6b:ce:f5:f2:46:d0:1c:c7:bd:79:76:17:58:cc:bf:
e8:a2:e3:9b:31:20:e6:df:e5:c1:9b:ba:a0:a8:c6:
9d:29:13:8b:e9:f1:2c:99:b6:2a:7e:95:36:7f:e8:
b6:bd:a9:37:20:6c:02:c9:87:62:61:64:59:4d:dc:
01:e7:3a:37:e3:60:ec:f1:e3:43:f8:38:a3:2a:ab:
db:35:80:b9:60:47:77:f5:5f:6f:ae:28:c0:44:4f:
6f:d4:53:e9:ff:f4:74:db:95:b4:32:8d:36:63:3a:
58:b6:ee:52:bf:cf:49:eb:5f:cf:de:9c:d6:ce:de:
d7:2b:20:89:bf:a2:a4:38:5d:e6:47:df:31:44:6f:
19:53:75:b8:a1:d2:33:4f:9a:78:d4:ad:d9:ad:5a:
4f:1a:f1:9c:b3:38:8b:09:8a:74:80:95:b4:66:69:
87:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:AE:F3:43:FD:BB:07:15:B9:9A:CC:10:27:61:CE:B7:C7:D3:69:82
X509v3 Authority Key Identifier:
keyid:A3:9D:BF:68:78:AB:00:A4:52:F8:B0:7F:89:0D:3A:B3:48:37:62:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:40:29:80:90:56:0d:af:e3:96:90:72:13:e1:b7:27:d4:3d:
80:ee:ab:7b:b4:b6:d4:bd:52:56:91:49:4f:59:3b:e5:1a:75:
af:d8:55:3d:05:fa:4d:a6:6d:8f:d1:bd:0e:73:c7:4d:6b:28:
d4:d6:ec:6c:ac:17:b4:d8:ab:33:5d:5d:7f:2c:f0:78:d1:b0:
b5:29:72:36:cc:9e:29:04:0f:08:74:d8:7a:de:a4:ff:18:bb:
83:ec:19:db:81:fc:e4:10:28:fb:90:8c:38:47:bc:4e:ed:96:
85:75:8c:97:82:7f:2b:3d:eb:e8:98:3b:ca:74:ac:b2:80:c0:
c4:00:be:56:8a:63:97:a9:fe:85:f3:d6:75:e7:31:af:aa:49:
1b:21:9f:3d:41:04:7b:c2:a8:f1:fc:62:23:ab:ce:6c:1f:b7:
9b:fc:3a:1a:bc:58:65:4d:7a:4c:ec:2d:75:16:65:08:51:24:
dc:2f:ba:1d:42:64:28:c0:43:89:a6:00:51:63:45:ef:18:b0:
dc:4f:77:45:f3:c8:44:23:3f:ff:b5:ac:81:6c:c9:32:db:f2:
d1:af:e9:31:a5:fa:bd:34:24:b2:b3:f6:99:be:e5:d4:64:4c:
37:34:ca:68:e4:e5:69:d7:28:de:5b:87:9d:3c:ca:e1:75:1b:
94:b1:17:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 01:03:08 2026 by rpki-client