Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft
File: hPLOccb_zodWDVZe5czaMeAbnBU.mft (raw, json)
Hash identifier: dQm1Ss1kN9w/ssH30o6YMEPkSrlvPCYA0agOFYf3a/c=
Subject key identifier: 5C:B5:2E:E0:A3:FF:A4:B0:5A:EE:3B:E2:AC:5E:D9:04:3D:D4:E6:97
Authority key identifier: 84:F2:CE:71:C6:FF:CE:87:56:0D:56:5E:E5:CC:DA:31:E0:1B:9C:15
Certificate issuer: /CN=84f2ce71c6ffce87560d565ee5ccda31e01b9c15
Certificate serial: 019CAC7DBE81BA67FBE06954A4AFFC600DB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPLOccb_zodWDVZe5czaMeAbnBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft
Manifest number: 1373
Signing time: Mon 02 Mar 2026 03:00:47 +0000
Manifest this update: Mon 02 Mar 2026 03:00:47 +0000
Manifest next update: Tue 03 Mar 2026 03:00:47 +0000
Files and hashes: 1: Vs7BQ_LZ7tnxolhpvx8dREz5TnU.roa (hash: DTkKxG2OCn2HUjqRtTQ53+a8mSrOuYj/XPGf19kdObY=)
2: hPLOccb_zodWDVZe5czaMeAbnBU.crl (hash: FlO1O+hm87Je+vhNEjnmM6OoNmkvr5yRO9ydAeYkKCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hPLOccb_zodWDVZe5czaMeAbnBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:be:81:ba:67:fb:e0:69:54:a4:af:fc:60:0d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f2ce71c6ffce87560d565ee5ccda31e01b9c15
Validity
Not Before: Mar 2 03:00:47 2026 GMT
Not After : Mar 3 03:00:47 2026 GMT
Subject: CN=5cb52ee0a3ffa4b05aee3be2ac5ed9043dd4e697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:29:8d:76:d8:35:a3:29:ba:f0:48:50:8b:b6:
24:6c:4a:88:80:fe:a7:e3:ee:28:f7:4a:b0:09:1f:
44:9d:60:4d:12:f7:97:3b:8f:75:a3:da:05:5e:e4:
0c:fd:58:2e:77:e6:90:b5:f8:53:00:cc:44:36:69:
e5:75:f5:2f:09:83:b9:a0:13:ff:2c:fe:f4:07:52:
d0:66:9c:8e:fb:01:4d:04:93:5f:51:03:f8:7c:09:
a5:45:4f:fd:fc:6e:2f:52:12:57:95:6a:ca:e0:4e:
79:90:c3:e4:db:ed:5c:79:72:49:72:d0:33:a9:bf:
e0:c5:69:3f:ec:9a:67:08:0a:0e:ef:99:ad:22:e2:
d8:c6:91:ba:1d:2e:19:92:35:c2:dc:2b:cb:42:87:
bc:27:67:7c:d8:0b:2a:08:82:92:65:7b:08:3c:ab:
29:d3:1a:12:59:05:b6:8e:4c:cd:7c:1d:aa:74:7c:
4e:66:2b:e0:d7:10:3b:bb:f9:a3:4a:e9:1a:6c:26:
77:0b:80:8b:32:0a:fc:02:60:2b:70:5b:fb:77:a5:
5a:aa:b2:d6:c3:7e:b1:2c:e2:50:0a:1a:95:25:1f:
09:c8:fd:da:b9:d1:7e:46:ed:5d:59:a2:a4:fd:df:
d2:f6:5f:45:23:ee:43:dc:50:5d:7f:7e:03:e2:38:
66:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B5:2E:E0:A3:FF:A4:B0:5A:EE:3B:E2:AC:5E:D9:04:3D:D4:E6:97
X509v3 Authority Key Identifier:
keyid:84:F2:CE:71:C6:FF:CE:87:56:0D:56:5E:E5:CC:DA:31:E0:1B:9C:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPLOccb_zodWDVZe5czaMeAbnBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:59:13:0b:27:c9:14:51:ce:9b:7e:b5:7e:81:9d:5f:a0:4e:
