Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.mft
File: H-ZfK2FsC9tmBtsKAvOQPYog2b0.mft (raw, json)
Hash identifier: /46ad1917Ae0R9ELd7aWcYw6WaYPBimk/XPrIZ6VQos=
Subject key identifier: DB:BC:42:DA:10:06:05:19:87:B4:69:22:06:B5:90:15:0E:72:7C:DE
Authority key identifier: 1F:E6:5F:2B:61:6C:0B:DB:66:06:DB:0A:02:F3:90:3D:8A:20:D9:BD
Certificate issuer: /CN=1fe65f2b616c0bdb6606db0a02f3903d8a20d9bd
Certificate serial: 019F36A9679C4CD63D6EADBBB11BB7F355B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-ZfK2FsC9tmBtsKAvOQPYog2b0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.mft
Manifest number: 11
Signing time: Mon 06 Jul 2026 09:01:39 +0000
Manifest this update: Mon 06 Jul 2026 09:01:39 +0000
Manifest next update: Tue 07 Jul 2026 09:01:39 +0000
Files and hashes: 1: Ak46-asOg6f893apfz-5UnXkLOQ.roa (hash: Ih6ExCGo6FYRtpTqMJWDMLQgQI7OlDnwThJk2xsctFQ=)
2: H-ZfK2FsC9tmBtsKAvOQPYog2b0.crl (hash: cOHmUo1YNTDN6kk2IThU3rvpVVoEllMPvS2BXB7vmUs=)
3: T3hmtjVJ0pIGPxsPUX7Jodsysdg.roa (hash: TRJx9DdiSo189lniYuAWR8maCT8iYXtHoZzttgkFt5k=)
4: Yfi7MUIVXQqbg1C82iKiGDNumqg.roa (hash: 2sxGn69QVvco7Us4OUWBJG4j6XnLH42EKG1hbOQHeSI=)
5: ljw7cDT5mL0x04_8nIe-xA6UgWQ.roa (hash: P5+YtEjNM2sBRzQ0PGWX8dgDC8bNThnGhQEni7Gsebw=)
6: rleI_lIS5woMuB3c6gl94b-COqI.roa (hash: QD88ExDvyIgWPGx1fjBATSvd4/kmty0tfSEnAJh+eY0=)
7: svljudJa91rajYPx0fmVOIVvYy4.roa (hash: KENWVcLSkUOvWMFTwP8jYxXyCqWSFbTijw1QUg6qqj4=)
8: wkk-CAjW8nH2K3kEmzjceaKq94k.roa (hash: UU/D7ID4PKru4t3/Cm98EfKQeds7x948vKruRVhOLmE=)
9: z3dfCKY-XzYavmfFllpELqg3CVU.roa (hash: MftupAXNsvL9dReFS9DSAE/DEUhtlr4ljGLiCkzWkHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.mft
rsync://rpki.ripe.net/repository/DEFAULT/H-ZfK2FsC9tmBtsKAvOQPYog2b0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 09:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:a9:67:9c:4c:d6:3d:6e:ad:bb:b1:1b:b7:f3:55:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe65f2b616c0bdb6606db0a02f3903d8a20d9bd
Validity
Not Before: Jul 6 09:01:39 2026 GMT
Not After : Jul 7 09:01:39 2026 GMT
Subject: CN=dbbc42da1006051987b4692206b590150e727cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ac:83:b2:b8:f5:fb:70:3c:21:5d:93:6f:4f:
0e:e9:63:24:c3:bd:c8:9f:3e:47:2b:48:3f:53:cb:
3c:bb:e3:61:32:58:99:57:50:e9:30:69:af:95:06:
7c:0d:7d:78:4a:78:de:4d:f0:36:1e:9e:39:78:e9:
4d:06:7b:f0:c9:88:43:5c:49:f5:f2:89:17:68:d7:
ed:cb:4c:5f:ae:85:c3:17:86:98:7a:e3:6e:b2:d4:
9f:1c:b2:a0:71:19:30:e2:9e:80:55:d5:5d:cc:ae:
d1:9d:31:4c:f6:b1:cf:07:6a:b5:c5:d9:2a:9c:47:
17:41:bd:1c:da:06:07:c6:31:3b:8c:e1:93:93:8e:
e7:4c:ad:e1:e5:8c:1b:bd:ff:e1:e4:ca:71:2f:81:
90:1e:20:b9:82:0d:3b:36:08:07:9c:aa:f7:5b:43:
7c:a3:91:85:7d:65:3e:bc:8b:58:96:ed:5b:99:ab:
01:d4:ce:8b:bb:2a:b2:44:74:79:e1:08:ad:e2:7e:
a9:f4:5b:7f:3b:8d:60:96:73:f4:37:82:23:81:7a:
a5:fa:a9:cc:f3:97:28:f4:cf:da:5b:b0:52:65:e2:
f4:d6:0f:a7:40:0e:1a:60:d4:c2:14:eb:88:29:df:
72:10:f7:b2:17:23:29:cf:bb:6a:47:8b:73:5a:38:
17:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:BC:42:DA:10:06:05:19:87:B4:69:22:06:B5:90:15:0E:72:7C:DE
X509v3 Authority Key Identifier:
keyid:1F:E6:5F:2B:61:6C:0B:DB:66:06:DB:0A:02:F3:90:3D:8A:20:D9:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-ZfK2FsC9tmBtsKAvOQPYog2b0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:21:83:a0:d1:f0:a5:38:7e:7b:41:f0:5e:a5:87:55:e2:f3:
5a:f5:aa:81:86:38:0c:08:da:de:e2:ba:70:fe:a5:5b:ad:69:
dc:2e:ae:a9:d1:18:86:f8:3b:30:3b:e5:fa:1d:19:9b:35:7a:
ad:67:c4:08:8e:31:fd:f3:c1:76:d9:52:00:1a:5f:67:d5:61:
d4:a1:c9:04:66:83:a9:29:87:54:7a:ef:ad:a3:50:b1:67:6e:
72:9e:dc:de:83:3f:03:11:14:c0:85:ae:28:da:40:b9:cb:b7:
fe:78:dd:ab:57:d4:92:75:11:5a:5f:31:6f:e9:31:d3:5d:3b:
49:92:20:5c:17:e8:57:40:38:82:40:13:59:19:8b:0f:fb:48:
ad:2d:c7:87:a7:4e:db:d4:f8:10:0f:28:74:63:d9:37:75:96:
92:e5:35:c7:aa:84:34:b0:cd:6c:98:86:63:7e:73:a7:db:f9:
c4:0f:1d:02:ba:80:7e:70:8c:f7:0a:e5:90:51:71:67:4b:0c:
9e:0a:4e:01:2a:d2:aa:ac:d9:c9:ed:25:89:fd:26:a2:01:78:
05:1a:5e:19:0a:e3:21:7c:9c:51:a7:5b:5d:bb:75:0d:2f:cb:
91:2d:b3:91:7c:b8:b3:8a:44:a7:2f:e8:95:3e:09:f9:46:79:
bd:9a:24:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:03:26 2026 by rpki-client