Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.mft
File: H-ZfK2FsC9tmBtsKAvOQPYog2b0.mft (raw, json)
Hash identifier: B7JbwU/w0Vzqkyp2Sa7u5k1MbNH4Q/zOMOOS67twDQA=
Subject key identifier: 46:78:FB:C5:F5:12:57:BA:0A:AF:D7:21:B1:95:47:BD:24:38:45:FB
Authority key identifier: 1F:E6:5F:2B:61:6C:0B:DB:66:06:DB:0A:02:F3:90:3D:8A:20:D9:BD
Certificate issuer: /CN=1fe65f2b616c0bdb6606db0a02f3903d8a20d9bd
Certificate serial: 01A1DE39A31CDEF9838237C0233766EA8605
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-ZfK2FsC9tmBtsKAvOQPYog2b0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.mft
Manifest number: 0173
Signing time: Sun 15 Nov 2026 08:01:21 +0000
Manifest this update: Sun 15 Nov 2026 08:01:21 +0000
Manifest next update: Mon 16 Nov 2026 08:01:21 +0000
Files and hashes: 1: Ak46-asOg6f893apfz-5UnXkLOQ.roa (hash: Ih6ExCGo6FYRtpTqMJWDMLQgQI7OlDnwThJk2xsctFQ=)
2: H-ZfK2FsC9tmBtsKAvOQPYog2b0.crl (hash: 5JDhy37WNU1QKVwjWt5Q7TKyp91/fy54KzHu/M1MjnE=)
3: NBKbd3vkBnmlzbsINmd4OjNSdzM.roa (hash: QKEEOY1x3cIPXfJpZFjalUuhplHy3cDYf2kIW6a170E=)
4: Yfi7MUIVXQqbg1C82iKiGDNumqg.roa (hash: 2sxGn69QVvco7Us4OUWBJG4j6XnLH42EKG1hbOQHeSI=)
5: dbCzVxas0_qsliPRNAMEfz-pRxU.roa (hash: 49vZcXinvAQdpEtLtHlUszEEKYSFwV346IfbjEAEbuQ=)
6: kauPKbwaOUARfDg5d8F8aNgSNO4.roa (hash: vw523GTo/K45OJ6RNzehhYYWckxE5wHVG39xQrBxD2c=)
7: ljw7cDT5mL0x04_8nIe-xA6UgWQ.roa (hash: P5+YtEjNM2sBRzQ0PGWX8dgDC8bNThnGhQEni7Gsebw=)
8: svljudJa91rajYPx0fmVOIVvYy4.roa (hash: KENWVcLSkUOvWMFTwP8jYxXyCqWSFbTijw1QUg6qqj4=)
9: z3dfCKY-XzYavmfFllpELqg3CVU.roa (hash: MftupAXNsvL9dReFS9DSAE/DEUhtlr4ljGLiCkzWkHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.mft
rsync://rpki.ripe.net/repository/DEFAULT/H-ZfK2FsC9tmBtsKAvOQPYog2b0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:a3:1c:de:f9:83:82:37:c0:23:37:66:ea:86:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe65f2b616c0bdb6606db0a02f3903d8a20d9bd
Validity
Not Before: Nov 15 08:01:21 2026 GMT
Not After : Nov 16 08:01:21 2026 GMT
Subject: CN=4678fbc5f51257ba0aafd721b19547bd243845fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2f:ea:2f:c7:1e:f8:e3:81:e3:7c:4a:07:b3:
88:cb:65:7a:f8:8f:ee:89:6b:81:68:80:ad:be:db:
cf:9a:37:83:42:4b:d4:4e:83:94:90:33:9f:05:c6:
77:76:a9:c6:f9:81:bd:b2:9a:63:97:bc:20:40:db:
a5:26:80:d9:68:12:d9:99:e2:ce:5a:f2:64:0a:87:
d8:e9:01:b1:85:aa:fd:83:47:42:dd:4a:42:96:5c:
d6:0a:a7:0d:d3:7f:20:f2:06:26:56:49:31:66:11:
9c:6a:e6:81:1f:50:be:4a:1c:d4:db:98:90:7b:77:
b3:bb:65:f9:de:5d:e9:b8:56:a7:1b:96:d6:07:59:
ee:65:31:16:41:96:ee:91:7b:0b:e2:ea:b0:8c:87:
1f:6e:2a:8b:4e:99:b0:91:52:1b:a1:f3:9c:01:74:
89:ab:47:3f:3d:97:7c:00:5b:c2:4f:ff:6b:a1:fe:
e5:ca:40:db:cc:90:4d:bc:f6:96:47:bc:4c:1f:60:
7f:6d:76:77:bb:d6:5a:3f:db:db:89:c3:08:d3:af:
be:d6:e6:c2:26:cb:2d:60:69:da:c4:cc:2b:2e:43:
71:2a:f6:50:40:24:e7:d1:a1:61:9d:4e:ce:44:d7:
cb:64:6c:03:f0:06:e1:dd:42:27:9a:99:ed:d6:2f:
a2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:78:FB:C5:F5:12:57:BA:0A:AF:D7:21:B1:95:47:BD:24:38:45:FB
X509v3 Authority Key Identifier:
keyid:1F:E6:5F:2B:61:6C:0B:DB:66:06:DB:0A:02:F3:90:3D:8A:20:D9:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-ZfK2FsC9tmBtsKAvOQPYog2b0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:e2:4f:e1:13:74:24:06:0a:be:e8:68:72:5d:2e:eb:45:71:
8c:1b:af:c6:6e:b7:6d:42:18:33:af:82:a9:c0:e4:d8:3b:95:
8c:d0:63:22:c1:4d:83:6a:0c:6e:4a:95:81:ca:f8:93:98:60:
f2:12:d6:95:4b:86:e8:5a:4d:2a:55:ad:c7:00:af:ac:18:6d:
3d:cf:4b:3f:6f:85:30:08:0e:78:9b:fb:b4:07:79:e0:e0:34:
cb:e2:27:c7:db:c0:72:82:98:a2:f4:a0:f5:26:78:ee:af:a8:
ce:93:2d:6c:9b:02:ff:a1:04:0b:43:26:fd:03:31:4b:75:c3:
55:22:3c:97:69:87:d3:7f:2d:7f:0f:e9:fc:98:06:87:32:10:
0b:18:df:40:ae:50:0e:06:59:8b:19:ac:22:2a:8d:64:60:ee:
d2:6a:45:63:eb:27:c8:fc:b4:18:3b:fa:8a:93:f2:6d:8a:40:
88:c0:5c:34:02:a2:d7:72:9f:6a:fc:dd:28:1a:a2:91:70:68:
0d:01:94:c5:8b:fd:d7:d1:98:36:f4:0d:10:4d:65:49:35:47:
45:80:ed:ef:7c:e1:86:95:bc:44:5d:17:da:ee:fb:28:e2:5d:
04:d7:8b:24:99:97:5d:50:eb:79:24:98:6b:f7:da:d8:7e:22:
60:31:1c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:29:15 2026 by rpki-client