Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
File: H2fPHKLeoy_NlwLdJRDra_K2hhA.mft (raw, json)
Hash identifier: 9GXQj9tFHwaB3/yJVpkpaaW/8usHieeorkRhSoKr0sk=
Subject key identifier: 5E:89:A9:FE:8C:6B:C5:98:16:30:75:35:2F:77:C0:9A:44:F9:F3:17
Authority key identifier: 1F:67:CF:1C:A2:DE:A3:2F:CD:97:02:DD:25:10:EB:6B:F2:B6:86:10
Certificate issuer: /CN=1f67cf1ca2dea32fcd9702dd2510eb6bf2b68610
Certificate serial: 019FAFE4D503822DF98D99BE60E60E6DF932
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
Manifest number: 0978
Signing time: Wed 29 Jul 2026 22:00:37 +0000
Manifest this update: Wed 29 Jul 2026 22:00:37 +0000
Manifest next update: Thu 30 Jul 2026 22:00:37 +0000
Files and hashes: 1: G6Qimd7tAYQUvnYU3UCWKXw35BE.roa (hash: Y7JkYNH4E9BqcN5WcuNtct/o2Kwq3jTuydqYb5r4gpo=)
2: H2fPHKLeoy_NlwLdJRDra_K2hhA.crl (hash: AKqS6tprZptC5JABI1WfEB6G6Tujh5FTHJbZVDa+35A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 14:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:af:e4:d5:03:82:2d:f9:8d:99:be:60:e6:0e:6d:f9:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f67cf1ca2dea32fcd9702dd2510eb6bf2b68610
Validity
Not Before: Jul 29 22:00:37 2026 GMT
Not After : Jul 30 22:00:37 2026 GMT
Subject: CN=5e89a9fe8c6bc598163075352f77c09a44f9f317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6c:b8:14:cf:ef:4e:82:e7:9e:0d:39:fb:9c:
9e:62:26:e0:2c:d1:18:de:dd:99:ae:db:7b:92:94:
0c:33:2a:e8:86:e1:b1:6e:6a:a5:9b:f9:99:de:5b:
47:c9:98:d3:56:61:30:d6:0f:f1:0a:32:0b:16:f9:
f5:1c:21:08:d3:05:d1:30:9c:d5:69:e9:e8:dd:49:
c4:7f:d0:e1:f5:99:c3:1b:27:c8:3d:89:ad:c0:21:
47:d2:51:65:4b:86:5a:32:d3:39:eb:ee:e4:ff:61:
96:cf:54:1b:08:98:98:ed:80:bb:48:34:b2:81:f2:
70:4c:fb:34:52:6e:bf:4a:3d:7f:07:8f:f0:f5:2e:
fb:8d:e5:9d:94:77:6a:3a:ff:05:e6:7d:d6:f0:6e:
05:0a:fa:40:19:82:16:89:97:15:ea:58:40:d1:3b:
d7:dd:ee:6b:f0:0b:d6:f5:0d:51:77:6d:15:4f:41:
fa:d7:ec:8b:b7:43:d5:89:db:ad:cf:cd:ac:92:f7:
99:77:06:9e:65:0a:38:6f:16:3e:bc:c3:97:77:12:
f2:a4:28:db:50:7d:60:be:3a:9f:1c:07:30:04:aa:
d5:95:15:9f:2f:05:95:5d:f7:11:4c:7f:bc:92:a8:
77:c2:11:17:63:f2:0d:6d:82:f1:4e:8d:97:e0:20:
d8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:89:A9:FE:8C:6B:C5:98:16:30:75:35:2F:77:C0:9A:44:F9:F3:17
X509v3 Authority Key Identifier:
keyid:1F:67:CF:1C:A2:DE:A3:2F:CD:97:02:DD:25:10:EB:6B:F2:B6:86:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:48:e5:9f:01:6b:2a:22:f6:35:96:aa:d1:6c:2b:06:b1:ee:
b3:e1:da:db:ea:ed:4c:7f:f4:4d:cd:8e:63:77:dd:1f:13:85:
6b:18:a9:1f:e2:77:86:91:a6:a4:8c:b5:f4:a0:0d:dd:b5:a9:
e3:fa:04:81:74:77:35:aa:df:15:b2:56:81:07:89:f6:09:a0:
c5:b7:34:53:f3:dc:a9:cb:8f:fe:52:cb:a8:67:18:12:0c:3c:
7c:f6:47:76:24:7a:e9:dd:dd:ca:4d:30:fb:a5:2a:bb:da:e3:
e7:68:1a:29:00:61:9f:d9:b1:28:1b:55:b5:29:ae:21:52:d0:
68:a5:18:0e:e2:8e:3f:7c:64:aa:51:f7:8f:ad:a7:61:10:e0:
17:9c:ce:4e:49:f9:b4:43:61:83:81:f9:55:b4:0d:9a:05:70:
73:17:f8:4e:d4:9c:40:10:cf:a7:c2:45:1d:ea:a6:84:70:a7:
3c:50:4e:21:e0:90:a2:26:a5:aa:9b:02:e4:69:80:b3:98:58:
b5:ff:20:f4:2e:22:5a:90:34:54:ae:91:2a:6b:23:fd:fb:27:
b5:da:25:3c:bc:b2:49:88:bc:ae:4d:32:a9:da:cf:77:64:e1:
d3:e2:fe:cd:b7:94:46:2f:5a:a6:c6:dc:c8:b7:7a:87:24:b2:
58:8d:99:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 23:52:34 2026 by rpki-client