Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.mft
File: H-ZfK2FsC9tmBtsKAvOQPYog2b0.mft (raw, json)
Hash identifier: zHhONnljbnNLGuVO3oChOkJOJ4PwEHf6ZUlMGEVr06s=
Subject key identifier: 0E:18:67:F3:A6:7A:51:4C:7A:61:21:6D:35:74:98:14:29:97:AC:01
Authority key identifier: 1F:E6:5F:2B:61:6C:0B:DB:66:06:DB:0A:02:F3:90:3D:8A:20:D9:BD
Certificate issuer: /CN=1fe65f2b616c0bdb6606db0a02f3903d8a20d9bd
Certificate serial: 019FAA8873DDEA43983280A6D45E718200E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-ZfK2FsC9tmBtsKAvOQPYog2b0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:01:36 +0000
Manifest this update: Tue 28 Jul 2026 21:01:36 +0000
Manifest next update: Wed 29 Jul 2026 21:01:36 +0000
Files and hashes: 1: Ak46-asOg6f893apfz-5UnXkLOQ.roa (hash: Ih6ExCGo6FYRtpTqMJWDMLQgQI7OlDnwThJk2xsctFQ=)
2: H-ZfK2FsC9tmBtsKAvOQPYog2b0.crl (hash: g7VCAkpsDdnJac7mTRSV09t9YM0+HMTVzB2uAWsLu0E=)
3: T3hmtjVJ0pIGPxsPUX7Jodsysdg.roa (hash: TRJx9DdiSo189lniYuAWR8maCT8iYXtHoZzttgkFt5k=)
4: Yfi7MUIVXQqbg1C82iKiGDNumqg.roa (hash: 2sxGn69QVvco7Us4OUWBJG4j6XnLH42EKG1hbOQHeSI=)
5: ljw7cDT5mL0x04_8nIe-xA6UgWQ.roa (hash: P5+YtEjNM2sBRzQ0PGWX8dgDC8bNThnGhQEni7Gsebw=)
6: rleI_lIS5woMuB3c6gl94b-COqI.roa (hash: QD88ExDvyIgWPGx1fjBATSvd4/kmty0tfSEnAJh+eY0=)
7: svljudJa91rajYPx0fmVOIVvYy4.roa (hash: KENWVcLSkUOvWMFTwP8jYxXyCqWSFbTijw1QUg6qqj4=)
8: wkk-CAjW8nH2K3kEmzjceaKq94k.roa (hash: UU/D7ID4PKru4t3/Cm98EfKQeds7x948vKruRVhOLmE=)
9: z3dfCKY-XzYavmfFllpELqg3CVU.roa (hash: MftupAXNsvL9dReFS9DSAE/DEUhtlr4ljGLiCkzWkHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.mft
rsync://rpki.ripe.net/repository/DEFAULT/H-ZfK2FsC9tmBtsKAvOQPYog2b0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:73:dd:ea:43:98:32:80:a6:d4:5e:71:82:00:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe65f2b616c0bdb6606db0a02f3903d8a20d9bd
Validity
Not Before: Jul 28 21:01:36 2026 GMT
Not After : Jul 29 21:01:36 2026 GMT
Subject: CN=0e1867f3a67a514c7a61216d357498142997ac01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c7:07:21:ef:f5:b5:89:91:8e:77:02:12:4e:
8e:a7:1f:23:71:24:c4:37:a0:6e:3e:d2:8b:64:85:
ff:fb:f4:11:cf:48:61:39:34:b3:c1:c7:96:78:32:
92:98:85:5d:01:fd:20:92:fa:67:fa:5d:66:2b:79:
1e:d8:5a:ee:02:6f:4a:1d:8e:0e:e8:9b:13:c6:30:
ed:4e:90:28:78:1c:59:23:d7:e1:8e:8f:3d:a9:93:
d0:d6:4a:d4:6f:77:1f:5e:56:e8:a9:4b:8a:35:29:
ec:3c:98:b3:f3:6b:1a:8c:42:7e:b5:9c:db:55:cc:
4d:dd:19:b5:70:b9:55:58:63:44:8a:65:d4:d3:2c:
82:a4:27:d0:24:ea:3e:cb:f2:46:d2:f9:0c:86:d7:
f1:b0:ef:10:28:a7:c4:2a:90:cb:5c:07:e7:f8:8c:
0c:bf:ae:7a:45:b0:15:10:b5:31:a7:7a:46:11:3a:
a0:45:13:cc:b1:ed:8d:ea:7c:ef:c7:18:18:1d:dc:
3a:c3:5a:0f:04:54:d8:cf:46:c0:fb:61:ee:0d:be:
93:fd:de:16:a6:c7:93:84:d8:d0:91:1c:88:c0:f8:
17:14:55:d3:a5:d6:f5:0d:07:df:3d:4b:20:a0:9b:
f2:a1:1f:6d:f9:d5:f2:33:c8:d4:bc:2b:77:1f:74:
be:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:18:67:F3:A6:7A:51:4C:7A:61:21:6D:35:74:98:14:29:97:AC:01
X509v3 Authority Key Identifier:
keyid:1F:E6:5F:2B:61:6C:0B:DB:66:06:DB:0A:02:F3:90:3D:8A:20:D9:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-ZfK2FsC9tmBtsKAvOQPYog2b0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:10:0f:19:8c:ac:57:14:29:f3:bd:75:9f:c5:bc:26:50:f5:
3b:40:23:56:02:24:64:d8:be:1a:8c:82:93:4e:38:4c:47:69:
20:da:5a:04:92:45:92:13:47:19:fd:22:34:6b:d0:68:0a:e6:
db:18:5d:7e:76:21:26:ba:75:03:71:68:f3:4e:b8:a0:48:42:
68:f5:cb:77:2d:cc:81:45:db:0e:27:c1:32:9a:3b:f5:36:e5:
0a:54:84:73:20:63:e1:0b:62:6f:cc:0b:3f:dc:78:34:a2:80:
4e:18:12:66:b3:11:87:c6:12:73:42:96:11:71:da:bf:40:38:
66:07:de:87:0d:e8:fa:9e:49:7e:33:fe:38:03:27:0d:1d:55:
ab:34:ac:07:bc:82:4c:69:df:10:df:5e:20:a8:cb:2e:96:47:
08:37:d9:d4:1c:38:b4:dc:af:e0:24:97:f4:aa:00:b2:6d:b8:
e2:cf:fc:bb:d0:5b:01:6a:de:6b:3f:88:0f:44:ab:aa:4a:92:
c2:b0:2a:6b:82:56:e0:e2:9b:28:60:3e:a3:4c:4a:d7:ea:02:
f3:f1:94:06:18:54:26:d7:d4:62:ed:ab:44:88:bb:54:86:a7:
a9:7b:06:67:ec:35:bd:b8:10:63:46:b7:e2:7a:c8:9e:bc:f5:
db:0b:34:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:22:34 2026 by rpki-client