Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft
File: 0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft (raw, json)
Hash identifier: qOI+rWpYzyHnj0D12iWGTwMLz5n7Kt5/tRct7KtUGIg=
Subject key identifier: 2A:58:CC:5F:6C:79:AD:7F:C5:74:2B:9E:6C:B7:ED:A2:B0:7B:1A:3B
Authority key identifier: D2:1A:59:40:72:2B:20:7B:29:D9:5A:6C:81:BE:0D:2B:F4:D4:10:CC
Certificate issuer: /CN=d21a5940722b207b29d95a6c81be0d2bf4d410cc
Certificate serial: 019DA52F86939B9BA1F1E8C0421F52334213
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft
Manifest number: 0A83
Signing time: Sun 19 Apr 2026 10:00:48 +0000
Manifest this update: Sun 19 Apr 2026 10:00:48 +0000
Manifest next update: Mon 20 Apr 2026 10:00:48 +0000
Files and hashes: 1: 0hpZQHIrIHsp2Vpsgb4NK_TUEMw.crl (hash: Z3g1mDF2Z45ViWAAg0df6h+Qs8xgcYj3HtgiQrbUnNY=)
2: 6jB2jMiHx3sCwDqQfo8bHL7xj1o.roa (hash: c6SeZtcLZoq1VVZbkWGju8/PVQHZ1NT6ScCfBSc3zdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:2f:86:93:9b:9b:a1:f1:e8:c0:42:1f:52:33:42:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d21a5940722b207b29d95a6c81be0d2bf4d410cc
Validity
Not Before: Apr 19 10:00:48 2026 GMT
Not After : Apr 20 10:00:48 2026 GMT
Subject: CN=2a58cc5f6c79ad7fc5742b9e6cb7eda2b07b1a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d9:69:c1:c6:83:e9:fb:6e:08:3b:ab:82:9d:
e2:9a:8b:4e:02:57:16:8c:d4:1d:5c:1e:10:70:e4:
01:ed:49:f7:3f:1d:94:79:d8:dd:13:a4:ec:fd:19:
03:af:fc:87:70:bd:77:14:52:15:ee:16:6b:7e:87:
be:1c:6e:6f:b5:e0:6b:94:7c:b0:cf:0b:6b:bf:34:
e4:03:47:32:39:7b:95:38:f0:ba:3d:26:a7:13:a1:
4b:ac:15:c3:97:53:23:6d:a4:b7:ec:c0:73:e0:5b:
0a:56:d9:75:c3:c8:ca:a8:06:44:0b:a4:28:11:4f:
b7:fe:07:44:8f:80:5a:9e:fc:b3:15:19:74:41:1e:
4b:d9:9f:e7:e2:a3:b8:8f:97:64:f1:5f:47:47:ef:
0e:2c:c0:dc:d6:cc:be:08:28:ce:f2:72:ca:0c:8a:
f4:4b:ef:a2:e5:4a:44:1c:0d:73:c4:9d:9f:d0:67:
69:2a:bc:2b:45:01:c9:c1:58:e2:aa:f6:b6:45:32:
07:0a:ac:0c:94:c1:17:72:da:c0:c7:e2:8f:48:a9:
b8:53:77:5c:14:bf:59:44:7a:02:54:09:17:09:92:
91:ef:84:ee:c5:91:6d:9e:63:83:db:f0:de:37:32:
c6:9a:91:04:f2:08:f2:73:03:48:5b:8a:5e:dd:61:
b2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:58:CC:5F:6C:79:AD:7F:C5:74:2B:9E:6C:B7:ED:A2:B0:7B:1A:3B
X509v3 Authority Key Identifier:
keyid:D2:1A:59:40:72:2B:20:7B:29:D9:5A:6C:81:BE:0D:2B:F4:D4:10:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:37:81:92:1d:d1:8d:9c:4d:3d:d4:8c:bb:53:2b:97:15:6e:
