Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
File: H0VsxbfOPCB594b-wd-8slJDmUE.mft (raw, json)
Hash identifier: Z36pcJschrzDaMs/Lg/5HGPEP32gBJ3x7rgoJcIDi74=
Subject key identifier: 72:CA:C9:E4:4D:76:35:41:26:82:F6:84:D6:89:0C:48:7C:10:AC:9D
Authority key identifier: 1F:45:6C:C5:B7:CE:3C:20:79:F7:86:FE:C1:DF:BC:B2:52:43:99:41
Certificate issuer: /CN=1f456cc5b7ce3c2079f786fec1dfbcb252439941
Certificate serial: 01A0E9651418DE1C3BBD16554BC9A8020342
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
Manifest number: 116A
Signing time: Mon 28 Sep 2026 19:01:50 +0000
Manifest this update: Mon 28 Sep 2026 19:01:50 +0000
Manifest next update: Tue 29 Sep 2026 19:01:50 +0000
Files and hashes: 1: H0VsxbfOPCB594b-wd-8slJDmUE.crl (hash: YS9d4iVhJqeY4UixQPVKCJENSyYKxdwjucavxi+YEzM=)
2: yJkXqf-6_RxZaZzbiNXMwPnxvq8.roa (hash: asQ8pI3HwhkbEj1BiWlijSaj7X1D2Q245alm99XOvIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:65:14:18:de:1c:3b:bd:16:55:4b:c9:a8:02:03:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f456cc5b7ce3c2079f786fec1dfbcb252439941
Validity
Not Before: Sep 28 19:01:50 2026 GMT
Not After : Sep 29 19:01:50 2026 GMT
Subject: CN=72cac9e44d7635412682f684d6890c487c10ac9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5f:13:23:e3:f7:93:34:9c:26:54:b7:8b:a2:
96:7e:67:39:76:f5:e0:19:d6:91:4a:b4:da:49:60:
c6:98:4c:88:c3:f8:64:3b:f2:6a:72:fd:f6:f0:72:
20:da:41:30:46:79:ac:71:24:55:c6:d0:64:16:67:
fe:32:28:fd:c7:81:b0:a4:87:9e:7b:3a:a4:18:8b:
2e:91:86:b9:e1:37:f5:82:27:8c:7f:0c:26:23:b9:
d9:37:17:4d:d3:5e:da:74:9c:28:af:1f:dd:b4:08:
74:fb:63:29:a0:a7:b2:de:39:9d:1f:7e:80:f5:7d:
d5:bc:01:7c:3c:07:92:0a:6d:a2:78:44:3c:b8:d7:
55:a6:27:d7:82:fb:c0:fd:98:18:2a:46:27:74:bf:
4a:41:3a:94:3c:0c:20:07:dc:3e:d2:e3:35:b9:bf:
69:ee:09:4a:ad:fa:e5:7a:98:70:29:38:19:5c:2c:
b9:1d:2f:68:a0:7a:a9:d3:a7:c4:03:51:19:60:11:
a0:1b:8d:7a:f5:56:38:58:1c:bd:77:42:c0:fb:39:
59:4a:9a:5d:27:3d:bf:5f:1a:6f:0a:9a:04:c5:6d:
e7:3a:98:38:f3:20:60:5b:1a:98:76:67:8c:88:ad:
db:6f:28:a0:dd:5d:45:2d:2c:f1:7f:4a:95:fa:71:
a3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:CA:C9:E4:4D:76:35:41:26:82:F6:84:D6:89:0C:48:7C:10:AC:9D
X509v3 Authority Key Identifier:
keyid:1F:45:6C:C5:B7:CE:3C:20:79:F7:86:FE:C1:DF:BC:B2:52:43:99:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:24:22:8d:95:b1:1d:e2:d5:a7:e0:b8:45:eb:b6:45:b3:56:
