Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
File: H2fPHKLeoy_NlwLdJRDra_K2hhA.mft (raw, json)
Hash identifier: CgjxkaZ+b4qonzWUE6IdHMHy2KcvXBJKM2kP4jgY6bw=
Subject key identifier: 3B:E7:1D:65:7C:00:A6:CC:B3:12:7D:06:87:52:A8:66:1B:68:42:41
Authority key identifier: 1F:67:CF:1C:A2:DE:A3:2F:CD:97:02:DD:25:10:EB:6B:F2:B6:86:10
Certificate issuer: /CN=1f67cf1ca2dea32fcd9702dd2510eb6bf2b68610
Certificate serial: 019F92ED13EDA264CD7662E9E4C4D4A5E1C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
Manifest number: 0969
Signing time: Fri 24 Jul 2026 07:00:38 +0000
Manifest this update: Fri 24 Jul 2026 07:00:38 +0000
Manifest next update: Sat 25 Jul 2026 07:00:38 +0000
Files and hashes: 1: G6Qimd7tAYQUvnYU3UCWKXw35BE.roa (hash: Y7JkYNH4E9BqcN5WcuNtct/o2Kwq3jTuydqYb5r4gpo=)
2: H2fPHKLeoy_NlwLdJRDra_K2hhA.crl (hash: ZrSVaC81GlYPTp9QXJaiQ6l7whS7w67piFe6UFnm/FI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:13:ed:a2:64:cd:76:62:e9:e4:c4:d4:a5:e1:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f67cf1ca2dea32fcd9702dd2510eb6bf2b68610
Validity
Not Before: Jul 24 07:00:38 2026 GMT
Not After : Jul 25 07:00:38 2026 GMT
Subject: CN=3be71d657c00a6ccb3127d068752a8661b684241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d6:51:87:ac:ba:98:d8:65:59:2d:68:a2:ba:
d3:4b:19:80:66:ce:99:2d:41:7f:bc:37:df:a3:8f:
2b:26:e7:0a:00:08:ea:24:91:00:10:3b:c6:1e:d1:
7a:c2:ed:78:9b:bb:9c:d1:98:3e:a4:d2:23:76:ad:
dc:12:a4:d8:68:0c:d9:1b:f8:3b:be:f4:84:70:8d:
0e:78:dc:17:b2:a4:db:e3:8c:73:89:e3:97:69:aa:
a6:3e:f7:23:87:61:32:84:ea:a6:53:e0:66:18:43:
02:7f:5e:13:5c:be:fd:d7:89:d7:06:1f:38:77:ab:
25:32:24:ed:a3:bd:43:22:11:52:76:34:4f:2a:55:
b8:f3:c7:0e:9c:09:76:53:8a:29:cd:c1:b4:b7:b3:
df:be:29:46:09:8f:e7:93:03:a9:9a:07:2e:69:ef:
b1:d9:63:d2:28:6b:5f:59:7e:67:16:a0:90:57:71:
b5:78:36:8a:c7:db:dc:9e:f0:4c:68:e7:76:24:2b:
e9:2f:72:7a:d3:db:0c:1b:59:87:e5:df:89:cc:b0:
b2:dc:1e:c7:90:72:04:54:9b:eb:fd:2b:01:43:d7:
66:b2:6c:bf:47:48:89:d9:a1:6e:d4:d9:d1:c7:56:
22:80:ed:32:22:86:4c:d6:66:9a:79:4f:5c:17:da:
9d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E7:1D:65:7C:00:A6:CC:B3:12:7D:06:87:52:A8:66:1B:68:42:41
X509v3 Authority Key Identifier:
keyid:1F:67:CF:1C:A2:DE:A3:2F:CD:97:02:DD:25:10:EB:6B:F2:B6:86:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:75:78:ef:7f:15:03:d6:52:9e:7b:84:2b:56:f4:98:fe:84:
a7:79:94:7f:e9:b8:ba:e3:bb:06:73:a7:f9:1b:41:2d:9d:82:
74:4c:e8:31:8f:a0:40:ed:8f:c5:3e:92:2c:bd:b0:5d:09:41:
a2:81:b9:f1:fe:a6:69:fd:4b:d0:4d:df:ee:8b:84:16:6b:26:
6c:e8:22:01:26:3d:0a:36:0f:89:33:42:7f:9e:6c:62:97:af:
95:71:6a:c2:8e:ec:88:b7:99:dd:dd:4f:ae:e0:1f:f0:6a:35:
6b:94:51:95:98:b7:c1:e9:28:fb:58:5e:27:b7:61:83:4f:01:
34:d1:0f:7f:42:f8:8e:c7:1d:32:f7:fc:96:84:0f:9b:95:2b:
bd:1e:f1:d8:cf:21:6b:47:0d:1b:aa:8e:34:45:5a:1e:1f:f8:
39:11:55:aa:03:f5:b5:8c:4c:e8:55:9a:e7:ab:82:5b:fb:fd:
31:19:44:11:8c:25:4a:a8:8e:a1:4f:6f:f9:c6:7d:b7:33:91:
8e:5c:56:65:c6:0b:53:ce:67:d1:7b:19:6b:67:81:fb:c8:63:
67:d0:38:4f:75:3f:7e:5f:28:cd:28:b8:64:35:15:04:cf:32:
ce:16:5d:31:85:16:f8:4c:e0:b9:64:10:5a:d1:e7:14:ce:78:
da:4b:5a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:56:10 2026 by rpki-client