df:77:12:9a:a4:f7:28:15:1f:af:26:8d:ee:05:ef:fa:29:b4:
0a:ec:77:36:61:3d:45:72:fa:4c:e4:31:1d:08:da:d0:ee:c3:
6c:5a:49:d3:87:fe:01:c3:25:78:e2:03:0f:8e:1d:38:1a:c0:
f2:56:44:67:d3:92:00:d2:1f:94:bc:4e:c5:ef:a1:dc:19:25:
58:9b:ad:f4:ba:65:d4:78:d8:c2:d0:93:eb:52:2d:da:78:31:
79:d5:39:f4:22:dc:0d:03:ba:f4:08:22:b7:35:00:fb:2c:6c:
32:69:5e:ea:c7:d3:32:bb:7f:37:51:88:c9:b4:96:39:0e:62:
25:72:6d:8c:15:89:9f:aa:2b:8c:aa:b3:09:93:af:16:6f:ec:
46:54:57:2b:1e:0b:88:55:27:37:d0:b0:f5:cb:8e:47:be:67:
5c:2a:88:c6:c8:57:5b:68:cb:f8:6e:d7:2e:6a:6a:e8:be:85:
48:56:eb:67:37:48:52:0f:0e:60:11:bb:bd:b2:43:44:7b:ef:
7a:95:34:fc:47:af:4d:27:7a:6f:cb:78:9a:d8:2c:ca:45:d8:
b6:d3:96:3f:b0:01:ed:08:c6:24:50:8b:7e:b3:79:cf:a7:5d:
94:8e:db:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2lL4aTm5uh8ejAQh9SM0ITMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMWE1OTQwNzIyYjIwN2IyOWQ5NWE2YzgxYmUwZDJiZjRk
NDEwY2MwHhcNMjYwNDE5MTAwMDQ4WhcNMjYwNDIwMTAwMDQ4WjAzMTEwLwYDVQQD
EygyYTU4Y2M1ZjZjNzlhZDdmYzU3NDJiOWU2Y2I3ZWRhMmIwN2IxYTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9lpwcaD6ftuCDurgp3imotOAlcW
jNQdXB4QcOQB7Un3Px2UedjdE6Ts/RkDr/yHcL13FFIV7hZrfoe+HG5vteBrlHyw
zwtrvzTkA0cyOXuVOPC6PSanE6FLrBXDl1MjbaS37MBz4FsKVtl1w8jKqAZEC6Qo
EU+3/gdEj4BanvyzFRl0QR5L2Z/n4qO4j5dk8V9HR+8OLMDc1sy+CCjO8nLKDIr0
S++i5UpEHA1zxJ2f0GdpKrwrRQHJwVjiqva2RTIHCqwMlMEXctrAx+KPSKm4U3dc
FL9ZRHoCVAkXCZKR74TuxZFtnmOD2/DeNzLGmpEE8gjycwNIW4pe3WGyFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCpYzF9sea1/xXQrnmy37aKwexo7MB8GA1UdIwQY
MBaAFNIaWUByKyB7KdlabIG+DSv01BDMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGhwWlFISXJJSHNwMlZwc2diNE5LX1RVRU13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC81NjQzM2EtMGE3MC00ZWFlLTlmOWQt
OGNmYmRiNzk5Mjg0LzEvMGhwWlFISXJJSHNwMlZwc2diNE5LX1RVRU13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC81NjQzM2EtMGE3MC00ZWFlLTlmOWQtOGNmYmRiNzk5Mjg0
LzEvMGhwWlFISXJJSHNwMlZwc2diNE5LX1RVRU13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOjeBkh3R
jZxNPdSMu1MrlxVu33cSmqT3KBUfryaN7gXv+im0Cux3NmE9RXL6TOQxHQja0O7D
bFpJ04f+AcMleOIDD44dOBrA8lZEZ9OSANIflLxOxe+h3BklWJut9Lpl1HjYwtCT
61It2ngxedU59CLcDQO69AgitzUA+yxsMmle6sfTMrt/N1GIybSWOQ5iJXJtjBWJ
n6orjKqzCZOvFm/sRlRXKx4LiFUnN9Cw9cuOR75nXCqIxshXW2jL+G7XLmpq6L6F
SFbrZzdIUg8OYBG7vbJDRHvvepU0/EevTSd6b8t4mtgsykXYttOWP7AB7QjGJFCL
frN5z6ddlI7bAw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 12:52:28 2026 by rpki-client