Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
File: H2fPHKLeoy_NlwLdJRDra_K2hhA.mft (raw, json)
Hash identifier: graeRgMQbWm0NtP1v5LRqjgnV9IUeiBOS1ODlyGDbXw=
Subject key identifier: 58:1B:40:22:DF:32:4E:C9:62:83:75:74:AD:ED:15:F6:5B:D2:8E:3E
Authority key identifier: 1F:67:CF:1C:A2:DE:A3:2F:CD:97:02:DD:25:10:EB:6B:F2:B6:86:10
Certificate issuer: /CN=1f67cf1ca2dea32fcd9702dd2510eb6bf2b68610
Certificate serial: 01A103C935D6EB4025958298CBC7F7709B8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
Manifest number: 0A28
Signing time: Sat 03 Oct 2026 22:01:20 +0000
Manifest this update: Sat 03 Oct 2026 22:01:20 +0000
Manifest next update: Sun 04 Oct 2026 22:01:20 +0000
Files and hashes: 1: G6Qimd7tAYQUvnYU3UCWKXw35BE.roa (hash: Y7JkYNH4E9BqcN5WcuNtct/o2Kwq3jTuydqYb5r4gpo=)
2: H2fPHKLeoy_NlwLdJRDra_K2hhA.crl (hash: j2kq8wL1pBqoCrPcLH7BGHEzXWO/oULo5qSkKJF69Ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:c9:35:d6:eb:40:25:95:82:98:cb:c7:f7:70:9b:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f67cf1ca2dea32fcd9702dd2510eb6bf2b68610
Validity
Not Before: Oct 3 22:01:20 2026 GMT
Not After : Oct 4 22:01:20 2026 GMT
Subject: CN=581b4022df324ec962837574aded15f65bd28e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:67:c0:dd:04:2d:36:e8:3b:4e:a1:0b:6b:a8:
b1:a2:89:67:05:d3:7f:e2:02:e2:9f:8f:61:6c:18:
da:b1:d4:1e:44:1f:19:20:be:ef:a7:90:7b:90:35:
cf:06:1e:1b:bd:69:6b:42:26:8e:af:a2:a8:79:62:
f2:7f:1d:18:e1:29:9c:be:18:43:e5:43:54:2e:3d:
72:8e:84:53:1c:f1:fe:81:95:2d:f3:73:fd:fc:2d:
70:00:38:5f:78:33:2e:95:c6:ac:4a:84:f0:62:ab:
09:8f:75:b2:ee:cb:91:99:3c:4f:68:3e:f4:58:72:
da:20:a5:36:37:e7:1a:7a:db:4a:8a:10:38:85:a4:
b1:34:72:12:39:fa:59:95:4e:f8:d7:17:92:38:9e:
a7:88:a8:1f:f9:af:d1:2b:e8:3c:1b:62:a2:08:ff:
87:a9:9c:a1:ca:8a:21:fa:06:20:2b:74:ed:96:49:
9c:97:1e:4c:87:72:8d:54:9a:f1:ef:ef:bd:05:3d:
24:54:ba:36:26:54:29:d7:55:71:f7:3f:69:72:60:
72:55:65:55:85:20:28:60:6d:ba:6e:01:a3:35:bb:
3c:1a:23:5e:00:3d:e4:65:32:12:71:b7:3a:1a:b1:
3a:f9:0d:b6:f8:16:08:33:79:68:a8:0d:5d:53:fe:
dd:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:1B:40:22:DF:32:4E:C9:62:83:75:74:AD:ED:15:F6:5B:D2:8E:3E
X509v3 Authority Key Identifier:
keyid:1F:67:CF:1C:A2:DE:A3:2F:CD:97:02:DD:25:10:EB:6B:F2:B6:86:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:e5:84:f4:ed:91:23:61:91:54:2c:ec:ea:1c:8a:36:ab:6f:
0c:13:2d:5c:a5:ed:a4:ee:8b:e0:d7:7a:58:c7:a2:f7:cd:41:
1a:7f:ea:f5:b4:6d:7d:c7:0b:65:77:21:d3:88:9f:3c:70:87:
90:c5:fc:39:74:59:83:83:bd:76:4f:05:5e:61:8c:bb:90:c6:
f6:fe:47:d3:a5:ed:7a:5a:1b:e1:79:9a:6c:e1:96:6c:7b:ed:
5a:a1:3d:28:a9:8a:8b:cd:54:18:68:ff:ff:6b:5d:e3:9b:eb:
69:2f:dd:27:96:c7:9b:8b:d8:2a:dc:df:83:63:1f:76:74:e5:
ac:e0:e7:bd:42:e2:02:d2:6d:41:46:9b:03:dd:82:d6:4a:e3:
6f:e5:04:26:4a:d1:bf:41:d6:60:f1:d8:ce:3c:ea:85:92:54:
b5:c5:a5:97:a6:ca:39:85:00:8e:80:e7:40:2b:b8:c0:8f:3f:
36:d1:90:cf:f8:0c:67:2d:71:1e:6e:07:55:77:d0:53:5d:fe:
65:e4:22:bc:f9:3f:7c:f3:e4:27:92:12:f2:cf:71:04:6c:1c:
53:f9:8a:ab:76:39:48:dd:ec:df:94:fe:29:e5:6a:d8:30:4b:
87:8f:4c:93:fd:af:b0:a5:31:d4:ae:bc:95:1d:0c:2e:73:9f:
66:8c:7f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:12:26 2026 by rpki-client