93:d8:ce:32:c0:7c:c2:e3:0d:20:86:ac:76:93:3e:0f:00:e4:
c2:53:17:6a:3e:02:26:72:71:93:fe:6c:5b:fd:e8:d6:85:cc:
8a:85:38:e2:c5:69:ce:39:07:dd:a6:a1:3b:db:57:27:32:4d:
ab:ea:8e:1f:46:b6:e3:dd:dd:cd:56:ea:ea:aa:01:d9:ec:58:
30:db:57:76:9b:5d:50:88:1f:b4:76:70:de:57:24:ad:fc:69:
6c:4a:62:83:2d:6a:3e:88:99:3f:69:aa:34:57:e5:00:9f:9e:
21:87:69:77:7d:b0:d1:7e:d0:f6:d0:4f:b2:5c:f7:27:b8:a1:
56:b1:71:82:24:23:a5:1e:70:1f:45:cc:96:c8:77:8c:0f:dd:
2c:f0:b3:74:40:c8:f3:a3:69:94:db:f8:6d:43:46:54:5f:5d:
34:96:84:93:5d:9d:bc:69:68:99:ef:63:4c:09:82:36:a9:71:
c4:8e:5a:b0:07:5e:6a:48:ab:a5:f2:ec:de:fa:71:5a:2f:16:
cd:a8:29:af:e6:4c:e7:ba:b7:09:d4:ac:88:90:b0:ea:09:eb:
a7:b2:61:50:1d:12:e0:99:58:29:7e:ef:05:ee:1e:82:3f:ac:
8c:9b:34:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysfb6Bumf74GlUpK/8YA25MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0ZjJjZTcxYzZmZmNlODc1NjBkNTY1ZWU1Y2NkYTMxZTAx
YjljMTUwHhcNMjYwMzAyMDMwMDQ3WhcNMjYwMzAzMDMwMDQ3WjAzMTEwLwYDVQQD
Eyg1Y2I1MmVlMGEzZmZhNGIwNWFlZTNiZTJhYzVlZDkwNDNkZDRlNjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ymNdtg1oym68EhQi7YkbEqIgP6n
4+4o90qwCR9EnWBNEveXO491o9oFXuQM/Vgud+aQtfhTAMxENmnldfUvCYO5oBP/
LP70B1LQZpyO+wFNBJNfUQP4fAmlRU/9/G4vUhJXlWrK4E55kMPk2+1ceXJJctAz
qb/gxWk/7JpnCAoO75mtIuLYxpG6HS4ZkjXC3CvLQoe8J2d82AsqCIKSZXsIPKsp
0xoSWQW2jkzNfB2qdHxOZivg1xA7u/mjSukabCZ3C4CLMgr8AmArcFv7d6VaqrLW
w36xLOJQChqVJR8JyP3audF+Ru1dWaKk/d/S9l9FI+5D3FBdf34D4jhmYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFy1LuCj/6SwWu474qxe2QQ91OaXMB8GA1UdIwQY
MBaAFITyznHG/86HVg1WXuXM2jHgG5wVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFBMT2NjYl96b2RXRFZaZTVjemFNZUFibkJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8yYWM5ODAtMjI1OS00NmZkLWE0Mjgt
N2I5OGM3NDYyYTdlLzEvaFBMT2NjYl96b2RXRFZaZTVjemFNZUFibkJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8yYWM5ODAtMjI1OS00NmZkLWE0MjgtN2I5OGM3NDYyYTdl
LzEvaFBMT2NjYl96b2RXRFZaZTVjemFNZUFibkJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO1kTCyfJ
FFHOm361foGdX6BOk9jOMsB8wuMNIIasdpM+DwDkwlMXaj4CJnJxk/5sW/3o1oXM
ioU44sVpzjkH3aahO9tXJzJNq+qOH0a2493dzVbq6qoB2exYMNtXdptdUIgftHZw
3lckrfxpbEpigy1qPoiZP2mqNFflAJ+eIYdpd32w0X7Q9tBPslz3J7ihVrFxgiQj
pR5wH0XMlsh3jA/dLPCzdEDI86NplNv4bUNGVF9dNJaEk12dvGlome9jTAmCNqlx
xI5asAdeakirpfLs3vpxWi8Wzagpr+ZM57q3CdSsiJCw6gnrp7JhUB0S4JlYKX7v
Be4egj+sjJs0Fw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:20:02 2026 by rpki-client