Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
File: H2fPHKLeoy_NlwLdJRDra_K2hhA.mft (raw, json)
Hash identifier: VeL1lEtxlZpWDbqk0QT9JmwpcYqYHJbhVhavGjZXEiM=
Subject key identifier: 39:B9:AA:F8:48:58:40:D9:93:80:3C:8B:5D:EF:4E:C0:76:50:E3:DB
Authority key identifier: 1F:67:CF:1C:A2:DE:A3:2F:CD:97:02:DD:25:10:EB:6B:F2:B6:86:10
Certificate issuer: /CN=1f67cf1ca2dea32fcd9702dd2510eb6bf2b68610
Certificate serial: 019EC63861235A300EDCA6EEE5D1D2CBF89F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
Manifest number: 08FF
Signing time: Sun 14 Jun 2026 13:00:44 +0000
Manifest this update: Sun 14 Jun 2026 13:00:44 +0000
Manifest next update: Mon 15 Jun 2026 13:00:44 +0000
Files and hashes: 1: G6Qimd7tAYQUvnYU3UCWKXw35BE.roa (hash: Y7JkYNH4E9BqcN5WcuNtct/o2Kwq3jTuydqYb5r4gpo=)
2: H2fPHKLeoy_NlwLdJRDra_K2hhA.crl (hash: 7X4cLGg09A0T9id53Z0tRbOf+lQItvfZQAsq5qIN/nE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 13:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c6:38:61:23:5a:30:0e:dc:a6:ee:e5:d1:d2:cb:f8:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f67cf1ca2dea32fcd9702dd2510eb6bf2b68610
Validity
Not Before: Jun 14 13:00:44 2026 GMT
Not After : Jun 15 13:00:44 2026 GMT
Subject: CN=39b9aaf8485840d993803c8b5def4ec07650e3db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:aa:bd:49:db:20:2a:c9:e2:13:84:39:9a:1b:
d8:81:7f:d2:9d:76:e0:34:21:50:72:b9:ae:f0:99:
74:3f:60:9e:3c:17:b4:b4:66:9b:ee:b7:46:44:69:
d7:c3:85:6a:29:7c:65:b4:e4:ca:23:7f:ee:ab:cd:
aa:c2:b0:5c:43:81:44:2a:20:76:78:c6:db:31:e9:
f6:6b:37:f4:e3:9e:81:b0:1f:ab:6a:e3:99:83:b7:
fc:ca:65:f6:7f:37:46:01:b6:af:74:61:82:ac:34:
3f:c5:d2:af:1c:41:c8:96:d1:54:1f:c9:14:4c:d2:
4d:a8:fd:04:17:f7:52:09:24:b6:54:b9:21:1b:b9:
2a:35:63:f4:25:d6:e9:f0:be:55:13:86:7a:7c:05:
7a:89:ec:b0:3b:38:45:d3:8e:2e:93:8c:57:9e:20:
10:5b:72:74:0b:37:c7:a7:79:25:d8:5f:86:d0:3e:
4b:09:95:ad:1f:8f:12:43:74:53:fe:77:36:ba:96:
37:1b:e4:65:0b:69:c9:94:84:b9:c0:e1:d6:2a:33:
f1:32:57:ab:d4:7b:8d:1a:cb:95:de:96:45:49:19:
d5:ad:14:8c:22:7c:e0:dc:bb:75:7e:bb:ed:c5:80:
97:e9:ca:67:f4:08:a7:15:c2:36:be:80:e6:f0:28:
6a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B9:AA:F8:48:58:40:D9:93:80:3C:8B:5D:EF:4E:C0:76:50:E3:DB
X509v3 Authority Key Identifier:
keyid:1F:67:CF:1C:A2:DE:A3:2F:CD:97:02:DD:25:10:EB:6B:F2:B6:86:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:f3:2b:52:e4:f1:2a:d6:28:04:06:17:03:42:50:5c:46:66:
78:2e:85:69:d7:98:49:c0:4e:af:9a:f4:f7:18:94:a4:c8:e7:
53:83:e2:a2:10:40:3f:3c:17:4f:07:23:23:58:49:df:3e:91:
52:34:f9:2e:a1:5f:61:40:79:d0:2a:c4:94:65:e2:96:c8:97:
81:c4:28:a8:dd:b5:22:71:c5:af:2a:71:54:b6:8e:02:50:c4:
9e:f8:2f:39:32:d2:2d:5e:e8:de:99:b5:31:9f:bc:1f:d3:fe:
51:b0:92:ee:5e:01:9c:1a:7b:b5:ab:e8:d4:5b:75:fd:89:d8:
2b:a9:69:9d:b8:26:18:27:6e:85:56:50:06:f3:0c:e3:e5:e5:
9d:7a:74:08:15:cc:81:a1:c5:64:d6:97:70:e7:c1:33:16:2a:
e6:58:cf:77:ec:d0:99:80:1f:cb:0a:a6:e0:5b:27:67:e3:39:
35:74:b1:53:12:4e:21:e3:b6:97:db:7c:2f:83:17:49:10:af:
90:4d:ae:b5:76:37:f0:c5:33:4d:d3:a9:32:6f:63:90:ba:93:
69:20:df:99:24:d4:73:9f:a2:4b:44:8b:a8:67:6c:f5:6b:cd:
a2:42:cf:b1:e5:67:9e:36:0d:73:9c:22:13:d3:6c:cf:f3:33:
03:0e:57:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 22:36:52 2026 by rpki-client