Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
File: H2fPHKLeoy_NlwLdJRDra_K2hhA.mft (raw, json)
Hash identifier: psub22YMHDikSzjnBPaVfFP4yuhZtLv/WCQhTln3fx4=
Subject key identifier: 81:F6:76:55:CB:25:72:92:34:F7:5A:51:3D:3C:94:0C:51:0D:01:8D
Authority key identifier: 1F:67:CF:1C:A2:DE:A3:2F:CD:97:02:DD:25:10:EB:6B:F2:B6:86:10
Certificate issuer: /CN=1f67cf1ca2dea32fcd9702dd2510eb6bf2b68610
Certificate serial: 01A1341135F8E865796D6060CC89B796194C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
Manifest number: 0A41
Signing time: Tue 13 Oct 2026 07:01:45 +0000
Manifest this update: Tue 13 Oct 2026 07:01:45 +0000
Manifest next update: Wed 14 Oct 2026 07:01:45 +0000
Files and hashes: 1: G6Qimd7tAYQUvnYU3UCWKXw35BE.roa (hash: Y7JkYNH4E9BqcN5WcuNtct/o2Kwq3jTuydqYb5r4gpo=)
2: H2fPHKLeoy_NlwLdJRDra_K2hhA.crl (hash: X9EkNQpOJtUwJEciNVK4DU0iEJK7uv0jYRH7XkcfKxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 07:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:11:35:f8:e8:65:79:6d:60:60:cc:89:b7:96:19:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f67cf1ca2dea32fcd9702dd2510eb6bf2b68610
Validity
Not Before: Oct 13 07:01:45 2026 GMT
Not After : Oct 14 07:01:45 2026 GMT
Subject: CN=81f67655cb25729234f75a513d3c940c510d018d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:24:b7:fc:9a:d8:25:af:6e:98:c2:6a:3c:1f:
70:87:aa:88:16:ce:6c:e8:b6:61:91:92:36:08:2c:
85:b3:9d:42:f3:16:98:49:89:68:50:01:41:d6:e6:
87:b8:2d:22:1e:98:ee:b6:d5:99:1f:d5:47:1e:8c:
05:4a:3f:3a:70:54:f1:c1:dc:17:62:08:7b:e5:f3:
30:be:af:c4:45:8c:1b:4a:69:c4:4a:57:6d:4b:80:
27:02:5c:20:d8:d1:ee:b9:14:b1:ed:4c:b0:68:7e:
f7:a0:09:8e:95:fb:aa:e7:59:a0:3d:fb:c4:93:8a:
dc:4f:09:c0:98:b4:2c:d2:05:7f:7d:b7:7b:d6:57:
72:ee:95:d7:38:5f:68:6f:da:4d:f6:4a:af:b6:1b:
6f:9a:c2:31:ca:32:f6:6c:58:31:de:ca:7d:84:ae:
1a:f4:40:38:4d:fa:d0:44:3a:97:95:ef:1c:b4:53:
ba:ec:ed:86:40:20:e8:be:03:02:66:ab:cb:e9:07:
03:44:9c:9e:66:5c:bf:ac:be:37:a3:04:9e:48:a8:
fd:fb:57:25:b3:01:c7:60:af:36:72:05:9d:6d:74:
af:ae:b4:7b:36:37:d4:07:0e:76:9a:92:a5:1d:d0:
f7:e3:7e:26:28:fc:fd:91:16:d4:02:14:e2:40:d4:
99:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F6:76:55:CB:25:72:92:34:F7:5A:51:3D:3C:94:0C:51:0D:01:8D
X509v3 Authority Key Identifier:
keyid:1F:67:CF:1C:A2:DE:A3:2F:CD:97:02:DD:25:10:EB:6B:F2:B6:86:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:e1:1e:50:62:6a:54:3c:7e:cd:63:e3:64:1d:9c:a1:33:1b:
21:9c:30:9f:34:bc:45:de:d9:1b:50:12:17:24:3b:10:96:60:
94:b1:ee:82:ae:fa:65:bb:30:c5:16:d7:81:cd:6e:28:01:09:
bb:4c:34:5d:75:8f:bb:01:bd:de:be:a5:ae:cf:2b:53:ce:12:
f0:80:8a:be:04:1a:76:8d:cd:70:52:2e:57:18:0b:25:76:3a:
fd:83:74:80:89:97:0a:ad:d5:23:a0:b5:d8:48:78:3b:bf:1a:
99:db:fa:51:e0:e6:f0:1e:5c:21:9f:b0:32:1a:e8:62:12:17:
d2:2f:81:ed:38:7c:9f:fc:0d:b9:99:7d:e0:c0:b8:95:b7:1b:
b2:b4:d9:1d:10:a6:5c:12:32:16:df:d5:cb:12:c9:cb:9b:d0:
d2:d9:17:9f:98:01:2a:7f:de:b9:4a:f5:98:9f:d9:ed:7c:12:
82:bf:42:ea:f1:a7:48:bc:02:aa:c5:43:11:e9:3a:a0:22:91:
0a:4b:a2:fb:e0:bf:fa:cb:9c:e2:3d:50:37:60:c8:81:77:2f:
eb:69:74:89:b4:36:fc:59:79:99:79:c8:57:82:78:a3:3a:0f:
e3:4e:93:df:9e:32:44:4b:66:bb:24:29:68:23:73:f4:8c:a0:
8f:98:3c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 15:09:19 2026 by rpki-client