Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.mft
File: H-ZfK2FsC9tmBtsKAvOQPYog2b0.mft (raw, json)
Hash identifier: cmhtIevXamxMOu+inRBiXGuPLFFUuqQorw9gioI36y8=
Subject key identifier: 18:16:51:9C:9E:E1:84:9B:84:17:98:10:1C:59:17:36:F5:19:01:9D
Authority key identifier: 1F:E6:5F:2B:61:6C:0B:DB:66:06:DB:0A:02:F3:90:3D:8A:20:D9:BD
Certificate issuer: /CN=1fe65f2b616c0bdb6606db0a02f3903d8a20d9bd
Certificate serial: 01A0D200704BC15FAA76F702EB7362402E2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-ZfK2FsC9tmBtsKAvOQPYog2b0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.mft
Manifest number: E6
Signing time: Thu 24 Sep 2026 06:00:39 +0000
Manifest this update: Thu 24 Sep 2026 06:00:39 +0000
Manifest next update: Fri 25 Sep 2026 06:00:39 +0000
Files and hashes: 1: Ak46-asOg6f893apfz-5UnXkLOQ.roa (hash: Ih6ExCGo6FYRtpTqMJWDMLQgQI7OlDnwThJk2xsctFQ=)
2: H-ZfK2FsC9tmBtsKAvOQPYog2b0.crl (hash: 73iY3qvqpdz9vpEEoHftk0AtwdhZl+K9t7vhwVBjZ1s=)
3: T3hmtjVJ0pIGPxsPUX7Jodsysdg.roa (hash: TRJx9DdiSo189lniYuAWR8maCT8iYXtHoZzttgkFt5k=)
4: Yfi7MUIVXQqbg1C82iKiGDNumqg.roa (hash: 2sxGn69QVvco7Us4OUWBJG4j6XnLH42EKG1hbOQHeSI=)
5: ljw7cDT5mL0x04_8nIe-xA6UgWQ.roa (hash: P5+YtEjNM2sBRzQ0PGWX8dgDC8bNThnGhQEni7Gsebw=)
6: rleI_lIS5woMuB3c6gl94b-COqI.roa (hash: QD88ExDvyIgWPGx1fjBATSvd4/kmty0tfSEnAJh+eY0=)
7: svljudJa91rajYPx0fmVOIVvYy4.roa (hash: KENWVcLSkUOvWMFTwP8jYxXyCqWSFbTijw1QUg6qqj4=)
8: wkk-CAjW8nH2K3kEmzjceaKq94k.roa (hash: UU/D7ID4PKru4t3/Cm98EfKQeds7x948vKruRVhOLmE=)
9: z3dfCKY-XzYavmfFllpELqg3CVU.roa (hash: MftupAXNsvL9dReFS9DSAE/DEUhtlr4ljGLiCkzWkHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.mft
rsync://rpki.ripe.net/repository/DEFAULT/H-ZfK2FsC9tmBtsKAvOQPYog2b0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:70:4b:c1:5f:aa:76:f7:02:eb:73:62:40:2e:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe65f2b616c0bdb6606db0a02f3903d8a20d9bd
Validity
Not Before: Sep 24 06:00:39 2026 GMT
Not After : Sep 25 06:00:39 2026 GMT
Subject: CN=1816519c9ee1849b841798101c591736f519019d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:03:7a:95:24:b5:ef:38:9e:87:1a:fc:87:9d:
c4:27:58:15:8a:4e:63:c6:f5:7b:9a:47:86:29:8b:
9a:6c:63:64:0e:01:8e:39:0f:86:73:c2:97:f9:ca:
8a:b1:7f:ab:1b:e1:50:29:7d:54:3a:34:25:80:56:
f1:99:0b:70:a3:0b:aa:f9:3a:5d:36:b1:d4:94:3b:
90:2c:83:11:76:a9:67:cb:f6:a9:bf:c0:95:da:f9:
ec:23:ce:69:5b:f3:56:0b:ec:2b:b1:d1:49:46:90:
06:87:6a:34:b5:84:9d:60:9c:8e:d9:81:0f:74:ec:
7e:bb:7b:0f:f7:02:e9:fb:7d:66:bc:4b:9d:14:d0:
41:99:56:a3:fe:e5:37:8f:93:d7:e8:84:3c:30:a1:
3f:4f:5a:6e:8e:b2:72:f8:26:04:0b:97:5a:e0:ab:
ca:77:1a:ad:fa:ed:44:a3:78:77:d4:f3:59:05:fb:
d4:50:99:66:80:ac:13:da:92:36:e1:93:8c:eb:7b:
8c:40:08:e7:3d:28:57:f1:bd:92:c2:9a:fa:34:de:
0d:f1:fe:82:44:e5:df:21:2f:b9:a6:e2:8b:ca:6f:
6b:82:8e:cf:2c:32:30:84:dd:21:78:1d:a0:3b:f8:
f7:c7:c8:63:d8:47:62:42:56:ba:b5:f5:2c:5a:ac:
7e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:16:51:9C:9E:E1:84:9B:84:17:98:10:1C:59:17:36:F5:19:01:9D
X509v3 Authority Key Identifier:
keyid:1F:E6:5F:2B:61:6C:0B:DB:66:06:DB:0A:02:F3:90:3D:8A:20:D9:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-ZfK2FsC9tmBtsKAvOQPYog2b0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:c3:71:b3:d0:8a:c5:3f:e1:c3:cc:b9:e6:a7:21:37:2e:45:
96:d6:b8:90:47:ba:26:cd:9f:e4:73:47:3b:7f:c2:53:b9:d3:
fa:84:de:ba:a3:4a:9e:7e:dc:be:85:a1:a5:a1:d9:68:80:8e:
cd:32:63:52:a3:c1:12:7e:38:44:e6:cb:07:dc:f2:dc:cf:7d:
79:c2:d4:6a:56:16:b9:5d:bb:e5:0a:62:7d:73:e9:fd:09:b4:
0d:75:bc:88:ac:a4:c0:b2:fc:fb:1b:f3:13:6f:de:27:bb:d5:
f7:44:14:17:3e:2d:a3:a1:21:2c:5d:b9:a8:0a:cb:a0:e3:18:
d7:9d:02:64:db:6c:14:9e:43:a8:3e:cb:6d:25:68:40:56:df:
ca:8f:de:ea:23:f0:1d:e6:96:10:0f:6c:e5:a7:a9:ff:d9:81:
ef:2a:33:52:13:2b:64:48:5e:67:c2:2d:21:64:82:33:f2:d7:
1a:c6:ce:96:30:98:6e:93:f0:05:8b:5b:90:ab:60:ad:5c:cb:
bb:8e:da:15:8e:87:0b:75:a7:9c:ec:3b:ef:79:eb:59:75:34:
19:7a:11:fe:94:12:5f:6e:bb:c2:72:d3:07:35:70:23:4f:ff:
b5:a1:04:ef:0e:36:21:99:9f:86:71:81:06:cf:7c:bc:57:61:
1b:fe:15:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:16:09 2026 by rpki-client