Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.mft
File: H-ZfK2FsC9tmBtsKAvOQPYog2b0.mft (raw, json)
Hash identifier: 04wbB6oUEkJN+vwjRV0E19A66yRrxNNyp+3yMDgT9GE=
Subject key identifier: 01:F2:97:9F:8E:90:34:CC:DA:61:C3:C6:1B:16:1D:F6:04:6B:2F:28
Authority key identifier: 1F:E6:5F:2B:61:6C:0B:DB:66:06:DB:0A:02:F3:90:3D:8A:20:D9:BD
Certificate issuer: /CN=1fe65f2b616c0bdb6606db0a02f3903d8a20d9bd
Certificate serial: 01A02056322108AA5CC5CF9E37F1EFBECB3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-ZfK2FsC9tmBtsKAvOQPYog2b0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.mft
Manifest number: 8A
Signing time: Thu 20 Aug 2026 18:01:54 +0000
Manifest this update: Thu 20 Aug 2026 18:01:54 +0000
Manifest next update: Fri 21 Aug 2026 18:01:54 +0000
Files and hashes: 1: Ak46-asOg6f893apfz-5UnXkLOQ.roa (hash: Ih6ExCGo6FYRtpTqMJWDMLQgQI7OlDnwThJk2xsctFQ=)
2: H-ZfK2FsC9tmBtsKAvOQPYog2b0.crl (hash: 8Fi4z2aEgykb/1zp5jros0nhgtdcPN5Veyhz7HOnblI=)
3: T3hmtjVJ0pIGPxsPUX7Jodsysdg.roa (hash: TRJx9DdiSo189lniYuAWR8maCT8iYXtHoZzttgkFt5k=)
4: Yfi7MUIVXQqbg1C82iKiGDNumqg.roa (hash: 2sxGn69QVvco7Us4OUWBJG4j6XnLH42EKG1hbOQHeSI=)
5: ljw7cDT5mL0x04_8nIe-xA6UgWQ.roa (hash: P5+YtEjNM2sBRzQ0PGWX8dgDC8bNThnGhQEni7Gsebw=)
6: rleI_lIS5woMuB3c6gl94b-COqI.roa (hash: QD88ExDvyIgWPGx1fjBATSvd4/kmty0tfSEnAJh+eY0=)
7: svljudJa91rajYPx0fmVOIVvYy4.roa (hash: KENWVcLSkUOvWMFTwP8jYxXyCqWSFbTijw1QUg6qqj4=)
8: wkk-CAjW8nH2K3kEmzjceaKq94k.roa (hash: UU/D7ID4PKru4t3/Cm98EfKQeds7x948vKruRVhOLmE=)
9: z3dfCKY-XzYavmfFllpELqg3CVU.roa (hash: MftupAXNsvL9dReFS9DSAE/DEUhtlr4ljGLiCkzWkHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.mft
rsync://rpki.ripe.net/repository/DEFAULT/H-ZfK2FsC9tmBtsKAvOQPYog2b0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:56:32:21:08:aa:5c:c5:cf:9e:37:f1:ef:be:cb:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe65f2b616c0bdb6606db0a02f3903d8a20d9bd
Validity
Not Before: Aug 20 18:01:54 2026 GMT
Not After : Aug 21 18:01:54 2026 GMT
Subject: CN=01f2979f8e9034ccda61c3c61b161df6046b2f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:03:63:ab:35:1c:96:cf:0c:31:71:7c:da:fd:
89:e7:0a:50:a5:9f:62:13:fc:dc:4b:3d:eb:02:8b:
71:15:67:af:8e:4b:88:cf:4f:54:e7:55:d1:d7:d3:
b0:92:b0:c9:6b:f6:74:d4:56:4c:da:d7:76:e0:ac:
4c:2a:99:35:85:a6:0f:31:8c:20:bd:fa:fa:4d:13:
d3:e8:9e:08:97:63:d3:5e:88:b0:4e:f6:df:dc:ed:
71:72:2c:bb:fd:a9:42:5f:d6:0b:68:67:14:c8:46:
aa:6f:ee:d7:ad:d6:40:4f:e5:02:f2:2a:2f:1e:5b:
9f:df:82:08:b0:58:da:af:be:b0:e4:4d:9c:7f:61:
8f:01:97:4d:57:d0:4f:e4:cb:2a:7f:e0:e4:d6:5b:
ff:ba:b0:e8:b2:28:f7:40:fe:f6:8b:34:6b:4a:e7:
91:2c:44:24:a6:b8:84:18:71:4a:c7:39:b5:0e:73:
90:8a:84:94:6e:35:51:7a:03:ae:9f:41:2b:fa:d9:
ad:ff:c0:11:38:a2:9a:44:ae:fc:0d:f2:e5:c8:99:
ac:d5:36:6d:3e:32:9d:c8:a4:c3:41:47:9c:8d:ef:
54:7a:e8:01:9a:2f:0a:50:59:25:bc:d6:f8:9d:fb:
