Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
File: H0VsxbfOPCB594b-wd-8slJDmUE.mft (raw, json)
Hash identifier: 1EOpmY4dvt5SDmOCW7GrlXZJ1NlEPikii59nfF7V/pU=
Subject key identifier: 7E:FA:5A:7A:27:97:9E:B4:66:30:79:22:FB:4B:C6:25:E1:1D:5A:4C
Authority key identifier: 1F:45:6C:C5:B7:CE:3C:20:79:F7:86:FE:C1:DF:BC:B2:52:43:99:41
Certificate issuer: /CN=1f456cc5b7ce3c2079f786fec1dfbcb252439941
Certificate serial: 019D999984B12A987AA8A03EB4E9239CB734
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
Manifest number: 0FB3
Signing time: Fri 17 Apr 2026 04:01:07 +0000
Manifest this update: Fri 17 Apr 2026 04:01:07 +0000
Manifest next update: Sat 18 Apr 2026 04:01:07 +0000
Files and hashes: 1: H0VsxbfOPCB594b-wd-8slJDmUE.crl (hash: cMSDtfYH0P5KvY/VjGH2V2JcVxGa8LTx6ODMsZKb9VU=)
2: yJkXqf-6_RxZaZzbiNXMwPnxvq8.roa (hash: asQ8pI3HwhkbEj1BiWlijSaj7X1D2Q245alm99XOvIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:84:b1:2a:98:7a:a8:a0:3e:b4:e9:23:9c:b7:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f456cc5b7ce3c2079f786fec1dfbcb252439941
Validity
Not Before: Apr 17 04:01:07 2026 GMT
Not After : Apr 18 04:01:07 2026 GMT
Subject: CN=7efa5a7a27979eb466307922fb4bc625e11d5a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:27:98:60:4b:98:3a:54:99:f8:53:78:95:76:
45:b7:13:da:b6:ea:e9:ad:61:b1:41:04:ef:7f:a4:
5f:1e:12:b1:e0:92:07:8b:e2:b8:b5:6d:66:a3:93:
77:de:b5:08:f3:54:94:c2:9b:0f:48:d8:ab:03:22:
09:35:20:ad:18:24:64:96:be:b1:9a:f5:f9:fd:76:
26:f3:70:09:ff:8a:d4:f5:ec:5c:46:33:49:73:fc:
a1:5e:f5:f1:fa:4e:f5:4c:b3:ac:3a:2d:f2:bc:95:
c9:49:e7:8a:2e:4d:a5:9e:da:14:26:d7:19:65:1c:
25:92:4f:0e:af:f2:74:21:4b:97:f7:5a:87:82:00:
89:01:02:53:12:3b:e2:0a:e5:55:d0:3a:95:44:b9:
3e:ca:d7:79:d7:1f:f1:df:6f:27:04:45:6d:8c:22:
6e:37:1a:e2:1d:94:98:db:3f:ad:11:7e:84:df:b1:
a0:53:2a:dd:05:3b:f9:dd:d2:0f:bb:59:e2:82:36:
8b:9c:11:30:85:9b:b9:cf:cd:aa:1a:b1:ac:41:8d:
43:76:41:f5:6b:ef:13:0a:ce:13:e6:25:8b:76:e3:
7c:cf:c3:ab:39:ce:4f:73:c7:6d:78:a6:af:7d:34:
d4:52:c1:94:19:d6:1e:49:cf:a8:28:6e:48:7e:34:
30:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:FA:5A:7A:27:97:9E:B4:66:30:79:22:FB:4B:C6:25:E1:1D:5A:4C
X509v3 Authority Key Identifier:
keyid:1F:45:6C:C5:B7:CE:3C:20:79:F7:86:FE:C1:DF:BC:B2:52:43:99:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:f3:9e:80:1f:8a:ef:07:16:53:78:22:1b:84:aa:b1:6d:ed:
a4:bd:c3:3b:59:24:ea:35:32:f7:96:c6:a9:68:e8:0b:4a:f9:
12:b8:3d:eb:5e:ff:be:e6:df:8a:54:33:6b:dc:1d:11:04:bb:
90:17:b8:35:6d:c5:0a:40:10:c2:cb:bc:71:85:a3:4f:96:c1:
73:70:19:b7:c3:88:ee:d9:8e:42:e5:96:2d:f5:c0:7a:82:88:
db:07:20:7a:8a:6f:01:bb:58:ce:63:64:87:13:b3:96:e5:02:
a6:c0:b8:36:32:57:ea:28:3f:b9:6d:d1:00:77:59:18:a6:62:
e5:a3:69:3c:6e:06:f2:d1:7b:51:46:fe:f1:f5:3c:18:79:32:
78:c0:2c:30:a0:67:0b:d6:61:76:98:cd:2c:3d:44:89:4f:ad:
50:f4:03:58:bf:58:c0:32:e6:44:d2:57:15:63:e3:d4:91:80:
8d:a8:c8:73:d5:34:35:d8:c8:56:ad:11:3e:e9:90:5a:4d:0b:
4e:d9:c4:af:98:05:d4:c9:17:c7:6d:a2:44:05:dc:62:85:e7:
fc:b2:c7:9d:5d:2f:2a:20:f3:a7:ea:73:71:dc:75:49:89:7a:
e6:32:3a:9a:1d:5c:6f:6e:df:f3:66:60:b0:ca:ba:97:8b:a3:
ec:d8:68:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:44:36 2026 by rpki-client