Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
File: H0VsxbfOPCB594b-wd-8slJDmUE.mft (raw, json)
Hash identifier: WybUU7wW9nhqgirvs4oD1wm6q1WQJWh91UiTDedtcjk=
Subject key identifier: 66:F3:B3:8F:36:7D:D6:26:89:9A:4B:EF:4D:59:87:3F:58:22:B3:CB
Authority key identifier: 1F:45:6C:C5:B7:CE:3C:20:79:F7:86:FE:C1:DF:BC:B2:52:43:99:41
Certificate issuer: /CN=1f456cc5b7ce3c2079f786fec1dfbcb252439941
Certificate serial: 019D2996F2D8B4BE0AC0582704DD7F67EDD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
Manifest number: 0F79
Signing time: Thu 26 Mar 2026 10:00:51 +0000
Manifest this update: Thu 26 Mar 2026 10:00:51 +0000
Manifest next update: Fri 27 Mar 2026 10:00:51 +0000
Files and hashes: 1: H0VsxbfOPCB594b-wd-8slJDmUE.crl (hash: Q7l4B9V8iyCs0a+FBB2OIRcsi0g/aHwI4T+sQ7NnFx0=)
2: yJkXqf-6_RxZaZzbiNXMwPnxvq8.roa (hash: asQ8pI3HwhkbEj1BiWlijSaj7X1D2Q245alm99XOvIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:f2:d8:b4:be:0a:c0:58:27:04:dd:7f:67:ed:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f456cc5b7ce3c2079f786fec1dfbcb252439941
Validity
Not Before: Mar 26 10:00:51 2026 GMT
Not After : Mar 27 10:00:51 2026 GMT
Subject: CN=66f3b38f367dd626899a4bef4d59873f5822b3cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:84:5f:5f:75:fd:7d:ce:b9:22:dd:11:ba:bd:
fa:4f:99:c7:2d:62:6d:66:d7:b1:18:fc:40:52:0f:
c4:08:fd:57:37:85:c3:2d:77:e2:a5:26:81:37:3c:
36:aa:ed:8f:83:88:2c:35:cd:1a:5b:e6:44:77:3d:
c9:5f:e1:ec:bb:cf:33:f9:15:5d:82:f7:0b:7d:8a:
33:ee:d0:75:13:f9:c8:7d:f2:60:4f:9a:22:39:c9:
e6:df:85:03:21:e5:4e:f3:15:ca:a4:89:85:5d:d1:
74:1d:8d:6e:23:15:36:d3:79:46:6b:f8:b8:c7:54:
58:c0:51:dc:84:3d:31:1c:29:11:17:da:5b:26:26:
cf:e2:4e:67:91:f9:b5:1c:a5:db:f5:31:6f:b0:7e:
88:43:eb:05:f8:7c:97:1e:db:fc:32:59:c3:dd:ea:
16:46:80:28:c9:12:a1:68:d6:b2:db:eb:f1:44:00:
bd:0f:8d:b1:16:79:2e:c5:9d:db:1a:69:01:a8:64:
10:c4:67:0d:57:25:45:f4:89:66:9b:94:90:1f:46:
26:cb:1a:88:08:40:ba:27:a0:80:53:ef:72:67:5e:
85:bf:e1:07:84:0f:f4:5b:fd:5b:95:d0:9f:71:88:
18:22:26:e8:ba:fa:1f:b0:a5:6f:6f:75:69:1e:33:
0a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F3:B3:8F:36:7D:D6:26:89:9A:4B:EF:4D:59:87:3F:58:22:B3:CB
X509v3 Authority Key Identifier:
keyid:1F:45:6C:C5:B7:CE:3C:20:79:F7:86:FE:C1:DF:BC:B2:52:43:99:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:02:56:d3:a5:b8:bd:a7:31:a0:53:e4:93:90:ef:56:81:81:
1c:c0:37:7c:80:95:0d:20:47:eb:43:76:b0:a4:d6:47:6c:d9:
7d:1c:0e:40:8a:cf:5b:17:99:6b:4f:e8:73:d6:18:d0:1e:e1:
f4:e8:1f:f0:be:2c:dc:27:90:65:66:82:34:c5:60:6c:ce:64:
50:c5:8d:56:2f:28:9d:f5:d5:ad:f9:0e:66:06:c7:00:d9:11:
25:15:06:92:01:c3:4c:6d:12:01:4c:de:6a:1c:8f:b4:40:5d:
fc:b9:07:1d:cd:7d:be:e4:5d:12:5a:e9:3a:c9:dc:16:a4:7d:
3d:d3:53:5e:44:cf:9b:ef:b8:89:ed:9a:6e:4b:83:82:a4:65:
ca:21:94:bf:30:58:c2:81:74:e7:c4:41:84:1c:17:3a:11:55:
a1:75:99:f0:d3:af:00:00:0d:e7:91:0c:ef:23:19:95:70:fc:
9f:cf:30:85:dd:3b:8f:30:11:48:98:cd:4e:e8:c0:94:fb:03:
9b:dd:9a:0e:51:e5:3b:5f:84:99:bd:ad:85:b9:75:06:4c:4a:
2a:21:58:b9:88:1b:54:ed:17:d3:a0:7d:fa:e8:47:f8:fc:58:
e6:2f:e0:94:ed:df:7a:09:b0:ea:e8:21:91:10:0e:a4:14:71:
72:78:f0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:32:32 2026 by rpki-client