Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
File: H2fPHKLeoy_NlwLdJRDra_K2hhA.mft (raw, json)
Hash identifier: 7kLa+cHw6dH4wwlnQRf3ZHg6yInRaix3u/XZoD9z5ro=
Subject key identifier: 9C:74:52:4E:BF:36:FC:62:C0:0C:B8:BB:45:AA:96:7E:05:59:4A:24
Authority key identifier: 1F:67:CF:1C:A2:DE:A3:2F:CD:97:02:DD:25:10:EB:6B:F2:B6:86:10
Certificate issuer: /CN=1f67cf1ca2dea32fcd9702dd2510eb6bf2b68610
Certificate serial: 019FAC080E032B5B4175C803152821B5541E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
Manifest number: 0976
Signing time: Wed 29 Jul 2026 04:00:36 +0000
Manifest this update: Wed 29 Jul 2026 04:00:36 +0000
Manifest next update: Thu 30 Jul 2026 04:00:36 +0000
Files and hashes: 1: G6Qimd7tAYQUvnYU3UCWKXw35BE.roa (hash: Y7JkYNH4E9BqcN5WcuNtct/o2Kwq3jTuydqYb5r4gpo=)
2: H2fPHKLeoy_NlwLdJRDra_K2hhA.crl (hash: PBW/pp7J26aRs6DrmJaGLwhLp7V7MTILoBe5+FBxwj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:0e:03:2b:5b:41:75:c8:03:15:28:21:b5:54:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f67cf1ca2dea32fcd9702dd2510eb6bf2b68610
Validity
Not Before: Jul 29 04:00:36 2026 GMT
Not After : Jul 30 04:00:36 2026 GMT
Subject: CN=9c74524ebf36fc62c00cb8bb45aa967e05594a24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d5:08:58:09:9a:6d:39:58:32:6e:91:9d:43:
2c:c0:76:32:0f:08:57:85:e2:38:84:22:48:2f:1f:
26:cd:c4:9e:96:ae:33:b0:f5:a4:ad:df:38:54:52:
61:28:93:c8:4d:27:8a:74:75:cc:fc:2d:a6:cb:d1:
ff:ca:3a:f9:c7:43:fb:38:21:64:00:a8:5f:b9:4b:
6e:b8:19:56:96:07:ba:a8:08:5b:b1:42:cd:87:65:
e9:8f:db:3c:56:08:ab:40:82:09:70:ef:df:51:99:
c6:8e:db:47:e9:53:d6:0b:37:3c:9b:da:c7:3a:96:
37:0a:ef:8e:05:7e:a7:52:c4:d9:66:ac:db:a7:f7:
c6:b1:eb:8c:2a:4d:c8:3b:32:97:1a:9e:38:f2:e7:
04:38:2e:c8:48:bf:ee:43:28:34:7c:5d:5c:3a:19:
b2:1e:59:c1:0f:7b:00:a8:b3:10:76:a0:e0:82:71:
a5:3f:77:3d:24:57:51:f3:2f:14:da:a1:28:0f:0f:
e5:0c:28:8e:13:9e:03:2b:f6:39:c8:ff:ae:cc:a0:
44:b9:0f:7f:95:4f:d6:3a:99:be:e7:cb:8a:72:d3:
e8:1f:ee:31:30:71:b0:98:0e:60:eb:3e:cd:9f:b1:
9d:8e:5e:bb:3b:03:87:68:10:54:b8:f9:ca:bf:df:
b3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:74:52:4E:BF:36:FC:62:C0:0C:B8:BB:45:AA:96:7E:05:59:4A:24
X509v3 Authority Key Identifier:
keyid:1F:67:CF:1C:A2:DE:A3:2F:CD:97:02:DD:25:10:EB:6B:F2:B6:86:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:4c:d5:fc:db:eb:b9:fd:41:96:6d:62:ca:a4:9f:25:30:ab:
43:1c:1b:b2:c5:b7:ed:49:24:fd:c6:09:fa:30:b0:45:df:4c:
b5:fe:cf:e2:9b:71:79:24:e4:19:03:8f:15:b4:cd:38:40:2b:
63:cd:34:8d:b1:a0:f3:b6:b7:3c:61:00:7a:23:7b:12:df:0b:
67:1b:40:88:59:90:0c:70:a9:6f:f1:ea:39:d3:9a:69:a4:15:
2c:d4:f3:19:84:69:89:24:e3:3b:3f:d9:7a:54:bf:0f:25:66:
31:10:80:03:b3:6d:95:d1:7d:1b:ea:fa:53:ca:9c:dd:2f:7b:
0c:8a:80:5b:a1:b2:bd:6f:5b:d9:1d:91:8f:91:7d:99:70:34:
f2:05:31:db:74:80:f5:24:8f:31:3f:ef:27:fb:27:f4:3e:5d:
3c:53:46:9f:25:58:9e:7c:bf:67:8d:75:c0:78:9d:c7:2b:7d:
ad:39:00:bf:71:aa:f2:cf:8f:53:a0:96:a4:f1:4f:4a:8e:a6:
32:65:58:44:09:72:63:fb:a5:98:c6:55:b9:20:24:17:7a:11:
b7:8f:ba:5c:21:e9:93:9c:d9:fd:93:ab:f1:10:29:43:35:a0:
81:d7:7a:72:58:80:17:11:db:74:ab:d1:a9:7c:b2:83:92:88:
6d:db:20:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:28:34 2026 by rpki-client