Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft
File: 0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft (raw, json)
Hash identifier: jBLClFTlcWcqod4KUARWfXfZTutNvXlC2lUoxuvfUiQ=
Subject key identifier: 59:97:D7:0C:F0:D9:DB:08:52:46:A1:13:77:6F:B3:C7:8A:44:D4:2F
Authority key identifier: D2:1A:59:40:72:2B:20:7B:29:D9:5A:6C:81:BE:0D:2B:F4:D4:10:CC
Certificate issuer: /CN=d21a5940722b207b29d95a6c81be0d2bf4d410cc
Certificate serial: 019CAC1062DDC2FE420FCD9C90D7D58E9060
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft
Manifest number: 0A02
Signing time: Mon 02 Mar 2026 01:01:20 +0000
Manifest this update: Mon 02 Mar 2026 01:01:20 +0000
Manifest next update: Tue 03 Mar 2026 01:01:20 +0000
Files and hashes: 1: 0hpZQHIrIHsp2Vpsgb4NK_TUEMw.crl (hash: IoVSgtyHKje9i1aVwenzeWtv5lupT4fxUNFsEHcGOkE=)
2: 6jB2jMiHx3sCwDqQfo8bHL7xj1o.roa (hash: c6SeZtcLZoq1VVZbkWGju8/PVQHZ1NT6ScCfBSc3zdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:62:dd:c2:fe:42:0f:cd:9c:90:d7:d5:8e:90:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d21a5940722b207b29d95a6c81be0d2bf4d410cc
Validity
Not Before: Mar 2 01:01:20 2026 GMT
Not After : Mar 3 01:01:20 2026 GMT
Subject: CN=5997d70cf0d9db085246a113776fb3c78a44d42f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1f:5d:56:c2:fb:50:48:ec:a0:c2:ce:76:15:
f2:43:df:35:06:f3:96:38:ec:d9:42:82:70:07:1b:
a6:2e:a9:95:a9:5c:60:ab:81:35:59:88:d4:97:05:
3e:27:dd:59:09:e8:88:23:28:72:2c:4d:fc:8a:78:
89:5e:89:4f:82:0d:79:f7:2b:0a:79:eb:10:8e:1d:
2c:f0:42:3b:cb:83:fc:02:4c:2b:e2:4a:40:d3:15:
6e:25:ff:c5:95:40:04:6b:67:63:34:da:fc:4f:75:
c2:a5:8e:df:a0:f2:f8:bd:3f:ec:33:60:43:fc:5e:
13:a5:f9:d2:e7:62:5e:00:19:ea:2d:20:dc:25:95:
04:78:09:cc:82:2e:08:f4:e6:2a:c8:eb:ba:ba:04:
e5:a3:81:95:3c:f0:ca:d7:03:61:be:51:64:e9:a5:
0e:b0:26:c5:e1:39:aa:41:c8:ce:f3:91:e1:55:b8:
d0:cd:39:83:7a:c7:33:bb:b0:00:e8:0e:57:2e:a0:
bf:3b:45:29:bb:b1:15:13:19:aa:09:fd:b3:3f:5d:
f9:d5:4e:5f:95:61:8f:c2:ea:b1:e9:eb:a3:5c:31:
9e:dc:6b:60:ce:83:77:b4:b9:90:dc:3a:55:cf:18:
fc:ec:11:38:1c:2e:0e:f7:93:6e:3b:d4:ac:24:f1:
3a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:97:D7:0C:F0:D9:DB:08:52:46:A1:13:77:6F:B3:C7:8A:44:D4:2F
X509v3 Authority Key Identifier:
keyid:D2:1A:59:40:72:2B:20:7B:29:D9:5A:6C:81:BE:0D:2B:F4:D4:10:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:06:d6:b9:e2:6f:be:e8:62:c4:b7:b8:4f:73:57:f7:07:3c:
