Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
File: H0VsxbfOPCB594b-wd-8slJDmUE.mft (raw, json)
Hash identifier: AoaFjzYXtWRUIW3zmEdD/787JZKRhWx1/649JSh5WtA=
Subject key identifier: 1A:F7:03:36:61:1B:AF:D6:B1:30:29:88:6E:08:7B:FD:E9:F9:3D:38
Authority key identifier: 1F:45:6C:C5:B7:CE:3C:20:79:F7:86:FE:C1:DF:BC:B2:52:43:99:41
Certificate issuer: /CN=1f456cc5b7ce3c2079f786fec1dfbcb252439941
Certificate serial: 019E1EDA4E670554DE559AE74184D08BFE22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
Manifest number: 0FF8
Signing time: Wed 13 May 2026 01:01:23 +0000
Manifest this update: Wed 13 May 2026 01:01:23 +0000
Manifest next update: Thu 14 May 2026 01:01:23 +0000
Files and hashes: 1: H0VsxbfOPCB594b-wd-8slJDmUE.crl (hash: K8r5smC/eoB9s2fsOpqofpEKfa/RIKtBHvD7iByDfAw=)
2: yJkXqf-6_RxZaZzbiNXMwPnxvq8.roa (hash: asQ8pI3HwhkbEj1BiWlijSaj7X1D2Q245alm99XOvIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:4e:67:05:54:de:55:9a:e7:41:84:d0:8b:fe:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f456cc5b7ce3c2079f786fec1dfbcb252439941
Validity
Not Before: May 13 01:01:23 2026 GMT
Not After : May 14 01:01:23 2026 GMT
Subject: CN=1af70336611bafd6b13029886e087bfde9f93d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:59:e6:5a:6c:f4:b0:c1:3e:9b:e5:4c:58:05:
9b:90:79:b0:6c:d5:e3:23:4e:37:c0:3a:fa:a7:15:
bd:af:01:e4:8c:3f:ab:5f:cf:2c:7c:5d:ed:f1:4a:
c9:94:62:70:14:a0:66:99:65:3f:df:bd:e7:47:ea:
81:eb:39:49:bd:1a:81:03:2c:24:6e:9f:80:d2:25:
f4:5c:61:03:b0:ae:81:d1:be:c6:78:c9:d5:79:f6:
4b:89:46:d1:de:89:91:3c:1a:07:4d:57:30:0c:d6:
12:f0:a1:de:66:a1:18:08:07:33:dc:12:a6:1b:b5:
c6:9e:ae:09:e9:2e:91:ba:24:d7:54:62:37:77:92:
16:11:61:d6:1e:3d:ba:bc:81:41:75:d0:c5:44:e3:
92:cf:e7:39:e4:6b:28:5f:bc:98:7a:0d:05:b6:40:
ac:35:5b:9a:c6:95:68:c4:db:f1:f8:8d:67:41:a3:
dd:5b:d0:f1:00:4c:b1:23:52:7a:06:91:4f:48:75:
a6:16:56:52:d1:5d:7e:78:c0:b7:77:e5:98:6f:bc:
09:07:ce:ad:a2:68:25:bb:f9:b6:45:34:ac:fb:5a:
2e:46:d1:b5:58:0b:a1:7e:34:fe:cc:3e:35:e1:1c:
bf:de:0e:4a:1e:a5:e8:10:b1:39:d7:1a:b4:71:51:
f1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F7:03:36:61:1B:AF:D6:B1:30:29:88:6E:08:7B:FD:E9:F9:3D:38
X509v3 Authority Key Identifier:
keyid:1F:45:6C:C5:B7:CE:3C:20:79:F7:86:FE:C1:DF:BC:B2:52:43:99:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:df:8f:36:15:3e:04:ea:b1:5c:33:b9:55:2c:4f:2b:5d:b3:
9a:7b:93:8e:28:db:73:fd:aa:ec:b1:52:93:bb:88:5e:33:6e:
2e:63:d1:a2:ee:50:7a:a9:e3:7f:e0:c9:7e:58:de:79:c3:ee:
a8:e0:57:78:b5:a1:e8:92:18:db:bc:cf:2d:1d:71:02:07:77:
60:6b:e9:08:1c:a5:6f:46:57:8c:da:4a:3e:fe:6c:31:cf:cf:
93:d4:00:35:d0:97:b6:40:8a:78:fc:22:7a:6c:9b:cf:98:28:
f1:ac:13:ab:13:62:f3:17:07:9f:d0:bc:bd:ae:9a:1c:9b:31:
00:2f:3c:83:ca:4d:1a:5e:48:e0:6e:a7:a8:76:3b:d4:3d:0c:
66:4b:64:2c:01:28:ba:d2:19:66:80:bd:6c:c3:4a:ea:f9:8e:
25:bf:a6:8f:f5:42:1c:55:a6:85:d1:8f:6c:94:d5:00:b0:00:
ef:87:3c:12:80:af:59:ac:79:d2:31:00:46:35:52:7e:26:55:
c1:00:07:ce:d0:97:ab:b8:c9:65:db:26:34:6d:7f:09:9d:9a:
9a:af:e6:4a:1e:d2:29:e9:55:29:d3:f2:60:64:3e:aa:14:f2:
87:7c:70:fe:87:07:85:29:a3:fd:aa:b9:ab:37:62:82:89:a5:
87:10:dd:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:42:49 2026 by rpki-client