Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
File: H2fPHKLeoy_NlwLdJRDra_K2hhA.mft (raw, json)
Hash identifier: MonaqJsbt1hCRU5fhraPAd0fl3M0hjJz5mI/hPkb7Qs=
Subject key identifier: 16:E0:DC:9A:44:87:8E:1B:C4:23:77:63:6B:34:7F:9A:DE:3F:55:FE
Authority key identifier: 1F:67:CF:1C:A2:DE:A3:2F:CD:97:02:DD:25:10:EB:6B:F2:B6:86:10
Certificate issuer: /CN=1f67cf1ca2dea32fcd9702dd2510eb6bf2b68610
Certificate serial: 019DD8AF41F654456A3A97CC5B7A630502C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
Manifest number: 0884
Signing time: Wed 29 Apr 2026 10:00:57 +0000
Manifest this update: Wed 29 Apr 2026 10:00:57 +0000
Manifest next update: Thu 30 Apr 2026 10:00:57 +0000
Files and hashes: 1: G6Qimd7tAYQUvnYU3UCWKXw35BE.roa (hash: Y7JkYNH4E9BqcN5WcuNtct/o2Kwq3jTuydqYb5r4gpo=)
2: H2fPHKLeoy_NlwLdJRDra_K2hhA.crl (hash: PZPPmWaTng7mPiKxs30FXnImGHxFDjYop8mxs15ah98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Apr 2026 10:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d8:af:41:f6:54:45:6a:3a:97:cc:5b:7a:63:05:02:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f67cf1ca2dea32fcd9702dd2510eb6bf2b68610
Validity
Not Before: Apr 29 10:00:57 2026 GMT
Not After : Apr 30 10:00:57 2026 GMT
Subject: CN=16e0dc9a44878e1bc42377636b347f9ade3f55fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:04:07:40:a1:b7:41:d6:3c:c9:49:60:2e:7f:
b0:d3:2b:7a:59:43:ca:42:fa:c9:b6:3b:5b:4d:64:
fe:85:f1:c1:e5:df:5b:7c:02:42:3a:f9:21:a7:28:
80:e3:60:5d:a1:9e:09:fa:1c:89:37:fd:dc:ef:80:
a4:98:15:7d:30:e0:26:f8:42:0c:89:7b:51:e6:26:
cf:41:fd:33:7b:b3:d4:4a:5b:a9:ab:c8:7d:4e:02:
2d:85:d9:a6:40:a7:10:95:ea:06:18:25:c7:88:8b:
81:36:0d:6e:82:50:53:92:30:ae:df:72:bd:4e:9e:
e3:eb:65:4c:0e:b5:84:5b:57:fa:1a:21:1c:18:44:
ea:bd:0d:95:d3:3e:6d:38:0a:0d:e5:fe:1c:4a:c5:
a5:26:00:d3:ac:a6:06:77:78:3a:5e:4d:34:3f:37:
65:88:f6:eb:33:ea:62:ff:a7:36:b6:85:6a:cb:42:
bc:85:bf:96:54:de:cc:73:06:c4:e5:37:c4:cc:d5:
1d:a0:00:29:98:4c:16:ad:e5:7d:39:44:fd:f2:ef:
fd:07:85:eb:a1:06:2e:2c:78:be:0f:0c:9c:78:97:
c2:d2:3f:37:2d:19:89:c2:1f:97:1e:a3:17:1b:b2:
7d:bb:64:33:ca:4b:3e:0b:27:35:f4:c1:73:38:f7:
e3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E0:DC:9A:44:87:8E:1B:C4:23:77:63:6B:34:7F:9A:DE:3F:55:FE
X509v3 Authority Key Identifier:
keyid:1F:67:CF:1C:A2:DE:A3:2F:CD:97:02:DD:25:10:EB:6B:F2:B6:86:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:36:8f:41:f9:84:83:e8:56:92:6e:2f:10:16:2a:47:5e:ff:
ee:10:bb:74:81:27:00:ce:a7:d4:24:dd:c6:5c:a1:97:ff:99:
5b:7c:e9:be:17:d1:73:f9:8e:10:f5:74:9c:21:48:4c:2d:ae:
eb:32:97:43:10:d7:19:f8:70:b2:f5:c3:16:c5:89:5c:bb:ae:
16:3e:d4:d2:16:bc:74:57:6f:b5:b4:d4:c9:05:77:c8:81:60:
66:dc:fa:28:60:0f:aa:db:28:e9:a1:8b:e1:a1:ca:60:dd:82:
0d:01:6e:8c:1c:59:c5:93:e2:6a:90:02:5e:7b:4f:e9:a7:cf:
03:dd:04:93:31:bc:96:95:f3:13:cf:b1:4b:9e:76:7f:75:48:
1c:dd:7c:e5:08:50:ed:dd:09:13:26:25:34:e7:84:2c:bb:f2:
1f:7c:41:97:07:46:ab:9c:4c:32:6e:4d:e2:53:88:73:bb:49:
1c:35:fc:a2:ca:f8:a9:f8:05:4d:2e:c3:da:5f:01:c4:d6:22:
29:c2:9d:2d:4c:8f:b1:51:9d:82:1a:3d:fe:c8:f6:92:94:28:
e6:e9:15:8c:ba:d0:0b:7f:d8:28:9e:d4:cb:e7:67:3e:46:7d:
07:1d:89:68:60:bc:b0:36:2e:80:07:b9:53:67:84:e6:fe:f0:
cf:66:b1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 17:51:26 2026 by rpki-client