Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft
File: 0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft (raw, json)
Hash identifier: fZGTyoelPFQrczh+3h6EY7VEpErEp1J0TTYa3LUszDA=
Subject key identifier: FA:B7:81:B3:15:97:3B:22:8C:28:F3:1B:71:B6:8D:D0:13:98:7D:59
Authority key identifier: D2:1A:59:40:72:2B:20:7B:29:D9:5A:6C:81:BE:0D:2B:F4:D4:10:CC
Certificate issuer: /CN=d21a5940722b207b29d95a6c81be0d2bf4d410cc
Certificate serial: 019E1CEC0E3F3EC7D17DC6B5240B3EE47909
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft
Manifest number: 0AC1
Signing time: Tue 12 May 2026 16:01:32 +0000
Manifest this update: Tue 12 May 2026 16:01:32 +0000
Manifest next update: Wed 13 May 2026 16:01:32 +0000
Files and hashes: 1: 0hpZQHIrIHsp2Vpsgb4NK_TUEMw.crl (hash: TUoHziYsSwKB1CqnT2r0k7l+mv8bIo8JKpuIHeVnnWM=)
2: 6jB2jMiHx3sCwDqQfo8bHL7xj1o.roa (hash: c6SeZtcLZoq1VVZbkWGju8/PVQHZ1NT6ScCfBSc3zdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:ec:0e:3f:3e:c7:d1:7d:c6:b5:24:0b:3e:e4:79:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d21a5940722b207b29d95a6c81be0d2bf4d410cc
Validity
Not Before: May 12 16:01:32 2026 GMT
Not After : May 13 16:01:32 2026 GMT
Subject: CN=fab781b315973b228c28f31b71b68dd013987d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dc:10:7a:c1:d2:7a:66:eb:79:ee:c0:99:58:
07:e4:b9:5b:15:86:88:31:5e:56:39:c1:93:ec:fd:
5b:f9:f2:c5:d6:d2:8c:63:2a:c7:f9:d8:a5:59:68:
4b:cf:3d:15:de:97:3a:bb:9e:1d:2a:64:88:85:d7:
7a:f1:3c:48:de:f1:cf:10:93:a4:0f:fe:f9:6d:5c:
27:0d:9a:cf:47:43:ba:be:44:7b:81:53:5e:7a:85:
21:67:46:71:21:e4:71:b9:7d:64:9d:0c:2b:3e:af:
0e:19:3a:1f:b6:38:eb:11:69:d0:43:94:99:9f:ff:
7b:e0:68:68:7e:6f:1c:fc:c7:54:23:0b:e8:e4:21:
8e:6a:0d:1d:fb:1c:b9:af:b0:d1:8b:fc:ea:29:7c:
ac:e0:f1:7a:41:94:1f:07:68:f6:50:06:7d:a1:7f:
f6:38:32:66:b9:27:25:d6:81:c2:a9:57:73:57:dd:
73:c8:5a:f1:6b:6e:5f:40:81:90:f8:60:3b:f4:49:
3d:97:94:78:ad:fb:ef:eb:f2:6c:55:62:72:1e:91:
38:0a:8d:af:ba:1a:61:c6:b4:7e:3b:f2:90:f9:fc:
2c:d7:29:4b:96:79:40:1b:ac:ea:8e:55:42:e3:a0:
e5:c9:5a:fe:25:0a:9a:4d:92:b9:80:53:18:c1:b2:
2f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B7:81:B3:15:97:3B:22:8C:28:F3:1B:71:B6:8D:D0:13:98:7D:59
X509v3 Authority Key Identifier:
keyid:D2:1A:59:40:72:2B:20:7B:29:D9:5A:6C:81:BE:0D:2B:F4:D4:10:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:52:07:b9:56:02:5a:f5:30:b5:f7:83:12:38:8e:04:a3:f0:
ed:e3:a5:28:05:3d:9d:56:3e:80:02:7c:bb:70:bc:3a:2a:47:
2c:54:d3:40:d5:bd:0f:6b:32:9a:47:3a:f7:d4:72:c5:69:60:
f1:f8:e4:f0:a3:12:9d:85:8a:1c:c3:6d:c8:4e:d1:5b:da:27:
73:f5:fc:db:d5:44:ed:1c:0b:ea:43:6f:f6:cd:30:94:da:9c:
6f:d0:30:05:ce:21:0b:8c:5a:ba:25:27:e5:54:ad:b6:7f:1e:
7c:2e:35:1a:7b:19:0e:f3:bf:6f:20:99:18:42:bd:cb:ec:5c:
fa:2c:c8:06:22:57:80:b1:da:96:7b:2b:62:dd:39:77:e3:4a:
22:51:7a:98:66:97:ff:4a:7f:45:03:27:df:1b:91:b7:09:f7:
7b:e4:61:73:d3:19:9d:1b:7c:96:ec:f3:87:cd:ce:49:b3:3c:
05:24:f4:68:e0:8d:48:e6:2f:4f:f3:e0:de:a9:6a:19:66:65:
88:57:02:0f:2f:c7:cb:cf:ee:f0:75:17:e3:bb:2e:1d:2d:f5:
ca:d8:35:a2:73:73:8c:99:7e:92:80:77:61:42:ff:de:db:4a:
77:e1:47:d4:9a:da:f1:c9:69:32:73:7d:3e:c5:b7:cb:73:58:
50:4d:9f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:59:39 2026 by rpki-client