Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
File: H2fPHKLeoy_NlwLdJRDra_K2hhA.mft (raw, json)
Hash identifier: /J8+5eUDyakxum7p7Kx7blOaApyg+G180a8JHH5b78E=
Subject key identifier: 6D:DC:89:FF:D4:6C:C9:22:17:17:E1:22:FC:FB:B8:43:C8:BE:17:7D
Authority key identifier: 1F:67:CF:1C:A2:DE:A3:2F:CD:97:02:DD:25:10:EB:6B:F2:B6:86:10
Certificate issuer: /CN=1f67cf1ca2dea32fcd9702dd2510eb6bf2b68610
Certificate serial: 019E2023D1D66361B1C57F8C684BCEB0D1D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
Manifest number: 08A9
Signing time: Wed 13 May 2026 07:01:18 +0000
Manifest this update: Wed 13 May 2026 07:01:18 +0000
Manifest next update: Thu 14 May 2026 07:01:18 +0000
Files and hashes: 1: G6Qimd7tAYQUvnYU3UCWKXw35BE.roa (hash: Y7JkYNH4E9BqcN5WcuNtct/o2Kwq3jTuydqYb5r4gpo=)
2: H2fPHKLeoy_NlwLdJRDra_K2hhA.crl (hash: dV31FcLOH766RR0KRhdsRV0+F+megb8l03oM0d7r6/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:d1:d6:63:61:b1:c5:7f:8c:68:4b:ce:b0:d1:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f67cf1ca2dea32fcd9702dd2510eb6bf2b68610
Validity
Not Before: May 13 07:01:18 2026 GMT
Not After : May 14 07:01:18 2026 GMT
Subject: CN=6ddc89ffd46cc9221717e122fcfbb843c8be177d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:23:b6:82:5e:ec:97:8b:92:9c:42:c3:8a:1e:
be:86:c0:6a:6c:5d:b7:e4:b9:21:9f:70:c8:7a:4f:
55:d2:d1:de:c4:0d:ad:c8:d3:8d:ff:fd:d9:ec:bc:
14:42:34:28:bd:24:2b:06:b2:15:13:bc:b3:13:43:
86:cd:31:f9:0d:9f:4b:86:19:d6:c7:86:5c:39:46:
3c:24:f9:6b:ae:51:2a:49:6f:4b:3c:e8:67:10:f5:
f0:c7:03:d3:49:65:f8:1a:f8:fd:67:96:84:33:10:
07:f8:ff:5e:97:de:66:72:29:95:68:7d:49:fd:9c:
94:28:c9:e1:fd:af:00:15:0f:b7:fa:63:b9:b6:58:
03:4a:e0:ef:90:b5:8c:96:94:bc:73:e9:37:7e:14:
43:90:a5:4c:99:12:92:39:23:fe:36:4d:12:34:3e:
1c:25:ab:f5:fd:6f:0d:1b:a3:81:82:aa:db:28:c9:
33:d7:3c:bd:9d:f0:c4:7c:38:50:26:b4:8b:24:0d:
59:d5:c7:84:4a:61:9e:16:24:93:4e:78:1a:a8:38:
15:da:31:51:bf:d2:ea:30:45:57:d3:73:88:21:56:
e1:93:16:20:f8:c6:13:dd:68:7f:3f:bf:22:26:ec:
43:ce:17:9c:a5:f4:03:c5:a7:41:9a:ed:9c:7f:8c:
b8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:DC:89:FF:D4:6C:C9:22:17:17:E1:22:FC:FB:B8:43:C8:BE:17:7D
X509v3 Authority Key Identifier:
keyid:1F:67:CF:1C:A2:DE:A3:2F:CD:97:02:DD:25:10:EB:6B:F2:B6:86:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:f5:90:21:49:c0:67:ea:04:16:b5:cb:40:7d:9e:56:88:72:
cd:74:36:d7:7f:a2:1d:a9:48:d8:06:a4:c5:7d:43:84:74:73:
5e:9c:26:ad:24:2c:31:fc:f5:d6:1c:8d:58:e9:72:b5:65:eb:
7f:df:91:09:69:5c:39:7b:f1:c8:b0:4c:31:c0:7c:ce:48:55:
63:b3:a6:a1:78:46:5c:22:66:7e:30:33:ee:a0:d0:90:4a:7e:
ee:2f:fc:65:8b:74:79:b2:50:bf:8a:be:ef:f7:e0:ca:51:fb:
5f:17:d5:60:f2:20:b8:9c:d2:b7:7d:2e:29:a2:0d:86:b9:d6:
ee:49:f9:97:62:6f:2d:3b:de:86:79:c1:2d:e6:97:cf:80:39:
f8:54:30:af:d2:81:40:3e:a4:57:f2:94:6e:28:47:78:43:ef:
dc:29:37:10:c6:31:20:e1:5a:dd:08:02:8f:5d:e3:5d:ef:7d:
de:a1:38:3a:f9:5c:c6:bf:74:01:5b:49:5d:bf:34:4b:16:be:
ac:98:e2:9d:f8:69:f4:10:ae:0e:60:5b:ae:64:c6:6d:cd:43:
8f:93:65:9d:dd:0f:5d:18:1e:c7:78:6a:81:62:3e:26:d9:8a:
7a:7b:33:4a:e1:6f:3a:2b:0a:91:42:2f:2b:71:a0:b1:05:92:
e0:9a:43:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:52:17 2026 by rpki-client