bc:94:eb:42:6f:bf:61:32:6d:51:5f:f0:ce:c5:ef:
8e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F2:97:9F:8E:90:34:CC:DA:61:C3:C6:1B:16:1D:F6:04:6B:2F:28
X509v3 Authority Key Identifier:
keyid:1F:E6:5F:2B:61:6C:0B:DB:66:06:DB:0A:02:F3:90:3D:8A:20:D9:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-ZfK2FsC9tmBtsKAvOQPYog2b0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:00:fb:c8:de:18:92:db:62:d8:41:5c:b5:2e:99:39:ee:26:
bf:80:a6:e7:de:ba:f6:cc:7c:8c:e0:a3:3d:5a:db:61:f4:1d:
bd:af:27:a2:30:b3:a0:c3:29:dc:6d:5e:3d:92:58:76:72:c0:
07:6f:a5:df:66:83:c6:73:5d:5d:3c:68:5c:0c:d9:3f:25:db:
77:38:ea:e8:24:f6:e8:d2:0b:55:11:7f:8f:ea:eb:f4:41:1c:
68:f2:ea:b7:44:ed:e8:fc:a2:00:8c:39:dc:fc:c4:33:9c:a7:
08:19:b2:38:e5:53:85:54:88:92:ba:33:eb:68:31:36:f6:92:
39:8f:22:70:9c:b7:cc:50:7b:da:03:e6:db:fe:33:9f:41:90:
71:60:ce:02:64:ae:b5:99:a5:d6:6b:ab:6f:b2:9c:86:0b:c8:
54:64:cb:99:ec:e8:c1:67:de:1e:eb:c9:3c:7f:39:a6:f0:2b:
a9:e7:ba:3f:fb:ab:b6:3a:c8:5f:87:e4:1f:31:fc:a4:64:0d:
46:b8:fb:8f:3d:f5:cd:36:64:e5:23:81:c2:ea:6a:55:f2:15:
3a:3d:51:1f:46:2f:e7:0b:34:68:81:90:57:8f:15:99:1b:97:
4b:47:4a:1d:74:b8:02:14:32:78:d9:b2:08:18:eb:75:5c:b9:
96:af:97:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAgVjIhCKpcxc+eN/Hvvss/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmZTY1ZjJiNjE2YzBiZGI2NjA2ZGIwYTAyZjM5MDNkOGEy
MGQ5YmQwHhcNMjYwODIwMTgwMTU0WhcNMjYwODIxMTgwMTU0WjAzMTEwLwYDVQQD
EygwMWYyOTc5ZjhlOTAzNGNjZGE2MWMzYzYxYjE2MWRmNjA0NmIyZjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQNjqzUcls8MMXF82v2J5wpQpZ9i
E/zcSz3rAotxFWevjkuIz09U51XR19OwkrDJa/Z01FZM2td24KxMKpk1haYPMYwg
vfr6TRPT6J4Il2PTXoiwTvbf3O1xciy7/alCX9YLaGcUyEaqb+7XrdZAT+UC8iov
Hluf34IIsFjar76w5E2cf2GPAZdNV9BP5Msqf+Dk1lv/urDosij3QP72izRrSueR
LEQkpriEGHFKxzm1DnOQioSUbjVRegOun0Er+tmt/8AROKKaRK78DfLlyJms1TZt
PjKdyKTDQUecje9UeugBmi8KUFklvNb4nfu8lOtCb79hMm1RX/DOxe+OLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAHyl5+OkDTM2mHDxhsWHfYEay8oMB8GA1UdIwQY
MBaAFB/mXythbAvbZgbbCgLzkD2KINm9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSC1aZksyRnNDOXRtQnRzS0F2T1FQWW9nMmIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zY2M3OGEtOGZiNS00NzVhLTg4ODIt
OWQwYzYyMDczNWYxLzEvSC1aZksyRnNDOXRtQnRzS0F2T1FQWW9nMmIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8zY2M3OGEtOGZiNS00NzVhLTg4ODItOWQwYzYyMDczNWYx
LzEvSC1aZksyRnNDOXRtQnRzS0F2T1FQWW9nMmIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAagD7yN4Y
ktti2EFctS6ZOe4mv4Cm59669sx8jOCjPVrbYfQdva8nojCzoMMp3G1ePZJYdnLA
B2+l32aDxnNdXTxoXAzZPyXbdzjq6CT26NILVRF/j+rr9EEcaPLqt0Tt6PyiAIw5
3PzEM5ynCBmyOOVThVSIkroz62gxNvaSOY8icJy3zFB72gPm2/4zn0GQcWDOAmSu
tZml1murb7KchgvIVGTLmezowWfeHuvJPH85pvArqee6P/urtjrIX4fkHzH8pGQN
Rrj7jz31zTZk5SOBwupqVfIVOj1RH0Yv5ws0aIGQV48VmRuXS0dKHXS4AhQyeNmy
CBjrdVy5lq+XkA==
-----END CERTIFICATE-----
Generated at Thu Aug 20 22:53:55 2026 by rpki-client