Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
File: H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft (raw, json)
Hash identifier: 0tCWqjtqBeeLgnV22PT9HCfxfe0PEedLjBPKXC2QI8M=
Subject key identifier: 29:A0:84:05:6A:CC:81:A3:B0:EF:91:B6:2B:CA:37:98:9F:17:DC:68
Authority key identifier: 1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34
Certificate issuer: /CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
Certificate serial: 01A1A8947544CF44D4D61D2FF809F573BD39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
Manifest number: 1AFA
Signing time: Wed 04 Nov 2026 22:01:03 +0000
Manifest this update: Wed 04 Nov 2026 22:01:03 +0000
Manifest next update: Thu 05 Nov 2026 22:01:03 +0000
Files and hashes: 1: H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl (hash: q+7BCGb2XSDeqTILhz1hF+1Go9aMwz6E0r8DiYgTS6M=)
2: TCMNO3-CS_Nx-NPlLu6HlbDn--Y.roa (hash: JY2kbXROkO8FWfujlDIjurbZxxm0qrKzSX4v6ycpeWY=)
3: X5485C7ZqsWTqkySl5Kn8ckUA60.roa (hash: w+70iAnq3DeMprlSCHwSgxGyujS0yHyNG0DURrrh5ls=)
4: Zl6fGzQYTOHjw4PolDvPxgAOgoQ.roa (hash: GhUA9dcCQFJ4Ezs37D2x3nBwq7ffRWZrt0wbE9KxdKY=)
5: aPxKVSvNRXkuueNUo0oD6qVAbdI.roa (hash: 61RoVPH2gZzr7aCEfyXLcJOn37DXu2XNDfa7Kms2beA=)
6: dm0Evj60GANxKDDpdup0WsvoDbc.roa (hash: btzuy0g/8FLq8ybCbTlIMonbwN9KkDbShhlMruoAZPs=)
7: hrxx7N-es-CP5L9Y05Fhf5HCPVA.asa (hash: gD/YnJvaB4kZ3mbHsx5uWbu+Zq1mOPYYm5M339eei+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a8:94:75:44:cf:44:d4:d6:1d:2f:f8:09:f5:73:bd:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
Validity
Not Before: Nov 4 22:01:03 2026 GMT
Not After : Nov 5 22:01:03 2026 GMT
Subject: CN=29a084056acc81a3b0ef91b62bca37989f17dc68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2a:ca:ae:84:64:b3:c6:42:83:a6:18:a7:d9:
74:f4:f3:40:6c:f7:58:e4:93:ec:af:f0:69:ed:19:
fb:12:a6:28:0f:e5:26:a1:8e:98:82:20:43:ba:23:
3a:e4:17:57:5d:20:31:53:1c:27:7f:08:50:b9:96:
d7:2e:d1:1d:03:dc:32:a8:8d:40:e3:8c:c1:42:7e:
06:03:d7:b1:cc:66:14:9d:ef:c8:e6:e9:f0:5f:ee:
43:82:f6:db:b0:29:32:3a:47:d0:19:b2:6e:92:9e:
b1:72:d9:87:2d:12:d8:19:53:99:a6:cb:bc:b5:3d:
e3:7d:5a:0b:fa:46:90:a6:2c:cb:60:b6:65:0f:43:
3e:14:dd:ba:98:f0:ae:b0:d3:20:86:5c:1d:07:54:
a8:9e:e2:91:14:44:f6:02:64:41:7f:cb:a3:5d:cb:
60:48:61:bb:c9:94:43:10:95:d2:20:a8:3e:d0:1c:
68:d3:83:7b:52:df:0d:3e:a0:21:ff:ac:be:a3:a4:
ea:39:2b:c0:35:e0:cf:e9:91:b8:a3:2f:bb:03:cc:
55:77:2a:b5:2a:71:4b:69:48:70:ee:5a:a7:8c:ea:
bd:1f:4a:40:87:4c:93:2c:80:ce:06:fb:bc:ad:cd:
a2:2b:d9:06:2a:f5:ba:95:b1:9d:79:0d:b4:24:38:
94:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A0:84:05:6A:CC:81:A3:B0:EF:91:B6:2B:CA:37:98:9F:17:DC:68