5d:cf:ad:a0:15:36:e2:54:6c:a0:5e:8b:1d:a6:82:0b:c9:ce:
69:42:13:5c:7a:a8:b3:48:f9:d7:a0:28:dc:c4:65:f5:c1:07:
fb:43:ca:0a:01:7c:c4:49:8f:0e:75:65:f7:a2:f3:7f:6d:9a:
03:53:94:6c:f7:18:28:58:f1:8e:c4:fc:99:9c:1f:27:ab:39:
9a:8b:ef:0d:b5:81:c2:14:e3:f2:95:42:e7:0e:3f:27:b3:be:
9a:1f:c3:cb:0e:5e:cc:85:de:79:9b:6d:9e:f7:43:5e:ce:16:
ce:e7:6c:9a:0f:e7:85:b6:91:6c:b6:44:59:8b:2f:bb:4b:aa:
b0:ce:74:a8:18:af:43:25:3c:67:d8:e7:d1:bb:9d:2f:91:0c:
fd:0a:a6:ee:82:b6:51:c6:d6:a0:22:55:b5:93:9e:35:77:98:
42:12:11:ca:18:67:d0:59:d0:cc:ef:cd:08:a8:e9:c4:66:12:
c2:c7:98:b4:e2:5c:73:7e:e6:20:d4:e1:22:69:34:1b:3d:ec:
7c:f5:3b:01:e3:e7:cf:f2:c2:1e:f6:61:8e:9f:3f:29:19:64:
b7:d1:90:2a:e5:63:8c:d0:c5:44:00:f0:bd:28:dd:01:51:ed:
9e:be:62:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDpZRQY3hw7vRZVS8moAgNCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNDU2Y2M1YjdjZTNjMjA3OWY3ODZmZWMxZGZiY2IyNTI0
Mzk5NDEwHhcNMjYwOTI4MTkwMTUwWhcNMjYwOTI5MTkwMTUwWjAzMTEwLwYDVQQD
Eyg3MmNhYzllNDRkNzYzNTQxMjY4MmY2ODRkNjg5MGM0ODdjMTBhYzlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx18TI+P3kzScJlS3i6KWfmc5dvXg
GdaRSrTaSWDGmEyIw/hkO/Jqcv328HIg2kEwRnmscSRVxtBkFmf+Mij9x4GwpIee
ezqkGIsukYa54Tf1gieMfwwmI7nZNxdN017adJworx/dtAh0+2MpoKey3jmdH36A
9X3VvAF8PAeSCm2ieEQ8uNdVpifXgvvA/ZgYKkYndL9KQTqUPAwgB9w+0uM1ub9p
7glKrfrlephwKTgZXCy5HS9ooHqp06fEA1EZYBGgG4169VY4WBy9d0LA+zlZSppd
Jz2/XxpvCpoExW3nOpg48yBgWxqYdmeMiK3bbyig3V1FLSzxf0qV+nGjkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHLKyeRNdjVBJoL2hNaJDEh8EKydMB8GA1UdIwQY
MBaAFB9FbMW3zjwgefeG/sHfvLJSQ5lBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDBWc3hiZk9QQ0I1OTRiLXdkLThzbEpEbVVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9kYWUyOTAtMWI4NC00ZmQwLTkwNzIt
YmQ3ZDM0NTFhYTY2LzEvSDBWc3hiZk9QQ0I1OTRiLXdkLThzbEpEbVVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9kYWUyOTAtMWI4NC00ZmQwLTkwNzItYmQ3ZDM0NTFhYTY2
LzEvSDBWc3hiZk9QQ0I1OTRiLXdkLThzbEpEbVVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHiQijZWx
HeLVp+C4Reu2RbNWXc+toBU24lRsoF6LHaaCC8nOaUITXHqos0j516Ao3MRl9cEH
+0PKCgF8xEmPDnVl96Lzf22aA1OUbPcYKFjxjsT8mZwfJ6s5movvDbWBwhTj8pVC
5w4/J7O+mh/Dyw5ezIXeeZttnvdDXs4Wzudsmg/nhbaRbLZEWYsvu0uqsM50qBiv
QyU8Z9jn0budL5EM/Qqm7oK2UcbWoCJVtZOeNXeYQhIRyhhn0FnQzO/NCKjpxGYS
wseYtOJcc37mINThImk0Gz3sfPU7AePnz/LCHvZhjp8/KRlkt9GQKuVjjNDFRADw
vSjdAVHtnr5ifg==
-----END CERTIFICATE-----
Generated at Tue Sep 29 02:23:17 2026 by rpki-client