Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
File: H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft (raw, json)
Hash identifier: zGRW8rSn7eGRYwSykzaDzw8itJutBpXfiAKk1+LuCm4=
Subject key identifier: A8:0D:1B:9A:B8:1A:A4:4E:71:2A:3E:ED:53:62:39:1F:9B:48:89:AC
Authority key identifier: 1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34
Certificate issuer: /CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
Certificate serial: 01A002B8E731337EABA357113255F18F5085
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
Manifest number: 1A1E
Signing time: Sat 15 Aug 2026 00:01:07 +0000
Manifest this update: Sat 15 Aug 2026 00:01:07 +0000
Manifest next update: Sun 16 Aug 2026 00:01:07 +0000
Files and hashes: 1: 4dlunOG4UAEe-ftd2u-PbHxSrQc.roa (hash: NOv4IHB1bAsZDm7lNUntBnwOt8270EfmBqRJp4QQC9Q=)
2: H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl (hash: IahxxsDnQ0SlBZXDdEx3c44VYbMQquyKRBZW7zGed2g=)
3: TCMNO3-CS_Nx-NPlLu6HlbDn--Y.roa (hash: JY2kbXROkO8FWfujlDIjurbZxxm0qrKzSX4v6ycpeWY=)
4: U1VMNdLcH6EGpfEiEAMjvjp0-co.roa (hash: venH5NkohIRH0FUb7+mIIfdvhDxYdZexsn9c3WtFFFU=)
5: X5485C7ZqsWTqkySl5Kn8ckUA60.roa (hash: w+70iAnq3DeMprlSCHwSgxGyujS0yHyNG0DURrrh5ls=)
6: Zl6fGzQYTOHjw4PolDvPxgAOgoQ.roa (hash: GhUA9dcCQFJ4Ezs37D2x3nBwq7ffRWZrt0wbE9KxdKY=)
7: aPxKVSvNRXkuueNUo0oD6qVAbdI.roa (hash: 61RoVPH2gZzr7aCEfyXLcJOn37DXu2XNDfa7Kms2beA=)
8: egiEHr2WR8rBb2S9AoXjNrRe6SI.asa (hash: +F1NPoSJ7zieN8nKd424PJvQQuv32Y1xryB26LSSqhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:b8:e7:31:33:7e:ab:a3:57:11:32:55:f1:8f:50:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
Validity
Not Before: Aug 15 00:01:07 2026 GMT
Not After : Aug 16 00:01:07 2026 GMT
Subject: CN=a80d1b9ab81aa44e712a3eed5362391f9b4889ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6f:b4:be:c2:c0:20:4b:c6:eb:4e:21:c2:6e:
32:84:b6:3d:fa:a5:53:b2:1b:9d:fe:52:1b:bb:fc:
e6:54:f2:a7:58:a9:05:19:05:42:57:36:a4:cb:98:
0e:fc:8c:93:5b:5e:59:66:b5:ee:ef:30:6c:df:1f:
64:5d:5b:2f:43:a4:19:d5:ef:94:c3:99:d5:a2:a2:
89:44:c7:ec:dc:d7:fa:86:60:48:50:48:d3:16:a8:
27:db:1d:6b:2e:5f:fa:01:03:7b:e0:39:06:05:6e:
15:a8:a8:cd:48:4b:86:fa:be:73:4d:e5:c3:7c:dc:
7c:3a:76:87:40:ea:2c:e3:d0:98:16:e0:76:cb:76:
d1:30:91:24:b4:44:df:03:27:ea:62:11:1e:cd:f0:
af:fd:40:0a:73:73:19:ff:ef:91:fc:49:66:d8:8d:
a3:ab:32:aa:34:70:ad:aa:aa:ff:02:fe:1d:19:14:
1a:e1:af:b8:09:e7:01:dd:de:63:35:a8:b5:15:c6:
3d:d4:ab:7f:1f:31:b8:2d:04:25:fd:90:ff:85:29:
10:b8:1c:9e:c5:da:b1:cc:24:99:ea:c3:35:af:3b:
cb:36:12:47:86:54:5b:b6:b1:23:d1:a1:db:fc:91:
d0:f2:3b:88:1f:dc:e7:45:96:bb:1d:51:e0:e1:b7:
20:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:0D:1B:9A:B8:1A:A4:4E:71:2A:3E:ED:53:62:39:1F:9B:48:89:AC
X509v3 Authority Key Identifier:
keyid:1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:51:00:ed:2d:1d:c5:a8:b3:6f:d3:79:d5:c9:76:af:82:c8:
f7:57:34:bf:58:32:12:0e:d9:ec:65:9f:aa:4f:2f:8a:ba:42:
ef:1b:75:93:52:0d:9f:a7:f3:f7:4f:67:b0:b6:93:63:64:73:
80:03:1d:28:b9:db:0a:e3:e5:87:69:51:2a:dc:09:d6:31:62:
36:fc:68:4d:4f:63:89:b4:19:ff:3a:46:df:d9:52:82:76:27:
17:79:4f:15:af:a2:af:4f:07:bd:7d:3f:77:22:56:c5:2b:b5:
f8:6c:60:48:f7:13:be:49:8d:12:ad:2a:ff:da:43:e8:cc:bd:
06:dd:9d:ed:3e:64:4c:8f:c0:13:34:18:c3:2a:20:46:ab:31:
5d:f2:fc:1a:bf:48:56:90:4d:1f:0e:d5:13:4a:26:f0:7c:52:
c9:d5:d5:0d:71:87:0a:e1:0b:e2:18:75:a8:94:6c:20:48:6f:
6c:bc:61:6e:9d:c7:ea:5c:25:a2:03:56:3b:b8:0b:58:79:61:
aa:4a:30:ea:fc:f5:ee:40:eb:89:5f:55:89:d4:2c:94:c2:40:
ac:ba:46:e3:d3:8c:c5:43:32:29:6d:3e:d0:81:a2:99:a6:46:
3f:06:15:d5:05:4a:1b:56:f3:63:e5:30:72:6d:c8:88:f2:20:
60:ca:5a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:29:09 2026 by rpki-client