66:7b:6a:57:b7:6a:c9:4c:c0:f3:0d:5f:fb:09:c6:d1:0e:9e:
4e:93:3f:61:a1:30:c0:eb:98:37:fd:63:d1:30:e0:b2:1a:28:
30:fa:4b:61:6f:7d:6e:54:04:75:7a:bd:88:f3:07:83:18:7e:
26:e9:85:49:4f:8e:eb:77:d0:fc:7c:5c:f8:0b:23:66:ab:2a:
3f:ef:f7:b2:fd:fc:70:3a:10:ee:b1:68:1b:e1:5f:fe:11:39:
a1:27:bb:7f:d1:26:86:94:77:df:70:19:e9:7e:05:50:c7:2b:
78:e3:fb:7c:dd:29:c7:03:f8:cf:41:7e:a0:72:ff:8f:dc:5c:
9c:08:8e:6b:21:1a:f9:e0:fb:e0:be:82:83:18:4d:88:33:c7:
4e:e2:68:e1:55:7c:a6:bc:1d:a1:bc:43:01:c0:a7:e9:57:89:
5d:a9:ce:7a:18:ef:26:9b:d5:20:ac:a0:97:92:7f:55:6f:ed:
09:31:13:8f:4e:6c:0f:52:09:ec:7d:2c:16:3c:c9:2a:d9:b8:
94:4b:74:e1:b6:58:af:54:ce:80:dd:7d:95:20:aa:21:9f:d4:
e6:4e:ef:89:6b:ab:99:46:52:0c:e1:d6:2d:9e:bd:9f:d0:e1:
5d:84:de:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysEGLdwv5CD82ckNfVjpBgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMWE1OTQwNzIyYjIwN2IyOWQ5NWE2YzgxYmUwZDJiZjRk
NDEwY2MwHhcNMjYwMzAyMDEwMTIwWhcNMjYwMzAzMDEwMTIwWjAzMTEwLwYDVQQD
Eyg1OTk3ZDcwY2YwZDlkYjA4NTI0NmExMTM3NzZmYjNjNzhhNDRkNDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlR9dVsL7UEjsoMLOdhXyQ981BvOW
OOzZQoJwBxumLqmVqVxgq4E1WYjUlwU+J91ZCeiIIyhyLE38iniJXolPgg159ysK
eesQjh0s8EI7y4P8Akwr4kpA0xVuJf/FlUAEa2djNNr8T3XCpY7foPL4vT/sM2BD
/F4TpfnS52JeABnqLSDcJZUEeAnMgi4I9OYqyOu6ugTlo4GVPPDK1wNhvlFk6aUO
sCbF4TmqQcjO85HhVbjQzTmDesczu7AA6A5XLqC/O0Upu7EVExmqCf2zP1351U5f
lWGPwuqx6eujXDGe3GtgzoN3tLmQ3DpVzxj87BE4HC4O95NuO9SsJPE6MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFmX1wzw2dsIUkahE3dvs8eKRNQvMB8GA1UdIwQY
MBaAFNIaWUByKyB7KdlabIG+DSv01BDMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGhwWlFISXJJSHNwMlZwc2diNE5LX1RVRU13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC81NjQzM2EtMGE3MC00ZWFlLTlmOWQt
OGNmYmRiNzk5Mjg0LzEvMGhwWlFISXJJSHNwMlZwc2diNE5LX1RVRU13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC81NjQzM2EtMGE3MC00ZWFlLTlmOWQtOGNmYmRiNzk5Mjg0
LzEvMGhwWlFISXJJSHNwMlZwc2diNE5LX1RVRU13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWwbWueJv
vuhixLe4T3NX9wc8ZntqV7dqyUzA8w1f+wnG0Q6eTpM/YaEwwOuYN/1j0TDgshoo
MPpLYW99blQEdXq9iPMHgxh+JumFSU+O63fQ/Hxc+AsjZqsqP+/3sv38cDoQ7rFo
G+Ff/hE5oSe7f9EmhpR333AZ6X4FUMcreOP7fN0pxwP4z0F+oHL/j9xcnAiOayEa
+eD74L6CgxhNiDPHTuJo4VV8prwdobxDAcCn6VeJXanOehjvJpvVIKygl5J/VW/t
CTETj05sD1IJ7H0sFjzJKtm4lEt04bZYr1TOgN19lSCqIZ/U5k7viWurmUZSDOHW
LZ69n9DhXYTebA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:43:49 2026 by rpki-client