Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
File: H2fPHKLeoy_NlwLdJRDra_K2hhA.mft (raw, json)
Hash identifier: VFX963G5fcdxzxnSqA2UvcPhnKgEmpX8SS9DX7YEDSg=
Subject key identifier: BD:51:68:6B:57:31:E9:CF:0E:C3:6C:26:01:F4:3B:C3:51:40:B6:F4
Authority key identifier: 1F:67:CF:1C:A2:DE:A3:2F:CD:97:02:DD:25:10:EB:6B:F2:B6:86:10
Certificate issuer: /CN=1f67cf1ca2dea32fcd9702dd2510eb6bf2b68610
Certificate serial: 01A10B829266DF996B4E88792C5C6798FABF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
Manifest number: 0A2C
Signing time: Mon 05 Oct 2026 10:01:08 +0000
Manifest this update: Mon 05 Oct 2026 10:01:08 +0000
Manifest next update: Tue 06 Oct 2026 10:01:08 +0000
Files and hashes: 1: G6Qimd7tAYQUvnYU3UCWKXw35BE.roa (hash: Y7JkYNH4E9BqcN5WcuNtct/o2Kwq3jTuydqYb5r4gpo=)
2: H2fPHKLeoy_NlwLdJRDra_K2hhA.crl (hash: QMOV/q5BODIBt7biGgcwEnEiQo/ffrl2HhgifXi6wro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 10:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:82:92:66:df:99:6b:4e:88:79:2c:5c:67:98:fa:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f67cf1ca2dea32fcd9702dd2510eb6bf2b68610
Validity
Not Before: Oct 5 10:01:08 2026 GMT
Not After : Oct 6 10:01:08 2026 GMT
Subject: CN=bd51686b5731e9cf0ec36c2601f43bc35140b6f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fa:50:57:91:22:37:87:ea:29:65:f8:a1:87:
10:fc:52:e1:a9:dc:07:43:e7:d8:ef:92:5c:3d:37:
a8:47:91:ef:81:2f:20:06:b4:e9:a1:40:45:63:82:
2e:a5:f0:70:e3:6e:7b:b0:13:70:01:e9:fe:d5:72:
a7:20:87:e3:44:54:fe:d1:0c:a8:82:fe:b8:cd:5e:
01:82:21:b6:4e:cb:57:66:fd:c8:a2:7c:d9:a3:96:
72:9e:56:65:77:d7:f0:f4:a8:44:dc:6a:e2:2a:5f:
e0:82:00:73:32:b0:45:52:f9:f3:20:a3:3c:99:70:
c7:36:90:f6:eb:ac:11:99:6d:97:45:79:2c:95:fb:
2d:12:5b:18:0b:04:b7:9b:08:6f:67:92:28:6d:e2:
f7:35:5b:f9:c0:7d:d7:c8:17:8d:91:b8:96:86:0f:
3a:85:f6:e3:1c:50:f5:94:3e:dd:c5:bd:9d:c4:21:
0f:3e:3e:ad:37:ab:2c:3c:af:54:ea:d7:f9:a4:04:
d8:14:2b:fe:a3:9c:ac:b4:81:b8:6b:03:ab:74:6f:
81:d1:f8:88:41:03:00:05:cd:bf:5c:89:43:03:91:
ac:17:f9:47:26:ce:18:2e:26:42:bf:11:10:7b:e7:
7d:c2:02:21:75:96:e3:2c:af:ba:62:66:f7:36:73:
79:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:51:68:6B:57:31:E9:CF:0E:C3:6C:26:01:F4:3B:C3:51:40:B6:F4
X509v3 Authority Key Identifier:
keyid:1F:67:CF:1C:A2:DE:A3:2F:CD:97:02:DD:25:10:EB:6B:F2:B6:86:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:91:94:a4:3f:6c:0a:c3:0c:b2:84:49:ac:c7:cd:cf:6e:99:
91:90:96:de:7b:cf:1d:e4:f4:09:ed:8a:d5:be:85:56:db:af:
ba:9e:e3:eb:14:3a:83:af:09:61:06:9d:e8:ea:56:de:6e:78:
f7:14:98:ce:66:3d:ba:ae:26:0a:56:47:8e:17:43:6f:73:63:
27:7f:3a:65:ae:d2:85:f2:d9:eb:92:5c:32:3e:28:d4:a7:ae:
bf:71:1b:7e:57:1f:46:4f:4f:6c:d8:97:42:5c:3c:be:c5:bb:
44:2d:ae:31:23:da:a4:9e:bc:b9:44:ff:5b:b2:8e:e1:23:a2:
30:be:3e:91:1c:84:03:57:e3:81:d4:47:93:9c:15:2f:9a:2e:
ab:b2:dc:29:cc:e1:84:bf:94:f3:03:12:0a:84:4f:84:4b:6a:
66:04:a1:9f:41:e0:1e:a9:18:66:56:7f:8b:04:5b:59:e9:a0:
d1:20:3c:b9:4c:54:4c:82:bc:82:14:79:59:60:cf:0d:ad:47:
77:19:5b:ac:c3:d3:aa:81:e0:f1:0a:50:60:36:b7:d2:f0:6d:
44:de:53:14:53:fb:35:68:ac:72:5e:43:be:15:d8:ca:2f:0e:
0b:e4:9f:73:b7:4c:7e:ae:f2:39:5a:b9:bf:9e:3d:5a:6a:fd:
63:2f:61:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 18:15:11 2026 by rpki-client