Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
File: H0VsxbfOPCB594b-wd-8slJDmUE.mft (raw, json)
Hash identifier: q4GC5qbyCNmgZaNHhdYFd/leSjFLKHHRyXZ+2HYSMxU=
Subject key identifier: AE:15:E9:ED:2C:22:69:FE:BA:E3:31:6E:56:2C:3C:7B:87:8F:0C:B6
Authority key identifier: 1F:45:6C:C5:B7:CE:3C:20:79:F7:86:FE:C1:DF:BC:B2:52:43:99:41
Certificate issuer: /CN=1f456cc5b7ce3c2079f786fec1dfbcb252439941
Certificate serial: 019CAA21EAB553E642FFF38D3848DF4D5BBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
Manifest number: 0F37
Signing time: Sun 01 Mar 2026 16:01:15 +0000
Manifest this update: Sun 01 Mar 2026 16:01:15 +0000
Manifest next update: Mon 02 Mar 2026 16:01:15 +0000
Files and hashes: 1: H0VsxbfOPCB594b-wd-8slJDmUE.crl (hash: 27yz9liVRD9IsUYfd6ogQ0n64iUBW/XqqeW+AbezYgg=)
2: yJkXqf-6_RxZaZzbiNXMwPnxvq8.roa (hash: asQ8pI3HwhkbEj1BiWlijSaj7X1D2Q245alm99XOvIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:ea:b5:53:e6:42:ff:f3:8d:38:48:df:4d:5b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f456cc5b7ce3c2079f786fec1dfbcb252439941
Validity
Not Before: Mar 1 16:01:15 2026 GMT
Not After : Mar 2 16:01:15 2026 GMT
Subject: CN=ae15e9ed2c2269febae3316e562c3c7b878f0cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b8:39:94:95:cb:64:df:f0:e7:23:90:73:c5:
81:44:d5:69:e0:c9:c2:41:b4:bf:94:41:1e:e6:36:
18:67:b0:78:d9:31:27:8a:f2:82:96:05:f1:78:0a:
c1:25:bc:91:ef:74:a8:fa:ed:b1:70:b2:dc:82:49:
31:40:5a:51:72:6f:20:bd:b8:36:3a:d4:5a:23:f5:
c7:09:e1:a0:c7:22:be:ee:21:23:d7:47:64:05:b2:
a1:6f:5c:0f:b7:1f:e5:e4:c1:3d:a6:b8:dc:fd:fb:
5b:79:80:ce:58:9f:27:b6:e0:00:b4:33:37:91:ba:
15:b9:d6:37:b1:1c:0d:52:6d:4d:9f:4d:fe:ed:fc:
8c:e8:3a:a3:15:6e:75:b9:c1:f7:b2:8d:d5:5f:c0:
8b:09:19:99:18:68:8d:f2:57:9d:b3:fe:5c:03:94:
d2:be:73:21:65:cf:ed:cf:e2:b7:b8:6a:80:d2:74:
19:cb:6a:65:4d:e5:b6:cc:10:b6:bc:72:1d:26:e9:
5a:1e:08:41:73:05:ff:ac:03:52:2e:39:23:38:2d:
30:7f:2e:2a:af:18:3c:7f:a4:df:35:36:8b:eb:c7:
a5:69:0e:82:87:f7:4c:0b:ad:54:b7:2c:bc:c1:d1:
d3:9d:1a:43:dd:c0:f3:ac:83:e1:9f:0f:60:4e:28:
1c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:15:E9:ED:2C:22:69:FE:BA:E3:31:6E:56:2C:3C:7B:87:8F:0C:B6
X509v3 Authority Key Identifier:
keyid:1F:45:6C:C5:B7:CE:3C:20:79:F7:86:FE:C1:DF:BC:B2:52:43:99:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:90:31:6c:c6:b2:49:9e:77:1c:c1:75:20:2e:bf:a4:29:dc:
9e:49:68:5b:46:72:03:d2:a1:50:3e:af:09:29:0f:6d:1e:e8:
00:c1:4c:d0:05:e6:7f:5c:be:8f:24:15:26:b3:90:91:ed:66:
19:c0:81:40:e8:a3:95:78:72:c6:c3:5c:24:8b:9a:b1:f8:e8:
27:0e:ec:26:04:95:a9:4c:a6:f6:32:76:6d:dd:9e:a8:36:09:
a1:eb:0e:59:9d:54:82:06:80:ea:4c:cf:30:c3:f2:8d:c7:0a:
91:7a:0e:fd:7a:17:65:64:83:fe:63:e0:f4:48:6e:fe:b3:76:
ac:5c:dc:04:71:61:52:88:c8:9d:f5:69:42:d2:4c:14:fe:db:
62:c8:a7:d4:09:12:59:35:63:e4:73:24:39:1b:f9:af:26:15:
d5:d3:4a:69:8c:5a:e5:4f:c5:83:7d:f7:98:09:61:4e:e8:0b:
f9:b8:8d:ba:9a:ca:a1:0f:b5:b5:23:8b:9e:c6:49:5c:23:31:
66:ec:05:20:a0:d6:9a:6e:e7:6b:a0:cc:15:fc:88:44:0e:60:
78:dc:c5:43:77:38:cf:b1:1a:a2:4f:d8:e6:d8:a4:a4:ac:c8:
eb:f9:6a:44:7f:cd:20:55:59:b3:3b:15:11:a7:8e:cb:f2:5b:
cc:ef:44:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:34 2026 by rpki-client