Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
File: H2fPHKLeoy_NlwLdJRDra_K2hhA.mft (raw, json)
Hash identifier: wgeZGD2l2++23LKGhKdTb2cJo6umEa6L5BN1XjH5l+E=
Subject key identifier: A4:3D:50:34:C6:C5:80:70:E8:6D:B9:F7:91:AE:98:7F:0E:6D:B0:5E
Authority key identifier: 1F:67:CF:1C:A2:DE:A3:2F:CD:97:02:DD:25:10:EB:6B:F2:B6:86:10
Certificate issuer: /CN=1f67cf1ca2dea32fcd9702dd2510eb6bf2b68610
Certificate serial: 019D270446AD4D3369DEFC948879F1A99197
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
Manifest number: 0828
Signing time: Wed 25 Mar 2026 22:01:24 +0000
Manifest this update: Wed 25 Mar 2026 22:01:24 +0000
Manifest next update: Thu 26 Mar 2026 22:01:24 +0000
Files and hashes: 1: G6Qimd7tAYQUvnYU3UCWKXw35BE.roa (hash: Y7JkYNH4E9BqcN5WcuNtct/o2Kwq3jTuydqYb5r4gpo=)
2: H2fPHKLeoy_NlwLdJRDra_K2hhA.crl (hash: Q8xGJ97smgCn1A0DypmG4dQWggxLewuYe+3QluEICko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:46:ad:4d:33:69:de:fc:94:88:79:f1:a9:91:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f67cf1ca2dea32fcd9702dd2510eb6bf2b68610
Validity
Not Before: Mar 25 22:01:24 2026 GMT
Not After : Mar 26 22:01:24 2026 GMT
Subject: CN=a43d5034c6c58070e86db9f791ae987f0e6db05e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1b:f0:b4:f9:6c:72:53:44:ad:ad:2f:80:04:
c4:19:78:89:43:a6:a0:0f:7f:60:ea:84:ae:03:28:
a6:5e:1e:8e:ae:ff:a5:c0:ef:b7:5e:35:53:eb:67:
6c:b4:7f:a5:32:ed:a0:af:f2:87:a1:3a:11:1f:00:
a8:6a:7a:47:c8:73:ea:e5:72:42:0a:ab:48:e7:64:
f7:70:b8:c6:d4:e0:a1:54:33:34:47:a3:73:2b:a1:
e1:49:a2:d2:74:5a:43:8e:f1:0f:ef:a5:19:65:7d:
63:88:b4:70:da:f1:c5:92:81:69:6b:63:32:9a:1a:
de:d6:4f:9d:dc:dd:6f:81:02:e7:59:53:ba:43:70:
d8:5b:59:82:0e:2c:55:23:f5:f8:62:52:af:36:23:
88:c1:18:8d:70:26:6f:4f:54:21:59:d8:2f:9d:51:
f2:4d:d3:9e:e3:22:6a:04:d8:94:95:c5:e2:c0:0c:
76:a3:ef:73:cf:30:b3:bd:e4:6b:bb:a5:8d:b3:ba:
1b:08:04:12:a7:22:27:fb:41:fb:c4:e1:f1:e8:7f:
7f:8e:16:2f:ea:6f:53:55:66:ed:c7:8c:53:fb:3f:
5c:de:ea:48:ee:10:c1:8d:ac:45:96:70:1b:af:b8:
40:cd:0e:d6:de:52:2c:9c:79:fd:4c:ed:58:c5:ba:
22:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:3D:50:34:C6:C5:80:70:E8:6D:B9:F7:91:AE:98:7F:0E:6D:B0:5E
X509v3 Authority Key Identifier:
keyid:1F:67:CF:1C:A2:DE:A3:2F:CD:97:02:DD:25:10:EB:6B:F2:B6:86:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:5e:6d:21:e9:75:ac:5b:29:52:cd:a3:c6:ad:19:16:db:5f:
2b:56:2a:d4:f0:ef:2b:c8:0d:f8:5a:1c:7f:08:0f:95:9d:a0:
30:02:17:7f:35:9a:cd:9a:19:da:9a:79:48:6b:a7:64:39:3a:
22:14:75:d1:ea:e0:83:78:ff:3b:36:8b:76:25:13:78:47:bd:
ba:5a:f8:79:d4:a6:38:6f:d2:66:09:f0:ed:f6:42:ba:5d:bb:
73:ff:ba:3a:25:a8:7f:95:aa:18:99:54:10:ba:de:7b:58:7e:
88:41:81:a8:6e:5f:19:74:48:bc:bf:d5:ac:3e:05:a0:2d:58:
fb:3e:58:fc:18:7a:00:b4:f5:49:11:3e:84:b5:85:6d:28:51:
29:fb:50:52:a8:ff:b3:68:89:6b:1d:53:e3:eb:78:60:3e:33:
d6:9b:ea:12:f1:25:2f:09:11:21:2f:03:14:b6:fb:48:c5:0f:
ec:33:78:77:9e:f3:49:c8:fa:bb:b6:57:dc:6e:33:fa:dc:53:
dd:4c:5f:6a:3d:4c:35:ca:a2:33:75:6b:b2:59:d4:5a:cc:9d:
1e:83:ab:59:62:53:06:51:67:29:bd:8f:86:8e:6f:c8:87:03:
77:d4:da:be:35:ef:3f:fc:c8:67:be:24:60:25:61:43:0f:6d:
a2:ce:17:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:26:46 2026 by rpki-client