Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft
File: H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft (raw, json)
Hash identifier: zZv6N9nKzn7oqZB5oQPOs00bvnye/n4sO9+gGz9c2dc=
Subject key identifier: 4A:B2:F8:03:8C:F2:56:FE:88:B8:10:0E:27:75:EC:4F:05:A1:66:00
Authority key identifier: 1F:68:8F:98:57:D9:E4:40:C1:05:8D:C8:95:9E:49:F8:B3:18:3F:61
Certificate issuer: /CN=1f688f9857d9e440c1058dc8959e49f8b3183f61
Certificate serial: 01A0DFBCA073C1C206735DA127F52F48FB6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft
Manifest number: 1A73
Signing time: Sat 26 Sep 2026 22:01:16 +0000
Manifest this update: Sat 26 Sep 2026 22:01:16 +0000
Manifest next update: Sun 27 Sep 2026 22:01:16 +0000
Files and hashes: 1: 5ISKJbp4rbTdCWF2uAdFb5yPoJI.roa (hash: OH5/o4eCRTtPdgmEfAYqQLH3iOBiZD4gNNNHJ0XoTvs=)
2: H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.crl (hash: UBVwTmHPPs3qtQCvQievzfKrGkb0nXJViAR/lC/5ch4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 22:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:bc:a0:73:c1:c2:06:73:5d:a1:27:f5:2f:48:fb:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f688f9857d9e440c1058dc8959e49f8b3183f61
Validity
Not Before: Sep 26 22:01:16 2026 GMT
Not After : Sep 27 22:01:16 2026 GMT
Subject: CN=4ab2f8038cf256fe88b8100e2775ec4f05a16600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:99:73:0f:62:a3:94:09:84:ce:4d:0f:82:90:
d7:c4:c0:34:92:4b:3f:e9:ca:4e:04:e6:f4:6f:db:
59:00:a3:f4:6a:3a:09:4b:10:70:54:d0:09:e3:c4:
4c:0e:16:54:b4:e5:83:98:d3:bd:2d:bb:b6:71:0a:
55:fc:98:89:64:c5:f3:14:46:79:2e:93:fd:49:8b:
ef:76:90:ef:89:bc:05:a5:8d:fa:c3:9e:3b:11:23:
e5:5d:62:a2:01:2c:2a:33:e0:a1:80:66:d3:94:0b:
cb:6c:b7:25:2c:12:9d:5e:8a:1f:de:5f:ac:5b:81:
16:73:57:9f:2a:d0:26:8d:89:83:e2:d0:13:a2:65:
40:ea:d0:06:a8:08:b8:f0:09:24:50:76:35:dd:0d:
74:cf:0a:6f:dd:f9:f0:4d:14:10:54:fc:71:6d:62:
8b:aa:6a:ba:c5:4e:36:05:2d:3b:1e:3e:cc:7a:e0:
2b:c0:6d:6c:77:37:5e:e3:a5:83:04:ec:c8:b5:f1:
b1:6c:a4:63:af:33:a5:20:c4:fd:51:55:e4:82:67:
4a:0a:11:c3:7c:d3:40:f4:bd:50:58:ce:98:23:c7:
34:8f:6b:ed:93:62:04:6a:47:7f:5c:fd:c9:32:88:
8d:a7:ae:d4:00:ef:64:d2:84:63:12:95:83:d9:de:
b4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B2:F8:03:8C:F2:56:FE:88:B8:10:0E:27:75:EC:4F:05:A1:66:00
X509v3 Authority Key Identifier:
keyid:1F:68:8F:98:57:D9:E4:40:C1:05:8D:C8:95:9E:49:F8:B3:18:3F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:60:54:17:5d:a6:5b:60:9b:81:e0:88:83:89:70:f1:c4:97:
1a:45:fc:e8:a9:c4:78:f2:98:ab:6d:e0:cd:d7:48:20:af:2a:
57:c3:e6:12:5b:45:be:40:c1:f6:62:74:22:07:86:e3:ae:0c:
11:52:23:b7:da:2e:d5:f9:c2:6b:d2:c9:0e:10:52:20:7f:d6:
da:26:bc:02:17:78:3c:42:bf:e2:4e:7f:1e:ee:8d:42:86:02:
be:41:7c:d0:3a:58:de:1e:63:f4:da:01:6d:c2:e0:6c:e0:98:
ef:16:d8:b7:55:bb:8c:f1:f9:ab:14:0e:1d:2a:10:db:d2:9f:
b8:b9:18:12:3d:ef:a0:6f:95:df:42:fe:f8:19:e3:a1:ca:fd:
05:c1:85:2f:77:78:c4:9d:7f:d9:3a:36:01:22:c8:6e:71:ef:
89:06:65:50:5c:ac:24:45:e2:60:51:ce:a4:d3:8f:1e:1f:bd:
10:ea:8c:5b:fe:be:db:a6:b8:d8:7a:20:5e:4e:60:ee:38:83:
93:77:dc:34:d8:dd:e5:1a:74:de:c9:ee:e6:2f:dc:95:a1:44:
b0:e6:db:39:e9:5c:b0:62:01:cf:69:8e:48:45:c1:05:65:3e:
7c:7d:4e:70:cc:13:43:f3:ce:9d:b3:a6:db:74:cd:14:24:c3:
e5:3c:62:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDfvKBzwcIGc12hJ/UvSPtuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNjg4Zjk4NTdkOWU0NDBjMTA1OGRjODk1OWU0OWY4YjMx
ODNmNjEwHhcNMjYwOTI2MjIwMTE2WhcNMjYwOTI3MjIwMTE2WjAzMTEwLwYDVQQD
Eyg0YWIyZjgwMzhjZjI1NmZlODhiODEwMGUyNzc1ZWM0ZjA1YTE2NjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlplzD2KjlAmEzk0PgpDXxMA0kks/
6cpOBOb0b9tZAKP0ajoJSxBwVNAJ48RMDhZUtOWDmNO9Lbu2cQpV/JiJZMXzFEZ5
LpP9SYvvdpDvibwFpY36w547ESPlXWKiASwqM+ChgGbTlAvLbLclLBKdXoof3l+s
W4EWc1efKtAmjYmD4tATomVA6tAGqAi48AkkUHY13Q10zwpv3fnwTRQQVPxxbWKL
qmq6xU42BS07Hj7MeuArwG1sdzde46WDBOzItfGxbKRjrzOlIMT9UVXkgmdKChHD
fNNA9L1QWM6YI8c0j2vtk2IEakd/XP3JMoiNp67UAO9k0oRjEpWD2d60MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqy+AOM8lb+iLgQDid17E8FoWYAMB8GA1UdIwQY
MBaAFB9oj5hX2eRAwQWNyJWeSfizGD9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDJpUG1GZlo1RURCQlkzSWxaNUotTE1ZUDJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8wNTc3ODAtNTJlOC00Nzc3LThhMjUt
MDIxYzJlMDczNWIxLzEvSDJpUG1GZlo1RURCQlkzSWxaNUotTE1ZUDJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8wNTc3ODAtNTJlOC00Nzc3LThhMjUtMDIxYzJlMDczNWIx
LzEvSDJpUG1GZlo1RURCQlkzSWxaNUotTE1ZUDJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvGBUF12m
W2CbgeCIg4lw8cSXGkX86KnEePKYq23gzddIIK8qV8PmEltFvkDB9mJ0IgeG464M
EVIjt9ou1fnCa9LJDhBSIH/W2ia8Ahd4PEK/4k5/Hu6NQoYCvkF80DpY3h5j9NoB
bcLgbOCY7xbYt1W7jPH5qxQOHSoQ29KfuLkYEj3voG+V30L++Bnjocr9BcGFL3d4
xJ1/2To2ASLIbnHviQZlUFysJEXiYFHOpNOPHh+9EOqMW/6+26a42HogXk5g7jiD
k3fcNNjd5Rp03snu5i/claFEsObbOelcsGIBz2mOSEXBBWU+fH1OcMwTQ/POnbOm
23TNFCTD5TxiXQ==
-----END CERTIFICATE-----
Generated at Sun Sep 27 08:32:46 2026 by rpki-client