X509v3 Authority Key Identifier:
keyid:1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:22:ec:83:53:ac:5d:c6:a0:f0:22:6f:64:1c:8b:17:b3:b6:
cb:2a:e0:66:27:74:9e:59:25:18:9b:1c:d7:f2:00:b2:b2:bd:
2e:73:e9:45:0c:08:6b:67:f2:22:30:d2:90:15:b3:3b:05:e4:
27:99:8f:a6:ac:96:41:2e:d2:56:00:5e:ea:b5:2c:7c:54:d3:
8d:19:87:f6:0a:87:ca:98:16:26:5c:76:86:b7:9a:78:42:0f:
cc:a5:15:20:25:e3:9a:33:a9:44:06:fe:57:44:7f:87:6f:b1:
11:7f:50:27:4b:0d:24:cc:b9:80:0e:54:57:4d:87:22:32:c8:
f3:26:33:47:dd:ba:85:81:54:ac:db:78:1c:37:14:88:15:ec:
30:06:f8:54:29:6c:99:01:99:3f:7c:3a:ed:81:83:22:9e:ef:
f2:82:38:8a:93:ad:fa:4a:01:4a:89:69:8c:f1:f6:ef:b8:46:
b2:4e:91:49:c4:89:05:37:b2:8a:a0:63:6d:d7:7a:f3:0a:77:
ca:33:72:86:67:78:9a:6d:f7:31:e2:5c:e9:cc:2b:b5:da:0c:
70:cd:5c:b0:1b:ca:73:12:d1:bd:8c:17:2e:e4:84:f7:e5:54:
82:54:37:08:04:fe:51:66:e9:4c:3a:f9:12:d4:74:bc:31:a3:
e6:95:ab:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGolHVEz0TU1h0v+An1c705MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNjFhYTVkMWJlZmQ3YTBmZTNlNGRmZTNhYThkYTczZWZj
ZmJhMzQwHhcNMjYxMTA0MjIwMTAzWhcNMjYxMTA1MjIwMTAzWjAzMTEwLwYDVQQD
EygyOWEwODQwNTZhY2M4MWEzYjBlZjkxYjYyYmNhMzc5ODlmMTdkYzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSrKroRks8ZCg6YYp9l09PNAbPdY
5JPsr/Bp7Rn7EqYoD+UmoY6YgiBDuiM65BdXXSAxUxwnfwhQuZbXLtEdA9wyqI1A
44zBQn4GA9exzGYUne/I5unwX+5DgvbbsCkyOkfQGbJukp6xctmHLRLYGVOZpsu8
tT3jfVoL+kaQpizLYLZlD0M+FN26mPCusNMghlwdB1SonuKRFET2AmRBf8ujXctg
SGG7yZRDEJXSIKg+0Bxo04N7Ut8NPqAh/6y+o6TqOSvANeDP6ZG4oy+7A8xVdyq1
KnFLaUhw7lqnjOq9H0pAh0yTLIDOBvu8rc2iK9kGKvW6lbGdeQ20JDiUzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCmghAVqzIGjsO+RtivKN5ifF9xoMB8GA1UdIwQY
MBaAFB9hql0b79eg/j5N/jqo2nPvz7o0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDJHcVhSdnYxNkQtUGszLU9xamFjLV9QdWpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wYWQ0MTQtM2RmMS00YjM4LTg2OWUt
YzYyMWU4ZGY5NWZmLzEvSDJHcVhSdnYxNkQtUGszLU9xamFjLV9QdWpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8wYWQ0MTQtM2RmMS00YjM4LTg2OWUtYzYyMWU4ZGY5NWZm
LzEvSDJHcVhSdnYxNkQtUGszLU9xamFjLV9QdWpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlCLsg1Os
Xcag8CJvZByLF7O2yyrgZid0nlklGJsc1/IAsrK9LnPpRQwIa2fyIjDSkBWzOwXk
J5mPpqyWQS7SVgBe6rUsfFTTjRmH9gqHypgWJlx2hreaeEIPzKUVICXjmjOpRAb+
V0R/h2+xEX9QJ0sNJMy5gA5UV02HIjLI8yYzR926hYFUrNt4HDcUiBXsMAb4VCls
mQGZP3w67YGDIp7v8oI4ipOt+koBSolpjPH277hGsk6RScSJBTeyiqBjbdd68wp3
yjNyhmd4mm33MeJc6cwrtdoMcM1csBvKcxLRvYwXLuSE9+VUglQ3CAT+UWbpTDr5
EtR0vDGj5pWrLg==
-----END CERTIFICATE-----
Generated at Thu Nov 5 04:53:33 2026 by rpki-client