Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/2cefa4-7fdf-4108-8a27-ad5cf840574d/1/h2-Iu0yzbPQtadF42cItt5pUNBY.mft
File: h2-Iu0yzbPQtadF42cItt5pUNBY.mft (raw, json)
Hash identifier: H0mRc3QqGgt1S4vmmwxJKqfaW+Zq6uuJ2zBtHJYlcLQ=
Subject key identifier: 0E:74:51:57:B7:A9:5A:56:DB:28:FD:6E:7F:8D:8A:76:42:59:7A:B2
Authority key identifier: 87:6F:88:BB:4C:B3:6C:F4:2D:69:D1:78:D9:C2:2D:B7:9A:54:34:16
Certificate issuer: /CN=876f88bb4cb36cf42d69d178d9c22db79a543416
Certificate serial: 01A153655476E9082BC107E2091CF37AA102
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h2-Iu0yzbPQtadF42cItt5pUNBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/2cefa4-7fdf-4108-8a27-ad5cf840574d/1/h2-Iu0yzbPQtadF42cItt5pUNBY.mft
Manifest number: 5C
Signing time: Mon 19 Oct 2026 09:01:52 +0000
Manifest this update: Mon 19 Oct 2026 09:01:52 +0000
Manifest next update: Tue 20 Oct 2026 09:01:52 +0000
Files and hashes: 1: SjRf8Xsl4sdFLcqJPbz2Pap3-vc.roa (hash: x2BiC1m4re7zXu1B5lAPa0uVVp+yoZEe6Ilh5DtaMvY=)
2: h2-Iu0yzbPQtadF42cItt5pUNBY.crl (hash: ktXwT8Z7wpJiRuJnkWOYup+UfUcUwTjRWhObYdDLQ68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/2cefa4-7fdf-4108-8a27-ad5cf840574d/1/h2-Iu0yzbPQtadF42cItt5pUNBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/2cefa4-7fdf-4108-8a27-ad5cf840574d/1/h2-Iu0yzbPQtadF42cItt5pUNBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/h2-Iu0yzbPQtadF42cItt5pUNBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 09:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:65:54:76:e9:08:2b:c1:07:e2:09:1c:f3:7a:a1:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=876f88bb4cb36cf42d69d178d9c22db79a543416
Validity
Not Before: Oct 19 09:01:52 2026 GMT
Not After : Oct 20 09:01:52 2026 GMT
Subject: CN=0e745157b7a95a56db28fd6e7f8d8a7642597ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1d:69:65:72:17:f9:62:ab:71:96:b0:fc:24:
1c:5f:6b:55:1a:6f:da:84:ee:4f:7a:63:08:c5:26:
56:f5:31:81:d5:1f:57:06:da:f8:95:ea:18:4d:1a:
03:df:74:a4:e9:2a:80:06:d9:7a:88:c9:16:ae:0c:
2c:04:f8:95:75:50:85:a9:1a:22:8f:d5:bc:3c:42:
a5:b8:d0:70:9c:1e:f9:09:13:2e:ba:32:0d:23:ba:
b8:37:5c:85:ef:e9:24:f4:88:a9:9d:5c:79:fe:52:
39:36:16:52:80:d3:0a:64:9a:35:93:75:92:2c:c7:
a2:38:57:41:ce:2b:c7:01:55:0a:13:93:f2:85:55:
37:73:39:94:c0:c5:bb:3d:36:ab:d5:59:b2:96:53:
40:d5:c0:7b:87:4e:f7:2b:e1:75:52:a8:07:b6:95:
3e:44:8c:43:22:e2:34:c6:88:16:e4:9f:56:be:fd:
37:05:5d:8a:2b:8b:e5:19:50:ac:8f:8b:1a:08:5c:
cb:d1:db:4a:3d:c7:0e:34:53:df:e1:42:39:f4:26:
71:fd:b4:40:db:7c:e7:e7:42:a3:7a:36:19:f7:53:
71:93:aa:30:a8:3d:28:9a:1c:ac:28:4a:4e:84:71:
e2:98:35:60:6b:6f:30:d6:13:77:1c:a8:7e:92:84:
fe:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:74:51:57:B7:A9:5A:56:DB:28:FD:6E:7F:8D:8A:76:42:59:7A:B2
X509v3 Authority Key Identifier:
keyid:87:6F:88:BB:4C:B3:6C:F4:2D:69:D1:78:D9:C2:2D:B7:9A:54:34:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h2-Iu0yzbPQtadF42cItt5pUNBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/2cefa4-7fdf-4108-8a27-ad5cf840574d/1/h2-Iu0yzbPQtadF42cItt5pUNBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/2cefa4-7fdf-4108-8a27-ad5cf840574d/1/h2-Iu0yzbPQtadF42cItt5pUNBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:88:d3:2c:2c:84:d9:79:b6:c5:49:44:1f:4a:04:6a:c4:03:
a7:86:40:09:0d:b1:95:c4:ca:e8:b4:b2:34:d2:d8:05:1a:0a:
6c:8c:14:d0:3c:a3:08:b1:ba:43:94:64:83:82:2e:cd:72:b1:
38:81:f4:85:11:a2:0b:6f:6d:0d:f0:73:a2:73:6f:ff:ee:66:
c7:a0:b5:b2:96:9c:07:6c:19:e2:65:73:d7:56:e5:2f:ce:80:
84:36:b9:6e:ae:ad:75:f9:3d:d9:9c:ad:bd:40:df:d0:e0:69:
ce:63:3e:d4:c7:9b:5c:68:b0:de:e7:ad:a8:2b:b8:4f:52:04:
b1:39:2b:04:64:85:dc:3f:7d:ac:3a:1c:a2:43:cd:41:10:df:
a9:fc:26:7f:8a:23:44:d4:4c:78:a8:51:83:2d:3a:ff:68:cc:
b1:a9:ec:8a:92:2e:b3:ce:40:7d:0c:8d:94:a8:88:36:c7:73:
c2:89:81:82:bd:4f:15:0c:30:02:a1:4e:ab:59:3c:ca:76:45:
25:f9:15:19:b2:16:45:c4:85:c7:f3:d8:33:99:b2:a4:b0:b7:
d7:bf:13:4c:d5:c1:e7:23:7a:7a:f2:1e:b2:01:14:53:13:20:
9c:a1:a3:dc:d2:93:10:0a:3e:78:74:8e:6e:f0:32:c5:37:6a:
80:15:55:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 20:39:54 2026 by rpki-client