Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
File: H2fPHKLeoy_NlwLdJRDra_K2hhA.mft (raw, json)
Hash identifier: h/aTjLGenw6FwqCNxjsC1JTCmkoyR28rcEQ9eDlFIic=
Subject key identifier: 64:5E:C0:9D:DF:FA:D5:0C:ED:82:AE:C9:B4:FC:66:32:21:C1:25:F6
Authority key identifier: 1F:67:CF:1C:A2:DE:A3:2F:CD:97:02:DD:25:10:EB:6B:F2:B6:86:10
Certificate issuer: /CN=1f67cf1ca2dea32fcd9702dd2510eb6bf2b68610
Certificate serial: 019CEF02F5393E6779D09DE68D7A50862646
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
Manifest number: 080B
Signing time: Sun 15 Mar 2026 01:01:14 +0000
Manifest this update: Sun 15 Mar 2026 01:01:14 +0000
Manifest next update: Mon 16 Mar 2026 01:01:14 +0000
Files and hashes: 1: G6Qimd7tAYQUvnYU3UCWKXw35BE.roa (hash: Y7JkYNH4E9BqcN5WcuNtct/o2Kwq3jTuydqYb5r4gpo=)
2: H2fPHKLeoy_NlwLdJRDra_K2hhA.crl (hash: ijJ/EJOS8jEe/NnKpirIUCbE24OQE1no7gPdBFDMEJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 01:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ef:02:f5:39:3e:67:79:d0:9d:e6:8d:7a:50:86:26:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f67cf1ca2dea32fcd9702dd2510eb6bf2b68610
Validity
Not Before: Mar 15 01:01:14 2026 GMT
Not After : Mar 16 01:01:14 2026 GMT
Subject: CN=645ec09ddffad50ced82aec9b4fc663221c125f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:76:33:73:7f:01:88:c7:cf:ab:ba:10:f0:26:
52:83:6d:8e:8b:90:6b:53:5c:a7:b5:70:de:5a:b8:
97:f8:19:74:63:e9:5d:e8:3f:c7:57:3f:68:11:33:
2a:df:f0:88:59:f7:30:68:8b:5a:96:1f:3c:cd:5c:
ca:dc:ac:7f:41:f8:1a:ba:26:48:7b:3d:73:96:0f:
bb:b8:6b:ff:03:8d:6a:04:c1:4f:82:12:60:ec:0a:
a9:ef:b1:7e:e0:7e:4e:44:44:20:24:26:90:98:26:
f9:5d:c7:cd:26:99:c6:24:49:43:9e:e5:57:15:98:
a3:06:1c:61:f6:6d:79:26:a8:2b:bb:2b:49:27:d0:
d3:71:ba:a1:38:69:8f:54:a7:52:a6:63:c0:5e:b5:
15:68:b3:15:3a:aa:ff:80:a2:7f:65:63:14:44:91:
90:a5:12:04:6b:39:30:61:e2:32:7b:ec:f2:07:dc:
26:38:d0:bd:8c:02:17:e4:41:dc:ef:57:5b:5b:5f:
97:fd:9a:0c:ab:d7:00:93:d5:fe:fe:5f:11:ac:32:
61:29:f3:64:47:0c:c7:82:26:8c:9c:b4:bb:80:56:
1e:1a:16:c7:cb:a4:0f:a4:86:e6:61:54:44:4c:f4:
86:4b:2e:37:b1:26:54:52:d1:be:d7:57:85:c1:b6:
5b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:5E:C0:9D:DF:FA:D5:0C:ED:82:AE:C9:B4:FC:66:32:21:C1:25:F6
X509v3 Authority Key Identifier:
keyid:1F:67:CF:1C:A2:DE:A3:2F:CD:97:02:DD:25:10:EB:6B:F2:B6:86:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:0b:1f:d7:78:3e:d4:8b:3c:59:6a:c0:14:7b:93:cf:cd:c2:
fd:41:ca:fe:fc:94:72:d4:fd:2e:f4:51:44:4a:62:a7:14:10:
d1:9e:3c:06:54:36:4d:b7:96:8e:3e:bf:71:5d:79:52:1e:ee:
7a:98:22:1f:e3:d6:de:9e:9e:ac:d8:92:56:dc:6e:ef:e2:25:
8c:8a:4f:27:58:ed:e2:39:f9:de:89:8f:8f:87:12:47:54:f9:
ee:12:8f:4e:27:1f:25:ad:47:90:91:5f:79:54:c2:ff:2e:25:
ac:d2:74:1a:ba:d9:2c:0e:65:7d:55:86:59:a8:85:1e:ab:32:
47:9d:91:fd:07:20:fd:90:69:59:68:c3:f3:cd:18:b4:bd:ab:
5d:90:27:32:cb:e5:b2:49:70:ee:47:7b:4e:f9:f3:1d:e7:bb:
8b:7f:ad:61:0e:b1:e6:18:e9:57:ef:f0:d3:71:5b:f9:3b:a7:
c2:d1:5c:d8:49:8c:66:1c:55:c3:fe:62:49:6f:9b:c5:96:ab:
ae:3e:88:da:19:bd:dd:6d:0b:a3:11:a1:a6:15:aa:29:ff:f5:
f2:44:63:63:d7:01:06:fa:a7:a9:c1:66:3f:76:9c:81:d1:09:
f1:1c:90:4d:e1:50:59:c5:95:62:d7:ee:ca:3b:f0:5d:7f:4d:
3c:5c:2d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 09:10:41 2026 by rpki-client