Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/2cefa4-7fdf-4108-8a27-ad5cf840574d/1/h2-Iu0yzbPQtadF42cItt5pUNBY.mft
File: h2-Iu0yzbPQtadF42cItt5pUNBY.mft (raw, json)
Hash identifier: SFmpdHGS/+Gptib/61/GCKDmTmaAI/JO5ofBnrgy6TI=
Subject key identifier: 21:7E:E8:5C:8E:2A:15:BF:D5:E7:3D:13:73:7A:CD:0D:0A:4D:6D:9A
Authority key identifier: 87:6F:88:BB:4C:B3:6C:F4:2D:69:D1:78:D9:C2:2D:B7:9A:54:34:16
Certificate issuer: /CN=876f88bb4cb36cf42d69d178d9c22db79a543416
Certificate serial: 01A0DBA96BBCFBDD56B45CAB401092C071D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h2-Iu0yzbPQtadF42cItt5pUNBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/2cefa4-7fdf-4108-8a27-ad5cf840574d/1/h2-Iu0yzbPQtadF42cItt5pUNBY.mft
Manifest number: 1E
Signing time: Sat 26 Sep 2026 03:01:48 +0000
Manifest this update: Sat 26 Sep 2026 03:01:48 +0000
Manifest next update: Sun 27 Sep 2026 03:01:48 +0000
Files and hashes: 1: SjRf8Xsl4sdFLcqJPbz2Pap3-vc.roa (hash: x2BiC1m4re7zXu1B5lAPa0uVVp+yoZEe6Ilh5DtaMvY=)
2: h2-Iu0yzbPQtadF42cItt5pUNBY.crl (hash: /YfgQpA3DtOCFH+B2W+vxuygO1brFowb/IVhOFJkNjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/2cefa4-7fdf-4108-8a27-ad5cf840574d/1/h2-Iu0yzbPQtadF42cItt5pUNBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/2cefa4-7fdf-4108-8a27-ad5cf840574d/1/h2-Iu0yzbPQtadF42cItt5pUNBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/h2-Iu0yzbPQtadF42cItt5pUNBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a9:6b:bc:fb:dd:56:b4:5c:ab:40:10:92:c0:71:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=876f88bb4cb36cf42d69d178d9c22db79a543416
Validity
Not Before: Sep 26 03:01:48 2026 GMT
Not After : Sep 27 03:01:48 2026 GMT
Subject: CN=217ee85c8e2a15bfd5e73d13737acd0d0a4d6d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:f4:46:4f:98:bb:41:08:bc:75:57:38:bc:d4:
3f:20:0f:18:f0:03:a9:8b:b9:0f:d1:70:e0:0b:c4:
50:d1:34:b6:c4:f7:68:a3:c1:27:93:c4:32:25:20:
10:19:3f:20:37:5a:fc:78:71:4a:42:d2:a4:a3:5d:
2a:1c:83:d3:d9:cd:4e:74:a7:9b:db:71:1e:4b:06:
64:72:2a:13:43:a5:e5:b2:f7:44:00:31:92:3c:5d:
45:31:2d:07:51:c0:b9:67:38:b7:f8:2a:e3:7c:89:
33:8f:ed:9b:dd:93:9f:de:dc:99:8b:3e:02:25:3b:
47:3e:ee:d3:1e:0c:60:72:55:55:a5:30:8f:ce:6a:
95:56:bb:60:48:4b:94:a8:34:af:36:9f:10:6d:58:
01:cd:c0:7e:90:3e:96:1b:a0:c3:d3:34:3d:af:ba:
de:88:d0:b8:89:a9:09:29:2e:90:ca:8f:6a:b7:ac:
f9:56:07:08:34:ae:5d:0d:06:b4:fc:a9:05:ac:5d:
e4:8c:e8:36:1f:ee:9d:76:78:4a:77:ea:03:52:55:
c0:7b:e8:14:20:12:79:52:f8:79:bd:3f:a3:fe:75:
07:92:89:06:67:bd:32:ee:fe:e0:b1:e2:ea:fe:fa:
82:d4:07:29:81:29:40:e5:53:65:13:84:21:17:fa:
fb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:7E:E8:5C:8E:2A:15:BF:D5:E7:3D:13:73:7A:CD:0D:0A:4D:6D:9A
X509v3 Authority Key Identifier:
keyid:87:6F:88:BB:4C:B3:6C:F4:2D:69:D1:78:D9:C2:2D:B7:9A:54:34:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h2-Iu0yzbPQtadF42cItt5pUNBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/2cefa4-7fdf-4108-8a27-ad5cf840574d/1/h2-Iu0yzbPQtadF42cItt5pUNBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/2cefa4-7fdf-4108-8a27-ad5cf840574d/1/h2-Iu0yzbPQtadF42cItt5pUNBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:d4:b3:01:ed:21:1c:9a:80:1d:a0:7d:a0:9d:0a:7a:06:90:
56:b8:82:b9:55:5f:58:49:f3:5c:b8:e3:aa:60:bd:39:c3:1b:
ef:d4:49:3c:9c:d5:bd:77:2d:95:d8:a9:80:de:e5:11:b1:9b:
ce:c9:76:62:5f:bc:7c:eb:34:0d:7c:de:f3:0c:5f:6e:a2:36:
11:21:d6:a3:94:75:fd:b2:ed:4a:39:7a:c2:e1:29:de:15:60:
73:1a:f5:27:08:b7:cc:18:02:d3:b8:d7:46:19:9b:19:4d:69:
f6:26:33:b6:f7:9b:4f:74:9c:04:46:eb:1d:d0:3c:70:de:23:
e7:d1:b4:bc:25:76:2c:b5:7c:62:71:76:15:b5:63:bc:21:41:
71:08:91:52:77:d5:5c:1f:e3:3a:ce:a0:58:30:32:34:20:d2:
28:81:9e:3e:32:18:29:e9:1c:4f:b8:68:06:bc:ea:75:3c:51:
26:55:09:da:89:bf:aa:ed:74:c5:09:f8:4b:6f:08:1a:ec:34:
c1:04:31:c7:b5:ea:b9:38:2f:b5:c7:d0:d2:d5:02:a4:c4:b8:
fd:e0:f8:95:02:d5:b5:c2:16:a7:54:f7:13:e0:ae:15:98:f1:
c8:af:68:1a:d8:40:08:04:37:7e:61:c2:e4:36:d2:5b:ae:c1:
65:b2:d5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:25:11 2026 by rpki-client