Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.mft
File: H-ZfK2FsC9tmBtsKAvOQPYog2b0.mft (raw, json)
Hash identifier: Rb4nY8/oMarEpUykcbNQfesJiXrD1yuzobYkP/XwySo=
Subject key identifier: B5:D1:83:B4:2E:6A:69:0C:F5:D1:D8:3C:B7:5E:09:A3:1B:49:70:F8
Authority key identifier: 1F:E6:5F:2B:61:6C:0B:DB:66:06:DB:0A:02:F3:90:3D:8A:20:D9:BD
Certificate issuer: /CN=1fe65f2b616c0bdb6606db0a02f3903d8a20d9bd
Certificate serial: 01A0BEB16EF55E37FE671074DC2D4A38F28F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-ZfK2FsC9tmBtsKAvOQPYog2b0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.mft
Manifest number: DC
Signing time: Sun 20 Sep 2026 12:01:34 +0000
Manifest this update: Sun 20 Sep 2026 12:01:34 +0000
Manifest next update: Mon 21 Sep 2026 12:01:34 +0000
Files and hashes: 1: Ak46-asOg6f893apfz-5UnXkLOQ.roa (hash: Ih6ExCGo6FYRtpTqMJWDMLQgQI7OlDnwThJk2xsctFQ=)
2: H-ZfK2FsC9tmBtsKAvOQPYog2b0.crl (hash: d3HpdErRb+oI5Jyvt7cxk1wrxj0ck2/mXGkF/5OEaxs=)
3: T3hmtjVJ0pIGPxsPUX7Jodsysdg.roa (hash: TRJx9DdiSo189lniYuAWR8maCT8iYXtHoZzttgkFt5k=)
4: Yfi7MUIVXQqbg1C82iKiGDNumqg.roa (hash: 2sxGn69QVvco7Us4OUWBJG4j6XnLH42EKG1hbOQHeSI=)
5: ljw7cDT5mL0x04_8nIe-xA6UgWQ.roa (hash: P5+YtEjNM2sBRzQ0PGWX8dgDC8bNThnGhQEni7Gsebw=)
6: rleI_lIS5woMuB3c6gl94b-COqI.roa (hash: QD88ExDvyIgWPGx1fjBATSvd4/kmty0tfSEnAJh+eY0=)
7: svljudJa91rajYPx0fmVOIVvYy4.roa (hash: KENWVcLSkUOvWMFTwP8jYxXyCqWSFbTijw1QUg6qqj4=)
8: wkk-CAjW8nH2K3kEmzjceaKq94k.roa (hash: UU/D7ID4PKru4t3/Cm98EfKQeds7x948vKruRVhOLmE=)
9: z3dfCKY-XzYavmfFllpELqg3CVU.roa (hash: MftupAXNsvL9dReFS9DSAE/DEUhtlr4ljGLiCkzWkHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.mft
rsync://rpki.ripe.net/repository/DEFAULT/H-ZfK2FsC9tmBtsKAvOQPYog2b0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:b1:6e:f5:5e:37:fe:67:10:74:dc:2d:4a:38:f2:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe65f2b616c0bdb6606db0a02f3903d8a20d9bd
Validity
Not Before: Sep 20 12:01:34 2026 GMT
Not After : Sep 21 12:01:34 2026 GMT
Subject: CN=b5d183b42e6a690cf5d1d83cb75e09a31b4970f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1a:44:c5:4b:45:5b:4b:11:c7:c4:18:69:d2:
ea:7d:69:ff:d4:32:01:19:64:fd:48:dd:d0:0e:da:
4d:4f:48:ce:ac:73:1b:3d:22:fe:62:2c:2f:36:68:
47:a1:bf:c7:44:46:97:b2:bc:6b:09:d2:16:c3:2b:
7b:56:3e:08:71:68:35:78:5d:21:70:6b:4e:64:2b:
cb:ab:75:99:e7:92:41:63:fc:17:6e:d1:ef:8c:85:
44:16:dd:de:6e:69:fa:a0:93:9f:fe:4b:34:60:2d:
f2:97:b8:b2:f0:0f:da:92:d8:a7:42:dd:29:de:00:
80:4c:0a:50:69:39:fc:76:24:71:0a:ad:46:56:bf:
a6:ad:e5:5b:57:98:40:54:7e:53:10:a8:21:e5:b8:
79:36:b2:a2:80:da:45:99:44:e0:73:28:fe:05:54:
a8:58:94:d2:60:7f:dc:fc:da:50:2f:13:3e:04:06:
8b:f8:28:d8:3c:48:ac:ad:52:64:c2:ed:61:f4:e6:
6a:7c:73:84:6d:03:e7:58:cd:df:e0:30:8c:9a:5b:
c5:71:14:ab:ff:4a:ea:7f:a4:fd:cd:1b:9c:0a:53:
3a:8a:96:38:04:03:17:56:71:e6:c6:3d:f7:68:30:
