Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
File: H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft (raw, json)
Hash identifier: nAXnqkvJxdQYWsTWIIrbiaf+aZJX9O9gNbvWA+WHv6w=
Subject key identifier: 38:D7:FD:32:78:26:D7:6A:31:95:11:C7:C9:46:06:22:61:A1:0B:65
Authority key identifier: 1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34
Certificate issuer: /CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
Certificate serial: 01A0CCD9ECFF345BEB2C20373E5611B7B1C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
Manifest number: 1A88
Signing time: Wed 23 Sep 2026 06:00:28 +0000
Manifest this update: Wed 23 Sep 2026 06:00:28 +0000
Manifest next update: Thu 24 Sep 2026 06:00:28 +0000
Files and hashes: 1: 0rCjkkR_MPz4saC7JF6qrBVIXRI.roa (hash: 7G05VEzaxLLv6te6rcONsOuW2MmiHFF8V/T+R5TcPzs=)
2: H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl (hash: PnG9cdXDNH7E3SY14WmIGRdEgaZDae4FO+7EfB8rres=)
3: TCMNO3-CS_Nx-NPlLu6HlbDn--Y.roa (hash: JY2kbXROkO8FWfujlDIjurbZxxm0qrKzSX4v6ycpeWY=)
4: X5485C7ZqsWTqkySl5Kn8ckUA60.roa (hash: w+70iAnq3DeMprlSCHwSgxGyujS0yHyNG0DURrrh5ls=)
5: Zl6fGzQYTOHjw4PolDvPxgAOgoQ.roa (hash: GhUA9dcCQFJ4Ezs37D2x3nBwq7ffRWZrt0wbE9KxdKY=)
6: aPxKVSvNRXkuueNUo0oD6qVAbdI.roa (hash: 61RoVPH2gZzr7aCEfyXLcJOn37DXu2XNDfa7Kms2beA=)
7: hrxx7N-es-CP5L9Y05Fhf5HCPVA.asa (hash: gD/YnJvaB4kZ3mbHsx5uWbu+Zq1mOPYYm5M339eei+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:d9:ec:ff:34:5b:eb:2c:20:37:3e:56:11:b7:b1:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
Validity
Not Before: Sep 23 06:00:28 2026 GMT
Not After : Sep 24 06:00:28 2026 GMT
Subject: CN=38d7fd327826d76a319511c7c946062261a10b65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b4:a7:c4:cb:19:f6:0d:b5:06:36:04:b1:53:
aa:da:6d:b5:21:d9:e4:57:9a:f5:e3:48:06:35:70:
a4:12:bc:52:38:23:ff:db:55:54:23:0d:9d:77:4a:
2d:92:7f:f2:f0:37:d7:ba:82:8b:2e:66:2f:bc:41:
80:86:88:93:45:24:f9:a5:0a:46:fd:5a:7e:51:c4:
c3:53:4f:f7:17:c5:05:15:91:95:1b:f6:2d:eb:53:
a8:3d:86:a5:e1:51:5d:fe:97:fe:57:b1:39:a9:fd:
e7:76:47:f1:2a:d2:10:95:51:16:ab:60:d0:ec:8d:
c8:89:3e:c2:c3:38:f1:7c:c7:e5:35:29:55:80:c2:
4e:16:d9:b1:bf:69:6c:e4:72:a4:6c:52:49:e5:b1:
b8:e2:70:a3:24:10:3a:79:b6:ea:9e:ec:70:6d:6a:
b3:63:03:83:f0:59:f7:93:88:82:e1:1b:98:15:90:
eb:9e:dc:3a:88:28:ae:63:17:4a:df:45:d5:da:45:
4e:20:1a:d5:80:c3:d6:51:cf:1f:9d:1b:92:05:51:
63:dd:24:9c:56:ae:86:f1:ce:1b:4f:a8:f5:c9:95:
a8:31:78:73:1f:10:f0:7c:5d:5c:94:a6:c6:82:a5:
02:21:6f:9b:37:3d:2b:10:40:78:9a:c0:7e:ac:d7:
67:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D7:FD:32:78:26:D7:6A:31:95:11:C7:C9:46:06:22:61:A1:0B:65
X509v3 Authority Key Identifier:
keyid:1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:a3:33:c5:23:4a:c1:23:11:ac:f8:d8:24:64:01:2f:c1:d8:
51:5a:01:1c:08:68:27:2d:3a:80:5a:d1:dd:46:6e:91:5a:03:
03:1c:ea:a9:8d:9f:18:f9:0a:5c:2b:4d:ad:8e:95:7e:31:14:
a9:03:36:76:f8:46:a8:0a:00:1f:02:88:d3:cf:43:7d:6e:92:
fc:26:76:d3:08:34:d7:87:32:59:02:5a:b5:18:97:42:71:fb:
46:f2:76:9e:e3:6a:f2:71:a2:22:4a:c2:e4:a9:26:76:b7:51:
e3:5e:d0:93:36:8c:19:1c:33:8e:44:ea:80:21:ca:f4:9e:00:
f5:de:8c:55:e2:6b:c9:c8:76:88:47:e2:f4:ff:a3:7a:7d:21:
ae:91:72:07:40:28:71:11:e8:04:2e:19:ef:1d:30:bc:28:70:
3d:58:e1:93:01:9e:b1:3d:26:44:70:50:a1:a0:15:23:13:0a:
02:a6:06:0c:43:f9:18:30:7b:64:6f:a1:de:bc:5d:47:10:86:
ba:1c:9f:85:9f:9e:77:5c:73:f7:d9:a0:de:7a:c9:90:38:f2:
c6:12:ad:f0:73:3d:5b:bc:7d:91:67:bc:8d:ea:c0:7b:42:76:
75:e3:df:88:84:f3:7c:1c:af:7c:6b:37:34:8c:39:95:98:d2:
57:d6:5d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:38:32 2026 by rpki-client