Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft
File: 0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft (raw, json)
Hash identifier: VIBSopV/BMLIxnRHVyEWSBW9cWr7ge4YEm8SoJt+z5U=
Subject key identifier: 3D:35:0A:6C:1D:47:2F:4F:8F:21:A7:FB:A1:B0:E4:BE:24:4C:E5:50
Authority key identifier: D2:1A:59:40:72:2B:20:7B:29:D9:5A:6C:81:BE:0D:2B:F4:D4:10:CC
Certificate issuer: /CN=d21a5940722b207b29d95a6c81be0d2bf4d410cc
Certificate serial: 019D27A924AEDA44958095B01FC228C1CA1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft
Manifest number: 0A42
Signing time: Thu 26 Mar 2026 01:01:29 +0000
Manifest this update: Thu 26 Mar 2026 01:01:29 +0000
Manifest next update: Fri 27 Mar 2026 01:01:29 +0000
Files and hashes: 1: 0hpZQHIrIHsp2Vpsgb4NK_TUEMw.crl (hash: 5TKnJgWYVC4XEWlvNqtT/171d5f7WxBrRIftXV/HZ2U=)
2: 6jB2jMiHx3sCwDqQfo8bHL7xj1o.roa (hash: c6SeZtcLZoq1VVZbkWGju8/PVQHZ1NT6ScCfBSc3zdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:24:ae:da:44:95:80:95:b0:1f:c2:28:c1:ca:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d21a5940722b207b29d95a6c81be0d2bf4d410cc
Validity
Not Before: Mar 26 01:01:29 2026 GMT
Not After : Mar 27 01:01:29 2026 GMT
Subject: CN=3d350a6c1d472f4f8f21a7fba1b0e4be244ce550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6c:ee:47:e2:9e:56:79:48:8e:59:f5:00:b3:
6b:87:d0:67:aa:b2:01:f1:d7:cb:13:19:eb:dc:f3:
a7:14:81:99:91:07:3c:86:54:8b:e0:23:d5:b1:37:
a8:a5:da:7a:d2:bb:7c:ad:eb:d1:55:0f:7e:58:a7:
5c:81:3a:30:46:4c:90:50:0b:a8:17:e7:3e:fd:0b:
2d:c6:0e:0f:d1:f1:dd:ed:7d:6b:5a:79:13:09:77:
b2:0c:de:00:55:ed:59:83:71:15:4b:55:59:6d:98:
d8:04:1c:eb:3d:48:0e:34:4b:91:9f:0d:ef:26:8a:
c9:95:17:a4:63:da:a5:91:e4:ce:98:a6:78:65:a9:
7d:a5:e5:04:4c:c6:d9:62:35:34:3c:cf:39:67:41:
d6:23:1b:ce:07:4e:06:90:fd:f8:65:4d:ea:47:7b:
fe:50:5d:72:ae:e5:d3:ab:84:df:0e:2f:4f:62:d9:
7c:c9:c9:db:9b:e6:20:e0:49:a5:2d:fd:46:15:e1:
09:2a:3e:20:61:99:bf:6e:68:2a:41:f6:0b:89:dc:
8f:89:3c:e8:e0:7d:88:45:07:db:b6:a1:18:8e:3c:
fc:1f:b7:0e:e5:60:d5:13:97:d6:28:3e:b8:ca:b1:
57:b3:e1:f0:98:e5:b4:96:f3:fb:8e:32:54:1b:e0:
91:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:35:0A:6C:1D:47:2F:4F:8F:21:A7:FB:A1:B0:E4:BE:24:4C:E5:50
X509v3 Authority Key Identifier:
keyid:D2:1A:59:40:72:2B:20:7B:29:D9:5A:6C:81:BE:0D:2B:F4:D4:10:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:8c:55:3a:a7:fa:8c:aa:c1:0d:b7:fd:06:1e:fe:74:52:ee:
28:f3:1e:13:3b:b4:e3:18:67:c7:2c:34:37:9a:bc:16:ae:cc:
a1:25:80:0d:c0:06:12:43:34:f3:25:19:25:4f:12:2c:a0:5d:
16:8f:b8:10:49:cc:7c:25:8a:ef:1c:bf:0b:ba:e0:d5:39:f2:
35:2d:85:53:19:c0:45:de:09:2f:e8:4e:4d:86:84:53:a8:41:
ff:0c:fa:d2:73:cb:92:0a:7b:24:e2:2d:94:45:b4:96:9f:d6:
10:e9:a2:d3:32:88:71:af:f3:ec:8e:a4:21:e6:21:ff:c2:6f:
fc:6c:a1:f2:e7:46:82:f5:91:49:a3:21:4c:3d:74:cf:6d:27:
7f:ed:ca:b0:90:40:87:08:81:29:91:dc:86:96:b1:da:b2:ea:
2b:e9:71:57:fa:34:bf:06:3c:8d:35:5c:1d:93:c3:e3:be:cd:
61:53:be:b6:2b:69:cb:6a:0e:e4:a1:23:27:fe:2a:11:a1:e5:
fc:2c:21:2f:26:a1:81:59:22:8b:f5:ca:53:33:80:db:ed:f4:
5f:75:23:a0:2f:b1:88:a4:5f:e2:63:ae:e5:36:32:a7:1c:02:
f8:e7:27:1a:17:32:16:93:08:81:c8:5d:e6:2b:07:3f:fd:fc:
b3:cd:ae:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:59:08 2026 by rpki-client