Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft
File: 0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft (raw, json)
Hash identifier: 9mYagqJuakI097kF5EkXvwsG5p3r6nIEre3CsQdQQ5w=
Subject key identifier: 4B:86:5E:82:6D:91:B9:AC:0D:2E:BC:F5:D6:DF:24:F2:04:6B:9E:07
Authority key identifier: D2:1A:59:40:72:2B:20:7B:29:D9:5A:6C:81:BE:0D:2B:F4:D4:10:CC
Certificate issuer: /CN=d21a5940722b207b29d95a6c81be0d2bf4d410cc
Certificate serial: 01A0C0D5F233C98A78E3FE1AA930A995CE6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft
Manifest number: 0C1F
Signing time: Sun 20 Sep 2026 22:00:41 +0000
Manifest this update: Sun 20 Sep 2026 22:00:41 +0000
Manifest next update: Mon 21 Sep 2026 22:00:41 +0000
Files and hashes: 1: 0hpZQHIrIHsp2Vpsgb4NK_TUEMw.crl (hash: JH/YVlJ/o50XwPKQ6nEjWKOdXftzDDHv2hC7NPJYFzA=)
2: 6jB2jMiHx3sCwDqQfo8bHL7xj1o.roa (hash: c6SeZtcLZoq1VVZbkWGju8/PVQHZ1NT6ScCfBSc3zdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 22:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:d5:f2:33:c9:8a:78:e3:fe:1a:a9:30:a9:95:ce:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d21a5940722b207b29d95a6c81be0d2bf4d410cc
Validity
Not Before: Sep 20 22:00:41 2026 GMT
Not After : Sep 21 22:00:41 2026 GMT
Subject: CN=4b865e826d91b9ac0d2ebcf5d6df24f2046b9e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:99:59:88:e0:d1:cd:fa:c9:36:49:36:f7:71:
dc:06:57:37:6f:b4:d7:cc:d9:5e:b3:23:e5:bc:f6:
40:69:37:2c:2d:ae:1e:42:f2:a2:56:a6:6c:a8:06:
8e:d1:4c:ad:fb:52:4a:f9:a4:0a:0a:5e:1a:94:bb:
0e:43:bb:d2:d1:ac:46:fc:86:eb:ff:af:41:9b:e3:
57:ec:5c:1d:2d:49:89:cb:09:98:a0:c8:b4:47:35:
fd:02:ed:a2:41:53:2e:5e:0e:f3:1d:dc:de:31:ae:
73:98:fb:1a:63:73:f1:d0:a5:bb:1b:04:67:54:0d:
5e:32:04:a0:71:d4:df:ff:c1:5f:8e:f5:08:7a:19:
a0:78:ff:d1:c8:3e:38:88:b9:77:c0:b9:72:d6:85:
98:b1:f1:dd:cc:7c:7b:d7:38:5c:49:8f:08:b0:e3:
0b:fd:02:5f:02:ce:2a:f1:de:7d:c4:fb:58:2e:3b:
24:c7:e3:ce:c0:e0:60:1e:52:21:a3:bb:73:57:58:
fa:fb:4b:6b:9b:1a:c0:ae:b5:3d:26:ef:0e:29:5c:
18:d1:c8:2e:3a:10:d6:48:2f:d1:b2:35:eb:00:e1:
d6:9a:9e:6a:77:9a:8d:ea:fa:4e:52:14:f6:21:1a:
55:9d:25:ee:bc:d7:d0:c0:31:e9:de:dc:47:62:ad:
b6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:86:5E:82:6D:91:B9:AC:0D:2E:BC:F5:D6:DF:24:F2:04:6B:9E:07
X509v3 Authority Key Identifier:
keyid:D2:1A:59:40:72:2B:20:7B:29:D9:5A:6C:81:BE:0D:2B:F4:D4:10:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:60:ae:e8:e6:b9:58:a0:8a:a2:8a:79:a1:d8:c5:1f:f2:e9:
5d:58:9a:b9:84:c9:ce:07:ad:02:2a:cb:5b:17:37:28:92:6c:
ec:ab:4c:61:c9:77:75:f6:bf:46:4f:d0:61:4c:d9:5f:41:95:
10:df:2e:f9:4a:7a:a5:05:1e:9a:2a:e0:ab:c0:05:ef:b4:a5:
bc:92:62:8a:e8:c2:7e:97:50:04:b0:d8:5d:7f:d0:c2:9a:ac:
51:de:da:a7:3c:98:a3:e9:e5:02:d2:73:18:d7:18:51:f2:63:
eb:3c:eb:a5:28:32:37:89:3d:49:1f:36:2f:ed:f8:15:a2:9d:
51:44:0e:1d:f0:84:f3:b0:cb:c8:18:86:74:0c:1c:9a:6a:41:
21:75:9c:0f:86:ae:60:0d:10:61:f0:b3:7d:e3:7b:93:58:79:
21:4f:d0:65:f3:cd:5e:14:07:df:95:fc:2c:58:df:07:e6:8d:
6f:c5:6b:4e:91:33:35:8d:33:0e:a9:f7:f5:99:11:1a:02:83:
f6:8a:d9:6c:0c:6f:87:65:a9:74:0b:36:30:3a:03:c9:3f:85:
5d:ed:68:fc:f8:6c:55:59:b2:97:4b:0d:4d:38:d0:a7:5b:d2:
ea:cf:0e:ab:fe:d6:b3:23:fb:1f:ef:b0:16:be:83:b7:f1:b1:
9d:47:62:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:05:18 2026 by rpki-client