Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
File: H2fPHKLeoy_NlwLdJRDra_K2hhA.mft (raw, json)
Hash identifier: Po8OW+1nV18bIhPkHmlM3ZjkyMxhfV5oD3nirYdT48s=
Subject key identifier: C8:C8:F8:72:FC:57:01:6F:FA:2B:3F:89:0B:D2:A7:00:57:D8:E9:7F
Authority key identifier: 1F:67:CF:1C:A2:DE:A3:2F:CD:97:02:DD:25:10:EB:6B:F2:B6:86:10
Certificate issuer: /CN=1f67cf1ca2dea32fcd9702dd2510eb6bf2b68610
Certificate serial: 01A09991F94A13097DAD3507BF2CFDF8FB42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
Manifest number: 09F1
Signing time: Sun 13 Sep 2026 07:01:15 +0000
Manifest this update: Sun 13 Sep 2026 07:01:15 +0000
Manifest next update: Mon 14 Sep 2026 07:01:15 +0000
Files and hashes: 1: G6Qimd7tAYQUvnYU3UCWKXw35BE.roa (hash: Y7JkYNH4E9BqcN5WcuNtct/o2Kwq3jTuydqYb5r4gpo=)
2: H2fPHKLeoy_NlwLdJRDra_K2hhA.crl (hash: WQsF8LiOEBOHOu0WRUElqolfZ6yrxBNuUfmPQUyPsPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:99:91:f9:4a:13:09:7d:ad:35:07:bf:2c:fd:f8:fb:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f67cf1ca2dea32fcd9702dd2510eb6bf2b68610
Validity
Not Before: Sep 13 07:01:15 2026 GMT
Not After : Sep 14 07:01:15 2026 GMT
Subject: CN=c8c8f872fc57016ffa2b3f890bd2a70057d8e97f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1d:ff:2c:07:eb:80:8e:26:ce:44:d7:6b:96:
85:e0:f5:0e:25:e4:5f:cc:60:61:14:cf:15:48:d6:
ed:95:1e:9f:c7:40:43:e4:5b:63:3b:d6:32:7c:11:
80:2f:24:69:0d:44:9a:9f:4d:66:ae:e4:2b:e3:ff:
50:4f:a6:4d:03:1a:3e:16:de:3f:ac:ac:c3:ec:ea:
3d:a9:3e:a1:8e:a3:6b:f0:d5:9c:3d:e2:b2:04:dd:
9b:2d:6c:d4:88:9b:d7:3a:35:0c:99:30:14:23:90:
c3:56:2c:a1:43:ae:6d:ee:20:be:cc:ff:7c:de:8e:
d4:28:a0:95:d3:16:9a:b5:df:da:d9:9f:81:9f:83:
f6:0b:7b:15:90:7a:04:0a:93:fc:7e:f4:fd:a3:34:
09:4a:b0:ea:ac:6b:cd:7b:0d:92:b4:e9:25:d0:92:
f5:97:f6:e0:71:a6:35:cc:93:75:a2:fe:12:c4:a8:
85:6c:43:3e:c0:42:15:97:d3:91:84:65:b2:a7:9b:
96:4c:83:59:39:c5:56:e2:d2:c2:85:7c:a2:5a:0c:
7f:b5:76:1f:4d:06:e0:c5:36:31:15:56:2f:de:93:
a6:9b:3f:f2:6f:98:ee:ff:dd:9a:05:3a:92:b4:69:
5c:86:aa:1e:88:44:a6:c8:da:15:e0:53:84:44:ca:
51:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C8:F8:72:FC:57:01:6F:FA:2B:3F:89:0B:D2:A7:00:57:D8:E9:7F
X509v3 Authority Key Identifier:
keyid:1F:67:CF:1C:A2:DE:A3:2F:CD:97:02:DD:25:10:EB:6B:F2:B6:86:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:02:65:34:d5:2c:e7:56:79:5e:0a:d5:2b:73:fe:e3:5f:58:
69:81:c0:29:f4:66:8b:71:aa:a5:fc:56:e4:1d:c4:28:0b:05:
46:14:6d:78:d9:68:90:05:fe:41:bd:34:e0:00:dd:a2:b5:29:
4d:fc:bf:52:af:13:fe:49:8f:2b:fb:0c:fe:55:d9:0b:5c:0b:
67:16:1b:bb:00:0d:c0:3a:a2:df:2d:e9:86:da:f4:0f:53:00:
66:44:34:0c:91:3f:07:72:28:e7:44:0d:fb:53:e4:24:ea:52:
08:45:ca:be:23:ec:1d:08:fb:fe:7d:a4:f4:f3:25:dd:d3:98:
a1:18:25:70:d3:17:7e:ab:88:1e:c0:40:86:2e:f5:27:bc:d8:
2f:c0:12:74:81:cc:29:62:79:d3:33:8f:94:57:67:8f:25:fe:
be:75:fe:f8:74:b1:98:f8:93:bd:9b:07:d1:f4:e7:cd:6b:38:
e3:8a:33:2b:6c:21:eb:c7:6e:d6:bd:92:d0:3b:32:e6:b4:12:
1d:a4:43:30:5b:74:31:1c:9d:b7:f9:fd:46:dd:9e:04:a8:1c:
5b:04:88:2c:99:19:aa:1b:89:4e:f7:a9:ad:78:72:b3:31:cf:
85:e1:ee:47:aa:b5:9e:3a:c8:a9:f8:aa:3e:95:21:eb:79:f0:
5d:76:1d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 15:46:51 2026 by rpki-client