c0:31:81:fd:8f:96:1e:00:c6:45:3c:13:8b:eb:4d:
66:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D1:83:B4:2E:6A:69:0C:F5:D1:D8:3C:B7:5E:09:A3:1B:49:70:F8
X509v3 Authority Key Identifier:
keyid:1F:E6:5F:2B:61:6C:0B:DB:66:06:DB:0A:02:F3:90:3D:8A:20:D9:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-ZfK2FsC9tmBtsKAvOQPYog2b0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:12:21:aa:bf:6e:72:1e:bb:99:fc:76:c5:52:dd:94:bc:a2:
6c:6d:db:90:e0:b1:a0:30:e9:84:95:47:de:07:64:cc:c4:47:
86:14:4d:f9:1e:5d:29:a7:8b:92:41:6d:7f:0e:95:d9:60:43:
18:41:03:f5:e4:d1:9e:13:27:47:c3:b4:fa:bb:4c:e8:54:60:
52:cd:d4:ad:b3:73:a4:2c:e3:93:21:85:92:ce:88:b3:19:60:
45:ef:df:66:77:e8:fd:c4:06:4e:1d:d1:3f:17:fa:03:00:b7:
25:73:94:33:59:ce:ac:53:35:d5:88:63:46:1b:ff:46:66:89:
b7:b8:c8:89:1e:3d:db:2c:41:85:e5:55:78:ba:4d:82:c3:c8:
72:6e:24:e8:b2:09:f4:b6:3d:73:36:89:2d:c7:66:98:fd:58:
78:06:92:5f:dc:13:4e:a3:f7:9f:19:f3:dc:58:8f:c8:cb:68:
ee:e8:20:18:f7:d1:59:f7:c9:6a:f4:a5:4b:80:ab:d0:90:2b:
8f:0a:85:02:cb:48:5b:96:1e:50:db:27:13:0d:34:e2:39:26:
fd:db:88:8d:ae:3e:45:27:a7:7e:1f:84:19:ea:17:c0:1f:ee:
5c:50:a4:56:fd:69:9c:fb:5a:e8:e9:c5:39:51:a8:24:aa:8f:
56:08:a2:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC+sW71Xjf+ZxB03C1KOPKPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmZTY1ZjJiNjE2YzBiZGI2NjA2ZGIwYTAyZjM5MDNkOGEy
MGQ5YmQwHhcNMjYwOTIwMTIwMTM0WhcNMjYwOTIxMTIwMTM0WjAzMTEwLwYDVQQD
EyhiNWQxODNiNDJlNmE2OTBjZjVkMWQ4M2NiNzVlMDlhMzFiNDk3MGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxpExUtFW0sRx8QYadLqfWn/1DIB
GWT9SN3QDtpNT0jOrHMbPSL+YiwvNmhHob/HREaXsrxrCdIWwyt7Vj4IcWg1eF0h
cGtOZCvLq3WZ55JBY/wXbtHvjIVEFt3ebmn6oJOf/ks0YC3yl7iy8A/aktinQt0p
3gCATApQaTn8diRxCq1GVr+mreVbV5hAVH5TEKgh5bh5NrKigNpFmUTgcyj+BVSo
WJTSYH/c/NpQLxM+BAaL+CjYPEisrVJkwu1h9OZqfHOEbQPnWM3f4DCMmlvFcRSr
/0rqf6T9zRucClM6ipY4BAMXVnHmxj33aDDAMYH9j5YeAMZFPBOL601mKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLXRg7QuamkM9dHYPLdeCaMbSXD4MB8GA1UdIwQY
MBaAFB/mXythbAvbZgbbCgLzkD2KINm9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSC1aZksyRnNDOXRtQnRzS0F2T1FQWW9nMmIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zY2M3OGEtOGZiNS00NzVhLTg4ODIt
OWQwYzYyMDczNWYxLzEvSC1aZksyRnNDOXRtQnRzS0F2T1FQWW9nMmIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8zY2M3OGEtOGZiNS00NzVhLTg4ODItOWQwYzYyMDczNWYx
LzEvSC1aZksyRnNDOXRtQnRzS0F2T1FQWW9nMmIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACxIhqr9u
ch67mfx2xVLdlLyibG3bkOCxoDDphJVH3gdkzMRHhhRN+R5dKaeLkkFtfw6V2WBD
GEED9eTRnhMnR8O0+rtM6FRgUs3UrbNzpCzjkyGFks6IsxlgRe/fZnfo/cQGTh3R
Pxf6AwC3JXOUM1nOrFM11YhjRhv/RmaJt7jIiR492yxBheVVeLpNgsPIcm4k6LIJ
9LY9czaJLcdmmP1YeAaSX9wTTqP3nxnz3FiPyMto7uggGPfRWffJavSlS4Cr0JAr
jwqFAstIW5YeUNsnEw004jkm/duIja4+RSenfh+EGeoXwB/uXFCkVv1pnPta6OnF
OVGoJKqPVgii+w==
-----END CERTIFICATE-----
Generated at Sun Sep 20 15:49:17 2026 by rpki-client